Privacy in the Workplace FAQ
What are the rules for handling employee medical records?
6. What are the rules for handling employee medical records?
A number of laws, including the Americans with Disabilities Act, the Genetic Information Nondiscrimination Act, and the Health Insurance Portability and Accountability Act, require employers to maintain the confidentiality of employee medical records. These records must be kept in separate, secure files, with access strictly limited. For more information, see Nolo's article Keeping Personnel Files and Medical Records Confidential.