Suit: CVS violating HIPAA privacy.