Privacy in Medical Follow-Ups

1. Meaning

Privacy in medical follow-ups refers to the protection of an individual's medical information, communications, records, treatment history, diagnostic results, prescriptions, and follow-up consultations from unauthorised access, disclosure, surveillance, or use.

In employment law, the issue commonly arises when an employer seeks information concerning an employee's:

• medical consultations;
• hospital visits;
• diagnostic reports;
• prescriptions;
• sick leave;
• fitness certificates;
• disability or medical restrictions;
• rehabilitation or recovery;
• workplace injury;
• mental-health treatment;
• insurance claims.

The central legal tension is between the employer's legitimate interest in determining fitness for work, leave entitlement, workplace safety, and accommodation and the employee's right to informational and bodily privacy.

2. Constitutional Basis

The principal constitutional protection is Article 21 of the Constitution of India, which protects life and personal liberty.

The Supreme Court has recognised privacy as a constitutionally protected right. Medical information falls within the broader concept of personal and informational privacy because disclosure of such information can expose highly intimate aspects of an individual's life.

The leading constitutional authority is:

Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1

A nine-judge Constitution Bench unanimously recognised privacy as a fundamental right under Article 21 and other constitutional guarantees.

The judgment identified informational privacy as an important aspect of privacy.

Relevance

Medical information is among the most sensitive forms of personal information. Consequently, collection, storage, use, or disclosure of medical information should have a legitimate purpose and appropriate safeguards.

3. Medical Follow-Ups and Employment

Medical follow-ups can arise in several employment situations.

Example 1 — Sick leave

An employee takes repeated medical leave.

The employer may legitimately require reasonable documentation establishing entitlement to leave.

However, this does not necessarily mean the employer is entitled to the employee's complete medical history.

Example 2 — Fitness examination

An employer requires an employee to undergo a medical examination before returning to safety-sensitive work.

The examination may be legitimate if connected with the employee's ability to safely perform the job.

The information collected should nevertheless be proportionate to that purpose.

Example 3 — Workplace injury

An employee suffers an occupational injury.

The employer may legitimately require medical information relevant to:

• treatment;
• rehabilitation;
• fitness;
• workplace accommodations;
• statutory compensation.

But unnecessary disclosure of unrelated medical history raises privacy concerns.

4. Principle of Purpose Limitation

Medical information should ordinarily be collected for a specific and legitimate purpose.

For example:

“Please provide confirmation that you are medically fit to resume safety-sensitive duties.”

is materially different from:

“Provide all medical records relating to your health.”

The first request is connected to a defined employment purpose.

The second is potentially much broader than necessary.

5. Data Minimisation

A fundamental privacy principle is data minimisation.

The employer should generally seek the minimum information reasonably necessary to accomplish the legitimate employment purpose.

For example, if the issue is whether an employee can return to work, an employer may require:

• fitness status;
• restrictions;
• expected duration of restrictions;
• recommended workplace accommodations.

It may not necessarily need:

• complete historical medical records;
• unrelated diagnoses;
• detailed treatment notes;
• unrelated prescriptions.

6. Confidentiality of Medical Information

Medical information should be subject to appropriate confidentiality controls.

Access should ordinarily be restricted to persons who genuinely need the information for a legitimate employment purpose, such as:

• occupational-health personnel;
• authorised HR personnel;
• designated medical officers;
• legal/compliance personnel where necessary.

The employee's medical information should not become generally available to managers or co-workers simply because the employee has taken medical leave.

7. Six Important Case Laws

1. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1

This is the foundational Indian privacy judgment.

The Supreme Court held that privacy is a fundamental right and recognised several dimensions of privacy, including:

• bodily privacy;
• informational privacy;
• decisional autonomy;
• protection of personal choices.

Principle

Personal information is entitled to constitutional protection against unjustified intrusion.

Relevance to medical follow-ups

Medical records and health information fall within highly sensitive personal information. Any employment-related collection should therefore have a legitimate basis and should not exceed what is reasonably necessary.

2. Mr. X v. Hospital Z, (1998) 8 SCC 296

The Supreme Court considered the confidentiality of medical information in the context of disclosure of a patient's HIV status.

The Court recognised the importance of medical confidentiality but also considered circumstances in which disclosure may be justified where another person's legally protected interests are involved.

Principle

Medical confidentiality is important, but it is not an absolute rule in every conceivable circumstance.

Employment relevance

An employer cannot assume that every medical disclosure is automatically permissible. Conversely, privacy does not necessarily prevent disclosure where a recognised legal obligation or compelling interest requires it.

3. Sharda v. Dharmpal, (2003) 4 SCC 493

The Supreme Court considered whether a court could require a party to undergo a medical examination.

The Court held that the right to privacy is not absolute and that, in appropriate judicial proceedings, an order requiring medical examination may be permissible.

Principle

Privacy protections must be balanced against legitimate legal requirements and the administration of justice.

Employment relevance

The case demonstrates that medical examination cannot be treated as inherently unconstitutional merely because it involves personal medical information. The purpose, authority, necessity, and circumstances of the examination are important.

4. Mr. X v. Hospital Z, (2003) 1 SCC 500

The Supreme Court revisited issues surrounding disclosure of medical information and the competing interests of privacy and public/third-party interests.

The Court recognised that confidentiality and privacy have significant importance but may be subject to legally recognised limitations.

Principle

Medical privacy must be balanced against legitimate competing legal interests.

Employment relevance

Where an employer claims that disclosure is necessary because an employee's condition affects workplace safety, the precise factual and legal basis for that claim becomes important.

5. Selvi v. State of Karnataka, (2010) 7 SCC 263

The Supreme Court examined involuntary techniques such as narco-analysis, polygraph examinations and brain-mapping.

