Your Medical Privacy Rights in the Accommodation Process

Your medical information is protected by law, even during the accommodation process. Understanding your privacy rights helps you navigate accommodation requests while keeping sensitive information confidential. Here's what your employer must do; and cannot do; with your medical information.

The Core Protection

The ADA requires employers to keep all disability-related information confidential. When you disclose your disability and request accommodation, your employer cannot share that information freely. They're bound by strict confidentiality requirements that protect your privacy.

ADA Confidentiality Requirements

Separate Medical Files

Your employer must keep all medical information in a separate file from your regular personnel records. Your accommodation documentation, medical notes, and disability-related information should not be in the same file as your performance reviews, employment application, or other personnel documents.

Limited Access

Access to your medical information must be restricted to those with a legitimate need to know. Not everyone in HR, not your coworkers, not curious managers; only people who actually need the information to address your accommodation or related matters.

No Disclosure Without Consent

Your employer cannot disclose your disability or medical information to others without your written consent. They can't tell your coworkers why you have a flexible schedule, announce your condition in a team meeting, or gossip about your health with other managers.

Who Can Know What

There are limited exceptions to confidentiality. Your employer may share information with:

Supervisors and managerswho need to know about necessary work restrictions or accommodations. But they should only know what's needed to implement the accommodation; not your full diagnosis or medical history.

First aid and safety personnelif your disability might require emergency treatment. This is limited to information necessary for emergency response.

Government officialsinvestigating ADA compliance.

Insurance providers and workers' compensationwhen required, but limited to what's necessary for those purposes.

Even in these cases, the disclosure should be limited to what's actually necessary; not your complete medical information.

HIPAA and Your Employer

A common misconception: HIPAA (the Health Insurance Portability and Accountability Act) doesn't directly regulate most employers. HIPAA applies to healthcare providers, health plans, and healthcare clearinghouses; not to employers in their role as employers.

However, you're still protected:

The ADA itselfrequires employer confidentiality of medical information

Your healthcare provideris bound by HIPAA and cannot release your records to your employer without your authorization

State lawsmay provide additional privacy protections

• The bottom line: your employer must keep your medical information confidential under the ADA, regardless of whether HIPAA applies to them directly.

Your Privacy Rights in Practice

Control What You Disclose

You control what medical information you provide. You can:

• Request documentation that doesn't name your diagnosis
• Limit disclosure to functional limitations rather than symptoms
• Decline to provide information about unrelated conditions
• Push back on requests for more information than necessary

Request Private Conversations

You can request that meetings about your disability or accommodations be held in private locations where other employees won't overhear. Your employer should accommodate this request to protect your confidentiality.

Control Who Knows About Your Accommodation

If coworkers will notice your accommodation (like a modified schedule), you get to decide what, if anything, to tell them. Your employer cannot explain your accommodation to coworkers without your permission. If asked, they should deflect: 'That's a personnel matter I can't discuss.'

If Your Privacy Is Violated

If your employer shares your medical information inappropriately:

**Document the violation.**What was shared? With whom? When? How do you know?

Address it directly.'I understand my medical information was shared with [person]. This information is confidential under the ADA. How did this happen, and how will you prevent it in the future?'

**Escalate if necessary.**If the response is inadequate, escalate to HR leadership, file an internal complaint, or consider external options.

**Consider formal action.**Privacy violations can be part of an EEOC complaint if they constitute discrimination or create a hostile environment.

Practical Tips for Protecting Your Privacy

**Provide focused documentation.**Give your employer only what they need; not your complete medical records.

**Work with your healthcare provider.**Ask them to write letters focused on function and limitations, not detailed clinical information.

**Mark documents confidential.**While this doesn't create additional legal protection, it reinforces the expectation of confidentiality.

**Keep your own copies.**Retain copies of everything you submit.

**Be thoughtful about what you share verbally.**Once you say something, you can't unsay it. Share what's necessary, not more.

What This Means for You

You don't have to choose between getting accommodations and protecting your privacy. The law requires your employer to keep your medical information confidential. Understanding your rights helps you navigate the process while maintaining control over your private health information.

If your employer violates your privacy, that's a serious matter; and one you can address through internal channels or formal complaints if necessary.

Next Steps

Learn more about documentation and privacy:

Do I Have to Disclose My Disability to Get Accommodations?: Control what you share

What Employers Cannot Ask For: Medical Documentation Limits: Know the boundaries

How to Respond to Inappropriate Medical Documentation Requests: Push back when necessary

How to Document Retaliation and Discrimination Effectively: Protect yourself with good records

• Disclaimer: This article provides general information about medical privacy rights in the accommodation process and is not intended as legal advice. Privacy laws vary by state and situation. If you believe your privacy has been violated, consult with a qualified employment attorney or contact the Equal Employment Opportunity Commission (EEOC).