I had mentioned some health issues I had to a coworker friend outside of work who happens to be a medical doctor. They then went and told my supervisor, I had not missed any work time or assignments due to these issues and therefore never mentioned it to my supervisor, but after hearing the information, she confronted me about the issues. Then she told her supervisor. That individual then responded to an email request for my assistance on a project from someone in another area of my institution that I couldn't help because I have been having health issues. That email was then distributed to even more people. These people did not need to know that I had any medical issues and now it looks as if I cannot do my job. And as I said they should not know about it since it does not affect my work.

Seems like a HIPPA violation for telling relatively strangers I have medical issues and defamation that I cannot do my job because of them. Any guidance on how this should be handled.

This isn't covered under HIPAA as the doctor was your friend and you voluntarily told him your conditions rather than him being your treating doctor.

While I agree it may be unethical, it's not a privacy violation. I suggest you talk to HR about this situation.

Seems like a HIPPA violation for telling relatively strangers I have medical issues and defamation that I cannot do my job because of them. Any guidance on how this should be handled.

If you understood what HIPAA (not HIPPA) covers then it would not seem like a violation. HIPAA protects you from having your medical provider reveal information about you to a 3rd party without your permission.

So, since you volunteered the information to a friend, there is no HIPAA involvement here at all.

Unless someone specifically stated that you cannot do your job, then there is no defamation.

What you should do is go to HR and explain the situation and ask that this issue not be discussed within the company until and unless your health issues do affect your job performance.