Can my employer share my medical information?

Employees often worry whether medical information provided for leave or accommodations will be spread around the workplace. The ADA imposes confidentiality obligations on medical information obtained through disability-related inquiries or medical examinations required by the employer. ^[1][2][3] General rule: keep it confidential Information must generally be kept separate from regular personnel files and treated as confidential, with limited exceptions. ^[2] Permitted disclosures Supervisors and managers may be informed of restrictions or accommodations needed (not necessarily the underlying diagnosis). First-aid and safety personnel may be told if emergency treatment might be required. Government officials investigating compliance may receive information as required. ^[2] HIPAA and employers HIPAA privacy rules apply to covered entities (health plans, health care providers, clearinghouses)—not most employers in their capacity as employers. If the employer administers a self-insured health plan, HIPAA may apply to the plan separately. Do not assume HIPAA blocks all employer use of occupational health data; the ADA still limits many disclosures. ^[3] If you believe information was mishandled Consider internal HR complaints, EEOC charges for ADA violations, and state privacy laws where applicable. ^[3]