I think you are misunderstanding the law. It is not protecting them from the doctors questions. It is protecting them from the government that gets the answers to the doctors questions in their data base.
If that is the case, then the correct response (that is, the response that most closely adheres to pro-freedom/limited-government principles) would be to prohibit that information from being entered into any database that may be accessible to any government agency or authority. The correct response is NOT to legislate what a doctor may or may not say to a patient or ask a patient.