Oh wow. FCPA violations. One of the key rules of American business is that you
do not dance around with the FCPA [0]. (I suspect many new startup managers are not familiar with the FCPA but you can bet their investors are.) Violations of the FCPA do not just result in fines, they result in actual
jail time for whomever did the bribing, whether they be individual low-level employees, contractors, or CEOs.
That said, the FCPA explicitly allows small "greasing" bribes that encourage low-level bureaucrats to expedite some action they would have taken anyway -- when such greasing payments are legal in the country in question. Obtaining the medical records of a rape victim certainly does not fall within this exception.
[0] https://en.wikipedia.org/wiki/Foreign_Corrupt_Practices_Act