On Monday we blogged about the EEOC's updated guidance on the COVID-19 pandemic regarding testing and medical exams.  As we previously blogged about in Part I: here, Part II: here and Part III: here, the EEOC has issued multiple Q&As regarding testing, the ADA, and accommodations during these last 6 months.  The complete guidance and EEOC FAQs can be found here.
 
In this part of our series, we are going to break down the new EEOC answers on maintaining confidentiality of employee medical information that every employer should know.  The Q&As are below. Stay tuned for Part V of our analysis Friday on accommodations.
  • Suppose a manager learns that an employee has COVID-19, or has symptoms associated with the disease. The manager knows she must report it but is worried about violating ADA confidentiality. What should she do?  
The ADA requires that an employer keep all medical information about employees confidential, even if that information is not about a disability. Clearly, the information that an employee has symptoms of, or a diagnosis of, COVID-19, is medical information. But the fact that this is medical information does not prevent the manager from reporting to appropriate employer officials so that they can take actions consistent with guidance from the CDC and other public health authorities.
The question is really what information to report: is it the fact that an employee-unnamed-has symptoms of COVID-19 or a diagnosis, or is it the identity of that employee? Who in the organization needs to know the identity of the employee will depend on each workplace and why a specific official needs this information. Employers should make every effort to limit the number of people who get to know the name of the employee.
The ADA does not interfere with a designated representative of the employer interviewing the employee to get a list of people with whom the employee possibly had contact through the workplace, so that the employer can then take action to notify those who may have come into contact with the employee, without revealing the employee's identity. For example, using a generic descriptor, such as telling employees that "someone at this location" or "someone on the fourth floor" has COVID-19, provides notice and does not violate the ADA's prohibition of disclosure of confidential medical information. For small employers, coworkers might be able to figure out who the employee is, but employers in that situation are still prohibited from confirming or revealing the employee's identity. Also, all employer officials who are designated as needing to know the identity of an employee should be specifically instructed that they must maintain the confidentiality of this information. Employers may want to plan in advance what supervisors and managers should do if this situation arises and determine who will be responsible for receiving information and taking next steps.
  • An employee who must report to the workplace knows that a coworker who reports to the same workplace has symptoms associated with COVID-19. Does ADA confidentiality prevent the first employee from disclosing the coworker's symptoms to a supervisor? 
No. ADA confidentiality does not prevent this employee from communicating to his supervisor about a coworker's symptoms. In other words, it is not an ADA confidentiality violation for this employee to inform his supervisor about a coworker's symptoms. After learning about this situation, the supervisor should contact appropriate management officials to report this information and discuss next steps.
  • An employer knows that an employee is teleworking because the person has COVID-19 or symptoms associated with the disease, and that he is in self-quarantine. May the employer tell staff that this particular employee is teleworking without saying why? 
Yes. If staff need to know how to contact the employee, and that the employee is working even if not present in the workplace, then disclosure that the employee is teleworking without saying why is permissible. Also, if the employee was on leave rather than teleworking because he has COVID-19 or symptoms associated with the disease, or any other medical condition, then an employer cannot disclose the reason for the leave, just the fact that the individual is on leave.
  • Many employees, including managers and supervisors, are now teleworking as a result of COVID-19. How are they supposed to keep medical information of employees confidential while working remotely?
The ADA requirement that medical information be kept confidential includes a requirement that it be stored separately from regular personnel files. If a manager or supervisor receives medical information involving COVID-19, or any other medical information, while teleworking, and is able to follow an employer's existing confidentiality protocols while working remotely, the supervisor has to do so. But to the extent that is not feasible, the supervisor still must safeguard this information to the greatest extent possible until the supervisor can properly store it. This means that paper notepads, laptops, or other devices should not be left where others can access the protected information.
Similarly, documentation must not be stored electronically where others would have access. A manager may even wish to use initials or another code to further ensure confidentiality of the name of an employee.
 
Need additional assistance navigating the EEOC requirements? Stay tuned for Part V on Friday . . . and don't worry, we are here to help!
Back to News & Resources