I guess he invaded his own privacy, by agreeing that he would arrange for his grades to be sent to me by the school.

Also, while your straw man was amusing, it's also mostly wrong. The rules regarding PHI disclosure from covered entities to spouses is fairly complex -- not to mention non-spouses. You might be interested in this link:

https://www.hhs.gov/hipaa/for-professionals/faq/488/does-hip...