It certainly sounds that way to me.  I'm not sure exactly what you should do about this right now, because there is quite a bit more information that would be needed for reliable advice.   But you should absolutely follow this up, to "make a record" if for not other reason."Making a record" is a lawyer's phrase for preserving evidence for later use.  Here, it's possible that nothing will happen -- or appear to happen -- because of the possible invasion of your privacy.  However, if you are later discriminated against because of your medical history, it would be difficult to go back and reconstruct that invasion of privacy months or even years later -- so you document it now.  It's good insurance -- and the fact that you've done it might be enough to keep your employer honest, and avoid the problem altogether, which is the best result.