Tricky one this. Not because understanding the law is complicated, but because anyone you name or identify can do anything they want to in response.
I'll give you the devil's advocate response, not the one based on natural justice.
The notes will contain information gathered and recorded by the medical staff, and what's termed "third party information" In a perfect world, any person who contributed to the notes should have been asked for consent for their part of the information to be shared. Anyone who was an employee of the hospital is sort of covered if the hospital gave consent, but if just one sentence says that "The next door neighbour told us that Mrs Smith's favourite colour is blue" then the next door neighbour should have been asked for consent before that part of the note was shared. I'm giving a deliberately bland example. The notes could just as easily say that the neighbour called child protection services, or that a relative disclosed that they had suffered depression secondary to childhood abuse. That person might feel they have been injured by both the hospital and the "publisher" and seek damages.
Anyone named in the notes who thinks they are identified and injured by anything you publish could decide to act against you. They may not win but they could decide to act.
As far as I know there is nothing to stop someone from publishing their own medical records if they want to
Correct. the patient cannot breach their own confidentiality, but they are not protected from lawsuits brought by anyone over third party information being put into the public domain.
Would it be considered defamatory to expose the mistakes they made if they were identified?
Key word here is
mistakes. If you accuse someone of making a mistake, you may need to be able to prove it was a mistake...and the benchmark would be against practices at the time, not today's standards. If they took action against you, their defence would only need to be that they acted appropriately for the time and the duty of care they had.
I know from your previous posts that one part of your story relates to relatives lying to doctors. There is no burden of responsibility on a doctor to investigate the history they are given for inaccuracies or lies. They might choose to verify it if it felt wrong, but a doctor who is told different things by two different people is not expected to spend their evenings being a detective. The fact that they could have done something is not the same as having a duty to do it.
A doctor acting correctly based on a lie they were told is not the same as a doctor making a mistake, and a reasonable lawyer could use that as part of a lawsuit. When your story very clearly paints relatives as lying and untrustworthy...and that their actions were deliberately meant to decieve the doctors, well, it would be easy enough for a doctor to object to being painted in a poor light in those circumstances.
If you remove it one step further. Dr Smith takes the history and believes the lie, then Dr Jones acts on the information reported as true by Dr Smith.....well, Dr Jones may well react to you painting him in a negative light. In court, while sueing you, his case will be that HE didn't make a mistake, not that mistakes weren't made.
Or would they be unable to respond at all without breaching their own rules of confidentiality towards the patient.
They can respond....and if your friend feels like it she can then sue them for breaching confidentiality...... but you have to ask yourself if a court would find fault in a doctor using information you've already put into the public domain (with the patient's consent) to defend their reputation? I think it would be very hard to argue that there was any confidentiality left to breach.
I think this is a good example of why lawsuits can become so complex with suits and countersuits.
If you did get sued, it could be by any of a number of people (even your friend's relatives) and you'd need to demonstrate blame on their part to defend yourself. I think you'd need more evidence than the notes would provide you with, and with absolute respect to your friend, you'd have to trust that she isn't making any errors of her own in telling her story.
So, my very short answer is lawsuits are possible and welcome to the minefield.
Craig