What Medical Information Must You Disclose to a California Employer?

Your Health Information at Work: What California Law Actually Requires You to Share

Key Takeaways: California employees rarely must disclose their full medical history to an employer. Before a conditional job offer, FEHA generally bars employers from asking about disabilities or medical conditions, though they may ask whether you can perform essential job functions and may require post-offer exams that are job related and applied uniformly. Once employed, you generally need only provide limited certification confirming a qualifying condition and the accommodation or leave needed, not diagnoses or unrelated records. The Confidentiality of Medical Information Act requires employers to safeguard health information, and FEHA regulations require it be kept separate from your personnel file; CMIA also requires a signed authorization before an employer uses or discloses that information, subject to statutory exceptions. You generally cannot be disciplined merely for refusing to sign an authorization, though an employer may deny a leave or accommodation it cannot verify. Warning signs of overreach include pre-offer medical questions, demands for complete records, disclosure to coworkers, and adverse action shortly after you decline a broad release.

You generally do not have to hand over your full medical history to your employer. California law allows an employer to ask only for information reasonably needed to verify a disability, support an accommodation request, or determine leave eligibility. Your diagnosis, treatment records, and unrelated health history are generally outside what an employer may require, and California’s medical privacy statutes provide meaningful limits and consequences for overreach.

If you believe your employer demanded too much health information, retaliated against you for declining a broad release, or shared your condition with coworkers, the team at Moore Ruddell LLP is ready to listen. Call (310) 792-7010 or contact us now to schedule a free consultation.

What Medical Questions Can an Employer Legally Ask?

The answer depends on where you are in the employment relationship. Before a job offer, FEHA draws a firm line. Under Cal. Gov. Code § 12940(e)(1), it is unlawful "for any employer or employment agency to require any medical or psychological examination of an applicant, to make any medical or psychological inquiry of an applicant, to make any inquiry whether an applicant has a mental disability or physical disability or medical condition, or to make any inquiry regarding the nature or severity of a physical disability, mental disability, or medical condition."

That prohibition is not absolute. Under Cal. Gov. Code § 12940(e)(2)-(3), an employer "may inquire into the ability of an applicant to perform job-related functions and may respond to an applicant’s request for reasonable accommodation," and may require a medical examination after a conditional offer if it is "job related and consistent with business necessity" and applied uniformly to "all entering employees in the same job classification." A hiring manager can generally ask whether you can lift fifty pounds or work a rotating schedule, but generally cannot ask, before a conditional offer, whether you take antidepressants.

Employees in Los Angeles, Riverside County, and San Bernardino County often tell us the questions started innocently and escalated. A supervisor asks why you were out Tuesday. Then HR wants a note. Then someone requests records going back five years. FEHA’s disability discrimination protections, enforced by the California Civil Rights Department, address that escalation, though whether a request crosses the line is fact-dependent. Once employed, FEHA permits medical inquiries that are job related and consistent with business necessity, so the analysis is narrower than a flat ban.

Where Does the Line Fall Between Job-Related and Intrusive?

Courts and the CRD generally focus on whether the inquiry connects to essential job functions or a requested accommodation. A request for certification that you have a qualifying condition and need a modified schedule is typically permissible; a demand for your complete chart, including unrelated conditions, generally is not.

Understanding the Rules on Disclosing Medical Information to Employer California Workers Rely On

California’s Confidentiality of Medical Information Act imposes affirmative duties on employers that receive health information. Under Cal. Civ. Code § 56.20(a), "Each employer who receives medical information shall establish appropriate procedures to ensure the confidentiality and protection from unauthorized use and disclosure of that information." This is a statutory obligation, not aspirational language.

The disclosure restriction in Cal. Civ. Code § 56.20(c) is broader than many workers realize. It generally provides that an employer receiving medical information about an employee shall not use or further disclose it "without the patient having first signed an authorization." Exceptions include where "disclosure is compelled by judicial or administrative process," where information "is relevant in a lawsuit, arbitration, grievance, or other claim," and for "administering and maintaining employee benefit plans… and for determining eligibility for paid and unpaid leave from work for medical reasons." Importantly, CMIA governs medical information the employer receives from a provider, plan, or similar source, it does not cover every statement an employee makes about their own health, though FEHA confidentiality rules may still apply.

Employers that adopt their own privacy policies may bind themselves to stricter standards. Cal. Civ. Code § 56.20(d) states that if an employer "maintains a written policy which provides that particular types of medical information shall not be used or disclosed by the employer in particular ways, the employer shall obtain an authorization for such uses or disclosures even if an authorization would not otherwise be required." If your employee handbook promises something, that promise may carry legal weight. The full text appears in the California medical privacy statutes maintained by the Legislature.

Can You Refuse to Sign a Medical Authorization?

In general, yes, and you typically cannot be punished for that refusal alone. Cal. Civ. Code § 56.20(b) provides that "No employee shall be discriminated against in terms or conditions of employment due to that employee’s refusal to sign an authorization under this part."

The same statute contains an important qualifier. It continues: "nothing in this section shall prohibit an employer from taking such action as is necessary in the absence of medical information due to an employee’s refusal to sign an authorization." Practically, your employer may not discipline you simply for saying no, but it may deny a leave request or accommodation it cannot verify. The distinction between lawful consequence and unlawful discrimination is often where these cases are won or lost.

💡 Pro Tip: If an authorization form feels overbroad, consider responding in writing with a narrower alternative rather than a flat refusal. Offering certification limited to your functional restrictions can create a paper trail showing good faith.

How Must Your Employer Store Medical Records?