The Court emphasised the protection of mental privacy, personal autonomy and bodily integrity.

Principle

The State cannot ordinarily subject individuals to intrusive procedures affecting bodily or mental autonomy without adequate legal justification.

Employment relevance

Although the case does not concern ordinary medical follow-ups, its broader principles reinforce the importance of consent, bodily integrity and limits on intrusive examinations.

An employer's medical requirements should therefore be connected to legitimate employment purposes and should not become unnecessarily invasive.

6. District Registrar and Collector, Hyderabad v. Canara Bank, (2005) 1 SCC 496

The Supreme Court examined privacy in relation to access to private financial information and recognised privacy interests in personal information.

The Court emphasised that personal information does not become freely accessible merely because it exists in a document or record.

Principle

Personal information can attract privacy protection even where the information is recorded or held by another entity.

Employment relevance

The principle supports careful handling of employee medical records by employers, insurers, occupational-health providers and other organisations holding employee information.

8. Additional Important Case

K.S. Puttaswamy (Aadhaar) v. Union of India, (2019) 1 SCC 1

The Supreme Court applied proportionality principles to informational privacy.

The broader privacy framework requires examination of factors such as:

1. legality;
2. legitimate state/objective purpose;
3. necessity;
4. proportionality;
5. safeguards against abuse.

Although the case principally concerned Aadhaar, the proportionality framework is useful when analysing privacy-sensitive information collection more generally.

9. Medical Follow-Up and Consent

Consent is an important consideration, but consent alone should not be treated as a complete answer to every privacy question.

A sound process should explain:

• what information is being requested;
• why it is required;
• who will receive it;
• how it will be used;
• how long it will be retained;
• whether disclosure is mandatory;
• whether alternative documentation is available.

In employment relationships, consent may also need careful consideration because of the unequal bargaining position between employer and employee.

10. Employer's Legitimate Interests

Privacy does not mean that an employer can never request medical information.

Legitimate purposes may include:

A. Fitness for duty

Particularly important in:

• aviation;
• transportation;
• heavy industry;
• mining;
• manufacturing;
• healthcare;
• emergency services;
• safety-critical positions.

B. Workplace accommodation

Medical information may be relevant to determining reasonable adjustments.

C. Statutory compliance

Certain employment laws may require medical examinations, occupational-health measures, or reporting.

D. Sick-leave administration

Reasonable medical documentation may be required to verify entitlement under applicable policies or law.

E. Workplace safety

Where a genuine safety risk exists, appropriately limited medical assessment may be justified.

11. What Employers Should Avoid

An employer should exercise caution before demanding:

• complete medical histories;
• unrelated diagnostic records;
• detailed psychiatric/psychological records without a clear basis;
• information concerning family members;
• genetic information unrelated to the employment requirement;
• complete hospital files where a fitness certificate would suffice;
• medical information that has no connection to the employee's role.

The more intrusive the request, the stronger the justification should ordinarily be.

12. Privacy During Medical Follow-Up

A particularly important issue is continuing monitoring after the initial medical event.

Suppose an employee submits a medical certificate stating that they require four weeks of recovery.

The employer may legitimately need to know:

• whether the employee can return to work;
• whether restrictions continue;
• whether modified duties are required;
• whether further leave is necessary.

But that does not automatically establish a right to continuously monitor every medical consultation or demand unrelated medical information.

A useful distinction is:

Work-related medical status → potentially necessary

versus

Complete personal medical history → generally much broader

13. Confidentiality Within the Organisation

Medical information should be segregated from ordinary personnel information where practicable.

For example:

Manager:
“Employee is medically unfit for duty until 15 October.”

HR/Occupational Health:
May retain appropriate supporting medical documentation.

Co-workers:
Generally do not need access to the employee's diagnosis or treatment information.

This reduces unnecessary disclosure.

14. Medical Follow-Ups and Digital Privacy

Modern follow-up processes increasingly involve:

• telemedicine;
• electronic health records;
• health apps;
• wearable devices;
• digital fitness certificates;
• email transmission of medical reports;
• employer health portals.

These systems create additional risks involving:

• unauthorised access;
• excessive data collection;
• secondary use;
• indefinite retention;
• insecure transmission;
• disclosure to third-party vendors.

Accordingly, technical safeguards such as access controls, encryption, authentication, audit logs and defined retention periods become important components of medical privacy governance.

15. Practical HR Framework

An organisation can use the following framework:

16. Key Distinction: Fitness Information vs Medical Diagnosis

One of the most useful distinctions in employment privacy is:

Fitness information

“Fit to perform regular duties.”

or

“Fit subject to restriction against night shifts for four weeks.”

This may be directly relevant to employment.

Detailed medical diagnosis

Complete diagnosis, treatment history, laboratory results and unrelated medical records.

This is substantially more intrusive.

Therefore, where the employment purpose can be achieved through a fitness assessment or limited medical certification, demanding the employee's entire medical history may be difficult to justify.

17. Conclusion

Privacy in medical follow-ups requires balancing two legitimate interests: the employee's right to bodily and informational privacy and the employer's legitimate need to determine fitness, manage leave, provide accommodation and maintain workplace safety.

The Indian Supreme Court's privacy jurisprudence establishes that medical information deserves substantial protection. At the same time, cases such as Sharda v. Dharmpal and Mr. X v. Hospital Z demonstrate that privacy is not an absolute prohibition against every form of medical examination or disclosure.

The most defensible approach is therefore based on:

legitimate purpose + necessity + proportionality + limited collection + confidentiality + restricted access + appropriate safeguards.

For employment purposes, the key question should ordinarily be:

“What minimum medical information is genuinely necessary to make the employment decision?”

rather than:

“How much medical information can the employer obtain?”