I think your friend might need a refresher on proper patient confidentiality.
I believe as long as he refers to her only as "The patient" he can discuss the details of the case as much as he likes so long as he does not identify her.
father does not know she has any of this.
This was a no-no back in the days when I worked in health care. You did not discuss the status of non-patients in relationship to the patient's care.
Maybe that has changed (it's been 15 years), or maybe that was a local policy. We would not have been allowed to say anything more than "The testing status of the baby's father is unknown".
The father is not a patient. The father is unaware about the state of disease of the mother. He is entitled to know the health of the baby. So the doctors have by the time of this writing alerted that the baby is infected with certain problems as a result of ... / potentially may have HIV.
The mother was not tested for HIV. She stated as much.
He's (a US citizen) probably really dumb but he may figure out that if his baby potentially has HIV, it can only get it from the mother. The testing status of the baby's father is indeed unknown...that was part of the point.
If you know you have HIV and have unprotected sex without alerting your partner, you should be prosecuted.