Hi and welcome to JA. Ray here to help you today.
She may consider a HIPAA complaint if there was medical information disclosed to third parties.She would need to get a note from the treatment facility here to document her condition and treatment.Thats a reasonable request if this was done privately.
If they granted the medical leave here the discussion/disclosure would be the problem, this should have been done totally privately without anybody else involved.HR should have talked to her immediately and privately.
Filing a Complaint. If you believe that a HIPAA-covered entity or its business associate violated your (or someone else's) health information privacy rights or committed another violation of the Privacy, Security, or Breach Notification Rules, you may file a complaint with the Office for Civil Rights (OCR).
She might have a civil suit here against employer for the invasion of her medical privacy.Doing this in front of third parties certainly does no seem appropriate to guard her privacy.She may consider a local employment lawyer to pursue such a suit and file her complaint too.
Here is lawyer referral to do so.
She can also file with EEOC if she thinks there was discrimination involved based on her race, sex, age, etc.This would also be a civil cause of action as well.
I think making the complaints here protects her, you file retaliation with EEOC if they try to terminate her along the way as you have documented prior events.
I appreciate the chance to help you today.Thanks again and the best to you both.I hope she can get the care she needs here.
Have a great memorial day weekend.