California law generally requires medical information to be kept in a file separate from your general personnel file. This requirement comes primarily from FEHA’s implementing regulations, which direct that medical information related to disability and accommodation issues be maintained on separate forms and in separate files, treated as confidential. A Legal Aid at Work resource explaining personnel file access rights describes both this separation requirement and your right under Labor Code § 1198.5 to inspect and copy your personnel records, subject to statutory exclusions and response deadlines. Because medical files are kept separately, they are generally not produced as part of a § 1198.5 request.

That right to inspect matters more than most employees appreciate. Reviewing your file may reveal whether medical details were improperly filed alongside performance reviews, or whether disciplinary notes reference your health after you disclosed a condition. Common pitfalls include waiting too long to request records and failing to make the request in writing.

What Happens During the Interactive Process?

FEHA generally obligates employers to engage in a timely, good-faith interactive process once you request accommodation or the employer becomes aware of a disability and need for accommodation. Limited medical information may be exchanged, but typically only enough to establish the qualifying condition and identify workable accommodations. Employers may request reasonable documentation and, where the need is unclear, seek clarification from your provider, but generally may not demand unrelated health history.

Confidentiality obligations generally attach to information exchanged during that process. It should be maintained separately and protected from casual internal circulation, though supervisors may be told of necessary work restrictions. If your condition became office gossip after you spoke with HR, that is worth discussing with counsel.

Why Does FEHA’s Definition of Disability Matter Here?

FEHA’s coverage is generally broader than the federal standard: a condition need only "limit" a major life activity rather than "substantially limit" it as under the ADA. That lower threshold means some workers who might fall outside ADA coverage may still hold rights under California law, including confidentiality protections tied to accommodation requests.

What Are the Warning Signs of an Unlawful Medical Inquiry?

Not every uncomfortable question supports a lawsuit. Viable claims often involve documented overreach paired with a tangible adverse action:

• Pre-offer questions about diagnoses, medications, or prior workers’ compensation history
• Demands for complete medical records when a functional certification would suffice
• A supervisor disclosing your condition to coworkers or clients
• Discipline or termination shortly after you decline a broad authorization
• Refusal to engage in any accommodation discussion after you present documentation

Timing and documentation frequently influence whether a claim is actionable. An isolated awkward question rarely supports meaningful litigation. A demotion two weeks after you disclosed a cancer diagnosis, supported by emails, may present a different picture, though timing alone is generally not enough. Readers exploring related California employment law articles will find additional context on how adverse actions are proven.

What Should You Do If Your Medical Privacy Was Violated?

Start by preserving everything and saying little. Save authorization forms, emails, texts, and any handbook language addressing confidentiality. Request your personnel file in writing. Avoid signing anything new until you understand what it releases.

Administrative and civil paths are separate, and both have deadlines. Before filing a FEHA lawsuit, California employees generally must first file a complaint with the Civil Rights Department and obtain a right-to-sue notice. That administrative complaint generally must be filed within three years of the alleged conduct, and a civil action generally must be filed within one year of an immediate right-to-sue notice, with limited exceptions. CMIA claims follow their own separate limitations rules. An attorney can help confirm which deadlines govern your facts.

💡 Pro Tip: Keep a dated log of every medical-related request your employer makes, including who asked, what was requested, and how you responded. Contemporaneous notes generally carry more weight than reconstructed memories.

Experienced counsel can assess whether your situation may support a claim worth pursuing. Working with disclosing medical information to employer California lawyer resources in Southern California may help you understand realistic options. Outcomes depend entirely on the specific facts, and no attorney can predict a result.

Frequently Asked Questions

1. Do I have to tell my employer my diagnosis to get an accommodation?

Generally, no. Employers may request reasonable documentation confirming a qualifying condition and the need for accommodation, but California employer medical questions are generally limited to what is necessary for that purpose. A treating provider can often describe functional restrictions without naming the condition, though an employer may sometimes seek more detail when the need for accommodation is unclear.

2. Can my employer share my medical information with my coworkers?

Ordinarily not. Cal. Civ. Code § 56.20(c) generally bars use or further disclosure without a signed authorization, subject to statutory exceptions such as compelled legal process or benefit plan administration, and FEHA regulations separately require confidential treatment. Casual disclosure to coworkers rarely fits any exception.

3. My employer fired me after I refused to sign a records release. Is that legal?

It may not be. Cal. Civ. Code § 56.20(b) bars discrimination in terms or conditions of employment based on refusal to sign an authorization, though the same section permits an employer to take action necessary in the absence of the medical information. Whether your termination crossed the line depends on the documented reasons and timing.

4. Can a California employer require a physical exam before hiring me?

Generally not before a conditional offer. Under Cal. Gov. Code § 12940(e)(3), an exam may be required after an offer is extended if it is job related, consistent with business necessity, and applied to all entering employees in the same job classification.

5. Are my medical records supposed to be in my personnel file?

Generally, no. California employee health disclosure rules generally require medical information to be maintained separately from the general personnel file, which limits internal access.

Protecting Your Privacy Without Losing Your Job

California gives employees meaningful control over their health information at work. Employers may ask about your ability to perform job functions and may seek limited certification supporting accommodation or leave, but broad demands for your medical history, casual disclosure to coworkers, and punishment for refusing an overbroad authorization may all raise serious concerns under FEHA and the Confidentiality of Medical Information Act. Whether your experience supports a claim depends on the documents, the timeline, and the employer’s stated reasons, which is why an individualized review matters.

If your employer in Los Angeles, Riverside County, or San Bernardino County has pushed past those limits, the attorneys at Moore Ruddell LLP are prepared to evaluate your situation. Call (310) 792-7010 or reach out to our Southern California employment attorneys today.

Disclaimer: This content is for informational purposes only and is not legal advice. Every case is unique, and results may vary. Consult an attorney about your specific circumstances.