ADA, Medical Privacy & Confidentiality: What Every Employer Needs

The Americans with Disabilities Act strictly limits when and how employers may request medical information from employees. During pre-employment, employers may not ask disability-related questions or require medical exams before making a conditional job offer. After a conditional offer, medical exams are permitted only if required of all entering employees in that job category. Once an employee is hired, employers may only request medical information when it is job-related and consistent with business necessity—typically when the employee requests an accommodation, when the employer has a reasonable belief the employee cannot perform essential job functions due to a medical condition, or when direct threat concerns arise. General wellness inquiries are permitted but must be voluntary. Employers may never ask employees to disclose all of their medical conditions or ask questions that are likely to elicit disability-related information unless the above conditions are met. Aurora Training Advantage's HR webinar on ADA, medical privacy, and confidentiality, led by Melveen Stevenson, provides clear guidance on what you can and cannot ask to keep your organization legally protected.

The ADA requires that all medical information about employees be kept confidential and stored in separate medical files, apart from the general personnel file. Access must be strictly limited: supervisors and managers may be informed only about necessary restrictions or accommodations; first aid and safety personnel may be informed if the condition requires emergency treatment; government officials investigating ADA compliance may be given relevant information. Medical records should be stored in a locked physical location or a secured, access-controlled digital system. HR staff who handle medical information must be trained on confidentiality obligations and the consequences of unauthorized disclosure. Medical information obtained through FMLA paperwork, workers' compensation claims, or accommodation requests is all subject to the same ADA confidentiality requirements. Breaches can expose the organization to significant legal liability. Aurora Training Advantage's HR webinar on ADA medical privacy and confidentiality covers best practices for storing, securing, and handling employee medical records while meeting all federal obligations.

ADA, HIPAA, and FMLA create overlapping—and sometimes conflicting—obligations when employers manage employee medical information, which is why understanding their intersection is critical for HR compliance. The ADA governs employer conduct in disability-related situations, restricting medical inquiries and requiring confidential handling of medical information. HIPAA applies primarily to covered entities (healthcare providers, insurers) rather than to employers directly, though employers who sponsor self-insured health plans have HIPAA obligations regarding protected health information. FMLA requires medical certification for qualifying leave, creating a channel through which employers receive detailed health information that must then be handled under ADA confidentiality rules. All three laws may apply simultaneously when, for example, an employee takes FMLA leave for a condition that is also a disability under the ADA. HR teams must navigate each law's requirements simultaneously without violating any of them. Aurora Training Advantage's HR webinar on ADA, medical privacy, and confidentiality uses real-world case studies to help practitioners manage these complex intersections confidently.

Managers are often the first point of contact when an employee's health affects their work, and how those conversations are handled has significant legal implications. Managers should focus conversations on observable performance and attendance impacts rather than asking about diagnoses or medical details—asking 'I've noticed you've had several absences; is there anything we can do to support you?' is appropriate, while 'What medical condition do you have?' is not. Managers should never speculate about an employee's disability to colleagues or make employment decisions based on assumptions about what a health condition means for performance. When an accommodation request is made or implied, managers should direct the employee to HR rather than attempting to manage the request independently. Any medical information shared by an employee in conversation must be kept strictly confidential—managers should not disclose it to coworkers, even casually. Aurora Training Advantage's HR webinar on ADA medical privacy equips managers with the specific language and boundaries they need to handle health-related conversations professionally and lawfully.

ADA medical confidentiality violations often occur not from deliberate misconduct but from lack of training and unclear processes. Common mistakes include storing medical information in the general personnel file rather than a separate, secured medical file—a direct ADA violation. Sharing an employee's diagnosis or accommodation details with coworkers or other managers beyond the need-to-know threshold is another frequent error. Asking disability-related questions during job interviews or before a conditional offer is made violates the pre-employment inquiry rules. Failing to engage in the interactive accommodation process when an employee indicates a health-related need—even informally—creates legal exposure. Using medical information in performance or termination decisions without proper documentation of legitimate, non-disability-related reasons invites discrimination claims. Payroll systems that display leave reasons linked to health conditions can also create inadvertent disclosure risks. Aurora Training Advantage's HR webinar on ADA, medical privacy, and confidentiality reviews these common pitfalls through real-life case studies, helping HR teams identify and fix vulnerabilities before they become liability.