It seems like your interest is pedantic combat, not the law, but here is some information anyway.

FOIA: https://secure.ssa.gov/apps9/eFOIA-FEWeb/internet/main.jsp

HIPAA: http://www.cga.ct.gov/2013/rpt/2013-R-0124.htm

It seems HIPAA enacts a 50-year period of silence.