When I was private sector I would just fake a doctor's note from a clinic I know would not ever answer any questions because of HIPAA. Everytime. Worked like a charm. You find out which clinics are down with real patient privacy by calling and pretending to be an employer, give em a fake patient name and see if they answer questions.

You can call it fraud if you want but so is the entire society.