What about being between a rock and a hard place with regard to the Federal Privacy Act? It says you can’t ask/demand medical information and you are following that law. Seeing as it’s Federal it’s superior to state law.
That would seem to be a resonable excuse. I think in the end it’s likely to lead to court.That might be stressful but probably winable.