On Monday, Chief U.S. District Judge Cathy Bissoon denied a Department of Justice request to force UPMC to turn over records for minor patients who received gender-affirming care. In doing so, she did not mince words about the federal government’s approach.

“Left to its devices, the DOJ would trample states’ rights to amass deeply personal information — regarding minor children — in service of its crusade to eliminate medical care that, until recently, was in its own eyes legal,” the judge wrote.

Beyond the strong language in the four-page order lies a far more important principle.

The strength of the order is not about transgender patients of any age. It is not about the defense of any individual identity.

It is about a deeper protection that affects everyone.

It should not hinge on distrust of the government. The question is not whether federal officials believe they are acting in good faith. Whether we trust the government or not, the right to our own medical information is sacrosanct.

Medical privacy comes first.

Not politics. Not controversy. Not federal investigations. Privacy.

This is not privacy in the way people think about banking information or personal lives. This is medical privacy. We do not ask people to publicly share their cancer diagnoses. We do not demand explanations of mental health struggles. We do not subpoena details about prescriptions or broken bones.

Federal law protects that information for a reason. Sharing it without a patient’s consent is illegal. Health care providers, health plans and related health entities that violate those protections face fines and penalties.

Protecting this basic human right — the right to keep your medical story to yourself — is not controversial. The underlying treatment might be. The protection is not.

If rights can be set aside because of one diagnosis or one course of treatment, it is a short step to deciding they can be overwritten for any diagnosis or any treatment.

If UPMC were to concede on these issues, what would come next?

What justification would be used the next time a diagnosis falls out of favor or a course of treatment becomes politically charged?

Would there be a demand for records related to drug rehabilitation? For patients managing chronic pain? For individuals undergoing long-term treatment for autoimmune disorders?

Could it be argued that anyone treated at a hospital that accepts public funds has diminished privacy — that their records, in some form, are subject to broader scrutiny?

Should government employees expect their medical histories to become an open secret because of the work they do?

These are not dramatic hypotheticals. They are the natural questions that arise whenever a bright line around medical confidentiality is moved.

Slippery slope arguments are always dangerous. They invite extremes. They assume the worst.

But they also demand a chess-like view of the board.

Every judicial ruling changes how the rules are applied. Some broaden authority. Some restrict it. All of them open the opportunity to examine the law in new ways.

That is why boundaries matter.

Medical privacy is one of those boundaries. It exists not because every treatment is universally accepted but because every patient is entitled to dignity. The diagnosis should not determine the protection.

The controversy surrounding gender-affirming care does not erase the long-standing principle that medical records belong first to the patient — especially when those patients are minors.

The government may investigate fraud. It may question billing practices. It may test the limits of its authority. But it cannot redraw the boundary around deeply personal medical information simply because the treatment at issue is debated.

When the line around medical privacy moves for one diagnosis, it moves for all.