Keeping Medical Information Private

California law mandates that you establish appropriate procedures to keep all employee medical records and information confidential and protect them from unauthorized use and disclosure. Failing to establish these procedures is a misdemeanor and allows an employee to collect monetary damages, attorneys’ fees and the costs of litigation.¹

Under state statutes, you cannot use or disclose medical information pertaining to your employees without a written authorization from the affected employee.² This prohibition includes knowingly permitting an employee to use or disclose another employee’s medical information.