I'll ask again.
Since she's always worked in healthcare, my wife's employer has always been under HIPAA.
It may not be HIPAA, but there are statutes in effect about releasing confidential medical information without permission that apply to any and all employers.