The coppers will walk over as many rights as you let them. You need to let them know that you know what your rights are.
Look up the Privacy Act section 13 and National Health Act section 135AB. Tell them what your rights are.
135AB Breaches of the privacy rules
(1) A breach of the rules issued under section 135AA constitutes an act or practice involving interference with the privacy of an individual for the purposes of section 13 of the Privacy Act 1988.
(2) An individual may complain to the Information Commissioner about an act or practice in relation to the operation of rules issued under section 135AA of this Act
If you dont know your rights you have none.