Title I recordkeeping under the Americans with Disabilities Act requires employers to collect only job-related medical information, store it separately from general personnel files, and limit access to people with a legitimate business or legal need. For employers, that sounds simple until hiring workflows, leave administration, accommodation requests, workers’ compensation files, wellness programs, and HR systems all start touching the same data. I have helped organizations audit these practices after complaints, agency charges, and internal confusion, and the same problem appears repeatedly: teams know they must protect ADA records, but they are less certain about which records count, where they may be stored, and who may lawfully see them.
Title I is the employment section of the ADA. It applies to covered employers and prohibits disability discrimination in recruiting, hiring, advancement, compensation, training, discipline, termination, and other terms and conditions of employment. It also regulates disability-related inquiries, medical examinations, confidentiality, and reasonable accommodation. Recordkeeping matters because privacy is not a side issue under Title I; it is built into the statute and the Equal Employment Opportunity Commission regulations. If an employer mishandles medical documentation, the problem can become both a confidentiality violation and evidence supporting a discrimination or retaliation claim.
For this hub page, the key term is medical or disability-related information obtained through employment processes. That includes doctor’s notes, functional limitation statements, accommodation paperwork, post-offer medical exam results, fitness-for-duty certifications, drug test records when they contain medical information, and supervisor notes that reveal a diagnosis or treatment. These records are not ordinary HR documents. They must be maintained on separate forms, in separate medical files, and treated as confidential, with narrow exceptions for supervisors, safety personnel, government investigators, and certain insurance or workers’ compensation functions. Understanding these rules helps employers build compliant systems and gives employees confidence that sensitive information will not circulate informally.
Because this article serves as a hub for Title I: Employment, it covers the employment lifecycle from application to separation, explains what employers may ask and when, identifies which ADA records must be separated and protected, and outlines practical controls that withstand audits. The central rule is straightforward: collect less, segregate what you collect, disclose only when permitted, and document every decision consistently.
What Title I covers in employment and why confidentiality is central
Title I governs how employers handle applicants and employees with disabilities at every stage of employment. It requires equal opportunity, prohibits screening out qualified individuals when reasonable accommodation would enable performance, and restricts disability-related questions. The confidentiality rule exists because medical information can easily influence employment decisions in ways the law forbids. A manager who learns about a diagnosis may consciously or unconsciously change assignments, discipline standards, promotion decisions, or perceptions about reliability. Separate recordkeeping reduces that risk and shows that the employer designed its process to prevent misuse.
In practice, Title I issues usually arise in five recurring workflows: recruiting and interviewing, post-offer onboarding, accommodation management, leave and return-to-work administration, and performance or conduct situations involving possible medical explanations. Each workflow creates records, and each record must be classified correctly. Employers often think only formal accommodation files are protected, but the obligation is broader. If the information is medical, disability-related, or obtained through a medical inquiry or examination allowed by law, it belongs in a confidential medical file rather than the regular personnel file.
The EEOC’s implementing regulation at 29 C.F.R. section 1630.14 is the operational backbone here. It addresses medical examinations and inquiries of applicants and employees and requires confidential treatment of information obtained under those provisions. The practical takeaway is definitive: if the employer learned something because it asked a disability-related question, required a medical exam, received accommodation support documentation, or obtained health information through a fitness-for-duty or leave process, the employer must isolate that information from routine HR records.
Which ADA records employers must separate and protect
The safest way to answer this question is to think by document type and source. If the document reveals an employee’s medical condition, diagnosis, treatment, restrictions, prognosis, medications, or need for accommodation, it is generally an ADA confidential medical record. Typical examples include accommodation request forms, interactive process notes, medical certification forms, physician letters describing limitations, ergonomic assessment reports tied to a condition, return-to-work releases with restrictions, fitness-for-duty results, post-offer medical exam records, voluntary self-identification forms collected for disability programs, and workers’ compensation medical reports. Even an email from an employee saying, “My anxiety medication is changing, and I need a later start time for two weeks,” belongs in the separate medical file once HR receives it.
