Are your medical files private?

I was under the impression that individual medical records and health insurance databases were supposed to be kept confidential by law. Can you tell me what resources are available on the net for one to check out these records and if they are made available? Medical records are private and require your consent for transfer or for disclosure. Only a court order can get access to them without your approval.