Your employer has strictly limited rights to access your medical information
Premiumfoundational7 minutes
The Situation
What They Said
“As your employer, I have a right to know about your medical condition.”
Medical privacy in the workplace is a frequently misunderstood area of law, and employers often assert a broad right to employee health information that does not exist. When a worker requests a schedule modification, applies for FMLA leave, or simply appears ill, supervisors sometimes press for detailed medical disclosures — diagnoses, treatment plans, prognoses — that go far beyond what the law permits. Workers who fear job loss often feel compelled to disclose information that the employer has no legal right to require.
The Americans with Disabilities Act and, in many contexts, HIPAA together establish strong limits on employer access to medical information. The ADA prohibits employers from requiring medical examinations or making medical inquiries of current employees unless they are job-related and consistent with business necessity. And even when medical information is legitimately obtained — through a fitness-for-duty exam, an FMLA certification, or a workers' compensation process — the ADA requires that it be kept strictly confidential in a separate file, disclosed only to specific individuals with a need to know.
The employer's statement 'I have a right to know about your medical condition' is overbroad at best and false at worst. Employers have limited, specific rights to medical information in defined circumstances — not a general right to know an employee's diagnoses, treatment, or health history. Note: State law may provide additional protections beyond the federal baseline described here — many states have enacted additional medical privacy and disability non-discrimination protections.
The Fallacy
Overbroad Authority Claim (Generalizing a Limited Right into an Unlimited One)
The employer is committing an Overbroad Authority Claim — taking a limited, context-specific right (to request a fitness-for-duty certification when genuinely necessary) and generalizing it into a blanket right to know any medical information about any employee. This is legally incorrect. The ADA specifically restricts employer medical inquiries to those that are 'job-related and consistent with business necessity' — a high standard that curiosity, general concern, or administrative convenience does not meet.
This overreach is particularly harmful because medical information is among the most sensitive personal data a person possesses. Disclosures about mental health, HIV status, cancer diagnoses, reproductive health, or addiction can lead to discrimination, social stigma, and professional harm. The law recognizes this sensitivity by treating medical information differently from other employment records and imposing strict confidentiality obligations even when disclosure was made lawfully.
The proper framework is specific: an employer may require medical documentation when an employee requests a reasonable accommodation, when job-related concerns create a genuine question about fitness for duty, or when FMLA leave is sought. In each case, the employer receives the minimum information necessary — not full access to the employee's medical history. 'I have a right to know about your medical condition' describes no such specific right.
What the Law Says
Your Legal Foundation
Americans with Disabilities Act of 1990 (ADA), 42 U.S.C. § 12112(d)
§ 12112(d)(4) — Medical Examinations and Inquiries of Current Employees
“A covered entity shall not require a medical examination and shall not make inquiries of an employee as to whether such employee is an individual with a disability or as to the nature or severity of the disability, unless such examination or inquiry is shown to be job-related and consistent with business necessity.”
This provision prohibits employers from demanding that employees disclose diagnoses, medical conditions, or the severity of any disability unless the employer can demonstrate that the inquiry is genuinely job-related and required by business necessity — a high standard. General curiosity, concerns about productivity, or a supervisor's desire to understand what is 'wrong' with an employee does not satisfy this standard. The employee may decline to disclose medical details while still providing any documentation required for a specific, legally justified purpose.
Americans with Disabilities Act of 1990 (ADA), 42 U.S.C. § 12112(d)(3)(B)
§ 12112(d)(3)(B) — Confidentiality of Medical Information
“Information obtained regarding the medical condition or history of the applicant shall, except as provided in clause (i), (ii), and (iii), be treated as a confidential medical record.”
When medical information is legitimately obtained by an employer — even through a lawful inquiry — the ADA requires it to be maintained in a separate confidential file, not in the general personnel file. Only supervisors who need to know about work restrictions, safety personnel in emergencies, and government officials who request it may access it. Sharing an employee's medical information beyond these categories is an independent ADA violation.
What Scripture Says
God's Word on This
Proverbs 11:13 (NIV)
“A gossip betrays a confidence, but a trustworthy person keeps a secret.”
Medical information shared in the context of an employment relationship is shared under an implicit expectation of confidentiality and limited purpose. An employer who uses that information beyond its intended purpose — sharing a diagnosis with colleagues, using it to make adverse employment decisions, or treating the employee differently because of it — betrays that trust in precisely the way this verse describes. The law's confidentiality requirement reflects this same principle of trust.
Psalm 139:14 (NIV)
“I praise you because I am fearfully and wonderfully made; your works are wonderful, I know that full well.”
A person's body, health, and physical condition are among the most intimate aspects of their God-given humanity. The impulse to protect medical privacy flows from the recognition that health is deeply personal — it is not an employer's data point but a person's lived reality. The ADA's confidentiality requirement honors the dignity of the employee as a complete person, not simply a productive unit whose medical history is the employer's business.
🔒
You Know the Law — But Do You Know What to Say?
Reading your rights is one thing. Using them under pressure — calmly, correctly, in the right words — is what actually protects you. Members get the scripted rebuttal for this exact situation: what to say first, what to say if they push back, the tone to use, and the constitutional provision to cite. Practise out loud with audio until it's automatic.
Identity & Dignity and Gender & Equality are free · All 17 domains from R89/month · Cancel anytime
Not ready to subscribe? Get the free checklist first.
10 South African rights scenarios — what to say, what to cite, what to refuse. Free, no card needed.
What They'll Say Next
Common Counter-Arguments
After you respond, they may push back with these arguments. Members get the full rebuttal for each.
They might say: “HIPAA prevents your doctor from sharing information with us without your consent, but once you tell us yourself, it's not confidential.”
🔒 Subscribe to see the full rebuttal and legal counter-argument.
They might say: “You're covered by workers' compensation — that program requires full medical disclosure.”
🔒 Subscribe to see the full rebuttal and legal counter-argument.
Know Your Rights. Know Your Word.
149 South African rights scenarios — exact rebuttals, constitutional law, and Scripture. Practise out loud with audio. Free to start with 2 full domains.