Karen Memes

Medical condition that prohibits her from wearing a mask? Sounds like nonsense to me. Maybe she is allergic to stop signs and red lights as well.
And HIPAA would not prevent her from disclosing that information, or mean that she does not have to disclose the information. HIPAA prevents providers and staff from disclosing a patient's medical records without that patient's express consent.

Her "medical condition" can likely be found in the DSM-V