The FCPA similarly differentiates. However the practical problem is that running a defense based on whether a certain activity was a facilitation payment (to secure the performance of a "routine government action") means you essentially have to admit that the potentially unlawful activity actually took place, and you move onto generally very treacherous ground. For that reason most companies don't go that route.

In any case as others have noted it's not relevant here because getting someone's medical records isn't a service that you're entitled to.