Your manager mentioned your chronic condition in a staff meeting. A coworker asked why you get to work from home, and your supervisor told them about your disability. HR shared details of your accommodation request with a department head who wasn't involved in the decision.

These aren't just uncomfortable moments. They're potential violations of the Americans with Disabilities Act.

The ADA requires employers to keep disability-related medical information confidential. Not just private in the colloquial sense, but legally confidential, with specific rules about who can know what and when. When that confidence is broken, the law provides recourse.

What the ADA Requires Employers to Keep Confidential

Under the ADA, all information obtained about an employee's medical condition or disability must be kept confidential and stored separately from personnel files. This includes:

• Medical documentation submitted with accommodation requests
• Information disclosed during the interactive accommodation process
• Records from fitness-for-duty exams
• Details about the nature or severity of your disability
• The fact that you requested or received an accommodation

This confidentiality requirement applies whether the information came from you directly, from your doctor, or from your own statements during meetings with HR or management.

Who Can Legally Know About Your Disability

The ADA doesn't require total secrecy. It permits disclosure to specific people on a need-to-know basis:

Your direct supervisor can be informed about necessary work restrictions and accommodations, but only to the extent needed to implement them. They don't need to know your diagnosis. They need to know you require modified duties or adjusted schedules.

First aid and safety personnel can be informed if your disability might require emergency treatment or evacuation assistance.

Government officials investigating ADA compliance can access your medical information as part of an official inquiry.

Workers' compensation or insurance carriers can receive information required to process claims or coverage decisions.

What's not permitted: sharing with coworkers, disclosing to managers who aren't involved in implementing your accommodation, or discussing your condition in group meetings where others don't need the information to perform their jobs.

What Counts as an Improper Disclosure

A violation occurs when your employer shares disability-related information with someone who doesn't need it to do their job, or shares more detail than necessary with someone who does need to know.

Common violations:

Your manager tells your team why you're working reduced hours. Your coworkers don't need to know your medical reason. They need to know your schedule changed.

HR mentions your diagnosis to a department head who asked why you were approved for remote work. That manager's curiosity isn't a business need.

A supervisor shares details of your accommodation request in a performance review discussion with higher management unrelated to implementing the accommodation itself.

Your employer posts your FMLA leave reason on a shared calendar visible to the entire office.

The test is always: did this person need this specific information to perform their job function? If not, sharing it is a violation.

What to Do When Your Information Is Disclosed Improperly

Document the violation immediately. Write down exactly what was said, who said it, who heard it, and when it happened. If the disclosure happened in writing (email, Slack, shared document), save copies.

If you learned about the disclosure secondhand, document who told you and what they said. Note whether the person who disclosed your information indicated they were authorized to share it or whether they acknowledged it shouldn't have been shared.

Address it directly if you can. Tell your manager or HR that confidential medical information was disclosed and that you're aware the ADA prohibits that. Sometimes violations happen out of ignorance, not malice. Naming the problem can stop it from recurring.

If the violation continues or if addressing it directly isn't safe, escalate in writing. Send an email to HR documenting the disclosure and requesting confirmation that your medical information will be kept confidential going forward. Keep a copy.

Filing an EEOC Complaint for Confidentiality Violations

If your employer doesn't correct the problem or if the violation caused harm (you were treated differently after the disclosure, coworkers started asking invasive questions, you were denied opportunities because others learned about your condition), you can file a complaint with the EEOC.

You have 180 days from the date of the violation to file. In states with their own anti-discrimination agencies, that deadline extends to 300 days. The clock starts when the disclosure happened, not when you found out about it, so don't wait.

The EEOC will investigate whether your employer violated ADA confidentiality requirements. If they find a violation, you may be entitled to remedies including policy changes, training for management, and in some cases damages if the disclosure caused tangible harm like job loss or denied promotion.

You don't need a lawyer to file an EEOC charge, but you do need documentation. Bring everything: dates, names, what was said, and any written evidence of the disclosure.

Retaliation Protections After Reporting a Violation

Your employer can't punish you for reporting a confidentiality violation. Retaliation for asserting your ADA rights (including the right to confidentiality) is itself an ADA violation.

If you're written up, reassigned, denied a raise, or subjected to a hostile work environment after reporting that your medical information was disclosed, document that too. The timeline matters. Adverse actions that follow closely after you raised the confidentiality issue can support a retaliation claim.

When Disclosures Are Part of a Larger Pattern

Sometimes a confidentiality breach isn't isolated. It happens alongside other discrimination: you requested an accommodation, your condition was disclosed to coworkers, and suddenly you're being excluded from projects or getting poor performance reviews.

In those cases, the disclosure isn't just a standalone violation. It's evidence of a broader failure to accommodate or discriminatory pattern. Include it in your EEOC charge as part of the full picture of how your employer treated you after learning about your disability.

What Damages You Can Recover

If the EEOC finds a violation and you pursue a claim, remedies can include:

• Back pay if the disclosure led to job loss or demotion
• Reinstatement if you were terminated
• Policy changes requiring confidentiality training
• Compensatory damages for emotional distress caused by the breach
• Punitive damages if the employer acted with malice or reckless indifference

The ADA doesn't provide damages for confidentiality violations alone unless they caused actual harm. The violation establishes that your employer broke the law. The harm (lost wages, emotional distress, hostile work environment) determines what you can recover.

FAQ

Can my employer tell my coworkers that I have an accommodation?

Your employer can inform coworkers that your duties or schedule have changed if it affects their work, but they can't disclose the medical reason. "She's working from home two days a week" is permissible. "She's working from home because of her anxiety disorder" is not.

What if I told one coworker about my disability and now everyone knows?

If you voluntarily disclosed to a coworker and they spread it, your employer hasn't violated the ADA unless they encouraged or participated in the gossip. The ADA regulates employer disclosures, not peer conversations. But if a manager or HR repeated what you told one trusted colleague, the law was broken.

Does the ADA confidentiality rule apply to small employers?

The ADA applies to employers with 15 or more employees. If your employer has fewer than 15 employees, the ADA doesn't cover you, but your state may have its own disability discrimination law with confidentiality requirements. Check your state labor department's website.

Can my employer share my medical information with my insurance company?

Yes, but only information necessary to process a claim or verify coverage. Your employer can't give your insurer a full copy of your medical file or disclose conditions unrelated to the claim being processed.

What if my manager says they didn't know the information was confidential?

Ignorance of ADA confidentiality requirements isn't a defense. Employers are required to train managers on ADA compliance, including confidentiality rules. If your manager disclosed your information because they weren't trained, that's a failure by your employer, not an excuse.

Can I file an EEOC complaint anonymously?

No. EEOC complaints require your name and contact information. The EEOC investigates by contacting your employer and asking for a response to your allegations. Your employer will know you filed. But retaliation for filing is illegal, and you can include retaliation claims if your employer responds by punishing you.