Health information, in the employment context, is any data about an employee's medical condition, treatment, or health status that reaches the employer — through accommodation requests, leave certifications, workers' compensation claims, drug testing, wellness programs, and benefits administration. It is the most tightly regulated category of workforce data, and the one where well-meaning informality creates the most liability.
The core discipline is architectural: health information is kept apart, seen by few, and never allowed to sit in the general personnel file.
Employers do not have to seek health information to end up holding it. It arrives through leave requests supported by medical certification, accommodation conversations, doctors' notes for absences, injury reports and workers' compensation files, fitness-for-duty exams, and — uninvited — through employees who simply tell their manager things.
That last channel matters. A diagnosis mentioned in a hallway conversation is health information the moment a manager knows it, and it carries the same confidentiality expectations as a formal certification. Managers need to be told two things plainly: do not ask for medical detail, and when it is volunteered, pass the situation to HR rather than becoming the keeper of it.
Disability-related and medical records must generally be maintained separately from the personnel file, with access restricted. This is a legal requirement in many contexts, not a preference — and it is the requirement most casually violated, because filing everything together is easier.
The practical standard: a distinct medical file per employee, whether physical or electronic, accessible to the small set of people administering leaves, accommodations, and claims — not to managers, not to HR generally. Supervisors receive what they operationally need, which is restrictions and dates, never diagnosis: an employee who cannot lift more than fifteen pounds, not an employee with a herniated disc.
The exposure is not only disclosure. A manager who knows an employee's condition, and later disciplines, passes over, or terminates that employee, has handed the employee the outline of a discrimination claim — the decision-maker knew. The inference exists whether or not the knowledge played any role.
Restricting who knows is therefore protective in both directions: it honors the confidentiality obligation, and it keeps decision-makers clean. The fewer people who know, the fewer decisions can be colored by the knowing — and the easier that is to demonstrate later.
Employers routinely believe HIPAA governs everything health-related they touch. Mostly it does not: HIPAA binds health plans and providers, and while data from the employer's group health plan carries its own strict rules — including firewalls between plan administration and employment decisions — the medical note in an HR file is generally governed by disability law, state privacy statutes, and workers' compensation confidentiality rules instead.
The practical upshot cuts the other way from the common assumption: the absence of HIPAA does not mean absence of obligation. The separate-storage and limited-access duties apply regardless, and in California, medical information carries additional statutory protection with its own consent requirements.
New channels have quietly widened the intake:
Each deserves the same questions: who can see it, where is it stored, how long is it kept, and does it need to exist at all. Absence systems in particular are better configured to record leave types than reasons.
Employer's Guardian helps employers structure leave documentation, medical file handling, and the boundaries that keep supervisors safe through leave-of-absence management.
This article provides general educational information, not legal advice. Medical confidentiality requirements vary by jurisdiction and context. Consult qualified counsel regarding your specific obligations.