Yes, there is a Patient Privacy Act, but Im almost sure its written into contracts that teams are allowed to disclose injuries and surgeries of a non personsl nature. I refer you to Nene, who I'm sure would have loved his one-ball surgery to stay under wraps.