I will try to explain this as sample as I can as I need some help.
Last year (2014), I couldn't attend the final exams due to medical health problems (suffer from long term disease). so I submitted the required papers to the uni but the course co-ordinator rejected my application because of "there is no clear evidence stopped me from attending the exam". So I appealed that decision to the faculty with a new letter from my doctor explaining everything in details and why I didn't attend the exam.
During the appeal process, the uni contacted the medical centre I go to (the one in the same uni) to verify the the letter (I dont have problem with that). But after they verified the letter, they asked the medical centre about last my visits and why did I see the doctor and how often I come… etc. One of the uni workers told the pro-dean she shouldn't do that and its breaking the laws, and she should make decision in the papers I provided.
then I received the out come of the appeal that still declined my application and I am not eligible to do the exam and why I didn't provide the new letter in the beginning.
After that I applied for hearing appeal (higher level of appeal). After the hearing the declined my application as it was too late to do the exam now (after ~7 months).
If you wounding how I knew all of this, its written in the out comes of the appeals.
I have been depressed and went through a lot of problems because of all this and I think the the faculty decision was based on what the asked the medical centre and affected me in different ways. So I need help, what I should do? I am thinking to sue the university or something similar. If I did this what I am going to get?
TLDR: the university asked the medical centre for my records without my permission.
They can ask, that is not illegal.
The medical center however, cannot provide medical information to them without your consent.