You must keep the information in medical files separate from nonmedical records, and you must store the medical files in a separate locked cabinet. To further guarantee the confidentiality of medical files, designate a specific person to have access to those files. These laws allow very limited disclosure of medical information.
Under the law for example you may:
• inform supervisors about necessary restrictions on an employee’s duties and about necessary accommodations
• inform first aid and safety workers about a disability that may require emergency treatment and about specific procedures that are needed if the workplace must be evacuated, and
• provide medical information required by government officials and by insurance companies that require a medical exam for health or life insurance.
Under GINA, there are very few circumstances in which you may disclose genetic information about an employee . If you receive a court order specifically requesting the information or your company is under investigation for GINA compliance, for example, you may disclose this information to the appropriate person.