He could start by filing complaints with both the state organization that licenses the facility, and the state organizaton that licenses any and all of the "professionals" on their staff. It might be helpful if they could hire a lawyer to help with this process but it's certainly not necessary. They should look up the regulations that each respective organization has, which is probably on their websites, and write a detailed account of what areas were not followed and how.
