My wife informed her boss that our son tested positive for COVID. He doesn’t live with us but as a precaution she thought her boss should know. We got tested even though it was 3 weeks since we had contact. We tested negative. Her boss in turn sent an e- mail to other department heads naming my son as having a positive test. I thought in case like this confidentially was the law. Is this shit legal?