When you go to rehab, medical information you give your employer for leave or an accommodation is generally subject to workplace confidentiality rules, while the rehab’s treatment records may have separate protections under HIPAA and 42 CFR Part 2. These are different privacy systems: your employer is not automatically entitled to your full treatment record simply because you request time away.
What medical information must an employer keep confidential?
The EEOC states that employers must keep employee medical information confidential, with limited exceptions, and generally maintain it separately from ordinary personnel files. That includes information obtained during disability-related inquiries, medical certification, and reasonable-accommodation processes.
Can my supervisor tell coworkers I am in rehab?
Employers should not disclose confidential medical information to coworkers. A supervisor may need limited information about work restrictions or scheduling, but coworkers generally do not need to know the underlying diagnosis or treatment.
Can HR ask for medical documentation?
Sometimes. FMLA, disability-accommodation, sick-leave, or short-term disability processes can require medical certification or supporting documentation. The request should be tied to the applicable legal or benefit process rather than becoming an unlimited demand for treatment records.
Does HIPAA stop my employer from asking questions?
HIPAA primarily governs covered health plans, health-care providers, clearinghouses, and their business associates. It does not generally regulate an employer acting in its role as employer. Workplace privacy often comes instead from the ADA, FMLA, state law, employment policies, and other rules.
What protects my rehab records?
If the treatment program is subject to HIPAA and/or 42 CFR Part 2, those rules restrict how the program can disclose protected information. Part 2 provides specific confidentiality protections for records from federally assisted substance use disorder programs.
A limited release of information may be used when a leave administrator needs confirmation of treatment or other authorized information.
Who at work may receive medical information?
EEOC guidance allows limited disclosure in situations such as giving supervisors information needed to implement work restrictions or an accommodation, providing emergency information to first-aid or safety personnel, or using information for insurance or workers’ compensation purposes where permitted.
What should I do to protect my privacy?
Use the employer’s official HR or leave process, ask what documentation is actually required, avoid sending unnecessary clinical details broadly, and read any authorization before allowing the treatment center to communicate with the employer or benefits administrator.
Frequently asked questions
Can HR put my rehab information in my normal personnel file?
ADA-covered medical information should be kept confidential and separate from ordinary personnel records.
Can my employer call the rehab directly?
The employer can attempt contact, but the treatment program’s ability to disclose information depends on privacy law and any valid authorization.
Can coworkers be told I have a disability accommodation?
EEOC guidance says employers generally may not tell coworkers that an employee is receiving a reasonable accommodation because that can disclose disability-related information.
Does workplace privacy mean my job is automatically protected?
No. Privacy, leave entitlement, accommodation rights, and job protection are separate legal questions.
Sources
- EEOC: Disability-Related Questions, Medical Exams, and Confidentiality
- HHS: Confidentiality of Substance Use Disorder Patient Records
This article provides general information, not legal advice. Workplace privacy rights depend on the employer, applicable law, and the specific leave or accommodation process.