In the course of a meeting regarding an employee's absences from work, a doctor at a veteran's hospital divulged the HIV-positive status and marijuana use of the employee to the employee's union representatives. The employee had told the doctor not to provide this informa- tion to union officials. Were the rights of this federal employee violated under the Privacy Act? Explain. (Doe v. Department of Veterans Affairs, 519 F.3d 456 (8th Cir. 2008))