Medical Fitness Confidentiality Boundaries

1. Meaning

Medical fitness confidentiality refers to the duty to protect an employee’s medical information obtained during pre-employment examinations, periodic health checks, occupational-health assessments, fitness-for-duty examinations, or medical leave processes.

The basic principle is that an employer may have a legitimate need to know whether an employee is medically fit to perform particular duties, but that does not automatically give the employer an unrestricted right to access the employee’s complete medical history, diagnosis, treatment details, test results, or other confidential health information.

Therefore, the central boundary is between:

• Information necessary for employment or workplace safety, and
• Private medical information that is not necessary for the employment decision.

2. Why confidentiality is important

Medical information is highly sensitive personal information. Uncontrolled disclosure can cause:

• workplace discrimination;
• stigma and harassment;
• loss of employment opportunities;
• invasion of privacy;
• reputational harm;
• unnecessary disclosure of unrelated illnesses;
• discrimination against employees with disabilities or chronic conditions.

A sound workplace system should therefore follow the principle of minimum necessary disclosure.

For example, an occupational physician may conclude:

“Fit for the position, subject to avoidance of heavy lifting.”

The employer may need this functional restriction, but ordinarily does not need to receive the employee’s complete medical file.

3. Main boundaries of medical fitness confidentiality

A. Fitness status may be disclosed

An employer can generally receive information necessary to determine whether the employee can safely perform the essential functions of the job.

Examples include:

• Fit
• Unfit
• Temporarily unfit
• Fit with restrictions
• Fit subject to specified workplace accommodations

The disclosure should be limited to what is reasonably necessary.

B. Diagnosis should not automatically be disclosed

A diagnosis may reveal substantially more information than the employer needs.

For example, instead of informing a manager:

“The employee has a particular psychiatric/neurological condition.”

the medical professional may communicate:

“The employee can perform the job but requires a modified work schedule.”

This preserves confidentiality while providing the employer with the information needed for workplace management.

C. Medical records should remain protected

Medical examination reports, laboratory results, scans, prescriptions and detailed clinical notes should generally remain with the healthcare professional or authorised occupational-health service.

Access should be restricted to people who have a legitimate reason to receive the information.

D. Managers should receive only functional information

A line manager usually needs to know:

• whether the employee can work;
• whether restrictions apply;
• what reasonable workplace adjustments are required;
• how long a restriction is expected to last.

The manager ordinarily does not need unrestricted access to the employee's medical records.

E. Employee consent is an important boundary

Where disclosure of detailed medical information is proposed, informed consent is an important safeguard.

Consent should preferably identify:

• what information will be disclosed;
• to whom;
• for what purpose;
• for how long;
• whether disclosure is mandatory under a particular law.

A general employment relationship should not automatically be treated as unlimited consent to disclose every medical detail.

F. Safety-sensitive positions can justify greater disclosure

Confidentiality is not absolute.

Where an employee performs safety-critical work—such as operating heavy machinery, driving, aviation, hazardous industrial work or certain healthcare functions—an employer may have a stronger legitimate interest in medical fitness information.

Even then, disclosure should remain proportionate.

The employer may need to know that an employee is not currently fit to operate machinery, without necessarily receiving the employee's entire medical history.

G. Legal requirements may override confidentiality

Medical information may sometimes be disclosed where required or authorised by law, such as:

• occupational-safety legislation;
• disability legislation;
• court orders;
• statutory reporting requirements;
• workers' compensation proceedings;
• public-health requirements;
• regulatory investigations.

However, even legally authorised disclosure should ordinarily be confined to the information required by the relevant law.

H. Emergency situations

Confidentiality may also be overridden where disclosure is reasonably necessary to prevent serious and imminent harm.

For example, where an occupational-health professional reasonably believes that an employee's condition creates an immediate and serious safety risk, relevant information may need to be communicated to responsible personnel.

The disclosure should still be limited to the safety issue.

4. Confidentiality and disability discrimination

Medical fitness assessments must not become a mechanism for excluding employees merely because they have a medical condition or disability.

The employer should distinguish between:

“Does the employee have a medical condition?”

and

“Can the employee perform the essential functions of the job, with reasonable accommodation where applicable?”

This distinction is particularly important in disability-related employment decisions.

5. Important Case Laws

1. Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)

The Supreme Court recognised privacy as a fundamental right under Article 21.

The judgment recognised informational privacy as an important component of personal privacy. Medical information is among the most sensitive categories of personal information.

Relevance: Employers and other organisations handling employee health information should have a legitimate purpose for collecting and using such information and should avoid unnecessary disclosure.

2. Mr. X v. Hospital Z (1998)

The Supreme Court considered the confidentiality of medical information in the context of HIV status.

The Court recognised that medical information ordinarily attracts a duty of confidentiality, although confidentiality is not absolute where competing legal or public interests justify disclosure.

Relevance: Medical fitness confidentiality has boundaries: privacy is important, but legitimate safety, legal and public-interest considerations can justify limited disclosure.

3. Mr. X v. Hospital Z (2003)

The Supreme Court subsequently revisited issues surrounding disclosure of HIV-related medical information and the rights of individuals affected by such disclosure.

The case demonstrates the continuing tension between:

• medical confidentiality;
• individual privacy;
• public interest; and
• protection of other persons.

Relevance: Employers should not treat medical information as freely distributable simply because it has been obtained during employment-related medical processes.

4. Sharda v. Dharmpal (2003)

The Supreme Court examined whether a person's medical examination could be ordered in matrimonial proceedings.

The Court recognised that privacy is important but not an absolute right and may be subject to lawful restrictions where necessary for the administration of justice.

Relevance: Medical confidentiality can have legitimate exceptions where a competent legal authority requires medical information or examination.

5. Suchita Srivastava v. Chandigarh Administration (2009)

The Supreme Court emphasised the importance of bodily integrity, privacy and decisional autonomy under Article 21.

The judgment strongly recognised an individual's right to make decisions concerning their own body.

Relevance: Employment medical examinations should respect employee autonomy and should not unnecessarily intrude into private medical matters.

6. Selvi v. State of Karnataka (2010)

The Supreme Court considered involuntary techniques such as narco-analysis, polygraph examination and brain-mapping.

The Court placed significant emphasis on personal liberty, mental privacy and protection against compelled intrusion.

Relevance: Medical and psychological information cannot be treated as ordinary employment data. Intrusive examinations require a strong legal and constitutional justification.

7. K.S. Puttaswamy (Retd.) v. Union of India — Aadhaar (2018)

The Supreme Court's Aadhaar judgment developed principles concerning the handling of personal information, including the ideas of purpose limitation, proportionality and protection of personal data.

Relevance: An employer collecting medical information should have a legitimate purpose and should not collect or retain substantially more information than is necessary for that purpose.

8. Vikash Kumar v. Union Public Service Commission (2021)

The Supreme Court addressed disability rights and reasonable accommodation under the Rights of Persons with Disabilities Act, 2016.

The judgment reinforced the principle that equality may require reasonable accommodation, rather than simply applying apparently neutral requirements without considering disability.

Relevance: A medical fitness assessment should not automatically result in exclusion. The employer should consider whether reasonable accommodation can enable the employee to perform the job.

6. Practical confidentiality model

A good workplace medical-fitness system can be divided into three levels:

7. Employer's legitimate interest vs employee's privacy

The law therefore attempts to balance two competing interests.

Employer's interest:

• workplace safety;
• regulatory compliance;
• determining fitness for a particular role;
• protecting co-workers and the public;
• arranging reasonable accommodation.

Employee's interest:

• bodily privacy;
• informational privacy;
• dignity;
• confidentiality;
• protection against discrimination;
• control over sensitive health information.

The correct approach is generally proportionality: disclose enough information to address the legitimate employment or safety purpose, but no more than reasonably necessary.

8. Confidentiality during recruitment

Pre-employment medical examinations can create particular risks.

An employer should avoid using medical testing as a means of obtaining unrelated information about an applicant.

For example, if the genuine purpose is determining whether a person can safely perform a physically demanding job, the examination should focus on relevant functional capacity rather than collecting an unrestricted medical history.

Where a medical condition does not prevent performance of the essential functions of the job, it should not automatically become a basis for rejection.

9. Confidentiality during absence and return-to-work procedures

When an employee returns after illness or injury, HR may legitimately need to know whether the employee:

• can return to work;
• needs temporary restrictions;
• requires modified duties;
• needs additional recovery time.

However, the employee's manager does not necessarily need to know the complete diagnosis or treatment history.

A useful approach is therefore:

Medical professional → functional assessment → HR/employer → necessary workplace action

rather than:

Medical professional → complete medical records → entire management team.

10. Data security and retention

Confidentiality also concerns how medical information is stored.

Employers should consider:

• restricted access;
• secure electronic storage;
• separate medical files;
• access logs;
• limited retention periods;
• controlled transmission;
• secure destruction;
• prohibition on unnecessary circulation through email or messaging groups.

Medical information should not be casually shared through workplace WhatsApp groups, general email chains or unrestricted HR folders.

11. Breach of confidentiality

An unauthorised disclosure may potentially create:

• privacy liability;
• employment-law consequences;
• discrimination claims;
• professional disciplinary consequences for healthcare personnel;
• damages or other legal remedies;
• regulatory consequences where applicable.

The seriousness of the breach will depend on the nature of the information, the circumstances of disclosure, the recipient, the purpose and the resulting harm.

12. Key principle

The most important rule can be stated simply:

An employer may need to know whether an employee is medically fit and what workplace restrictions or accommodations are necessary; it does not automatically need to know the employee's entire medical story.

Thus, medical fitness confidentiality is not absolute, but its exceptions should be based on legitimate purpose, necessity, proportionality, consent or legal authority, rather than general managerial curiosity.

Conclusion

Medical fitness confidentiality creates a boundary between occupational information necessary for employment decisions and private medical information belonging to the employee. Indian constitutional privacy jurisprudence, particularly Puttaswamy, together with cases such as Mr. X v. Hospital Z, Sharda, Suchita Srivastava, Selvi and Vikash Kumar, supports an approach based on privacy, dignity, proportionality, legitimate purpose and reasonable accommodation.

For employers, the safest operational principle is “need to know, not right to know.”