Some records are mixed documents containing both employment and medical facts. A leave approval memo may include dates, attendance coding, and a sentence about a serious health condition. A disciplinary report may mention a seizure episode that triggered a safety review. In those cases, employers should split the record when possible: keep the employment action in the personnel file and move the medical explanation or attachments to the confidential medical file. If technical systems do not allow literal splitting, access controls must functionally separate the medical content so ordinary managers or HR generalists cannot browse it.
| Record type | Store in separate ADA medical file? | Who may access | Common mistake |
|---|---|---|---|
| Accommodation request form and medical support | Yes | HR, accommodation staff, legal, limited supervisor need-to-know | Saving the doctor note in the personnel file |
| Post-offer medical exam results | Yes | Occupational health, HR, legal | Sharing broad results with hiring managers |
| Fitness-for-duty certification | Yes | HR, safety, limited supervisor need-to-know | Emailing restrictions to a large manager group |
| Performance review with no medical details | No | Normal personnel access | Adding diagnosis comments to the review |
| Workers’ compensation medical report | Yes | HR, risk, insurer, legal as needed | Keeping claim medical records in open supervisor files |
What employers may ask applicants and employees, and when records are created
Title I divides medical inquiries into phases. Before a conditional job offer, employers generally may not ask disability-related questions or require medical exams. They may ask whether an applicant can perform essential functions with or without reasonable accommodation and may ask an applicant to describe or demonstrate how those functions would be performed if all entering employees in the job category are treated consistently. That means most pre-offer recruiting records should not contain medical information at all. If interview notes mention visible impairments, assumptions about treatment, or questions about prior injuries, the employer has created unnecessary risk and possibly unlawful evidence.
After a conditional offer, medical exams and disability-related inquiries are allowed if they are required of all entering employees in the same job category. The records generated at this stage are classic ADA medical records: questionnaires, exam reports, laboratory findings, vaccination or immunity records when collected as part of an exam program, and follow-up specialist evaluations. If the employer withdraws the offer based on medical information, the file must support that decision with job-relatedness and business necessity analysis, not generalized fear. Those records remain confidential even though the individual never becomes an employee.
During employment, disability-related inquiries and medical exams must be job-related and consistent with business necessity, unless they are part of a voluntary employee health program. This standard is narrower than many supervisors realize. A manager cannot ask for medical proof simply because an employee seems stressed, uses a cane, or has frequent minor absences. But if objective evidence shows an employee may be unable to perform essential functions safely or may pose a direct threat, limited medical documentation may be appropriate. Every such request creates a protected record and should be centrally managed rather than left in a supervisor’s desk or inbox.
Separate files, limited access, and lawful disclosure rules
The ADA does not merely suggest confidentiality; it prescribes a restricted disclosure model. Supervisors and managers may be told about necessary work restrictions and accommodations. First aid and safety personnel may be told if the disability might require emergency treatment or special evacuation procedures. Government officials investigating ADA compliance may access relevant information on request. Information may also be shared for workers’ compensation or insurance purposes where state law permits. Outside those channels, disclosure should be rare, specific, and documented.
In audits, I look first at system architecture. If an HR platform lets every HR user open accommodation attachments, the employer may already be out of compliance even without a proven malicious disclosure. Strong programs use role-based access, separate electronic folders, restricted naming conventions, and retention schedules aligned with federal and state requirements. Physical records should be in locked cabinets distinct from personnel files. Email is the weak point in many organizations; when managers forward doctor notes around for convenience, confidentiality breaks down fast. A disciplined process requires managers to route medical material to HR immediately and then delete local copies unless a specific legal reason requires retention.
Training matters because lawful disclosure is contextual. A supervisor may need to know that an employee cannot lift more than twenty pounds, needs a modified schedule on Tuesdays, or must avoid certain chemical exposures. The supervisor usually does not need the diagnosis, treatment history, or full physician narrative. Giving only the operational restriction, not the underlying medical story, is the correct default. That distinction is one of the most effective controls an employer can implement.
Reasonable accommodation records and the interactive process
Accommodation files deserve special attention because they often contain the most detailed medical information and the most legally significant decision trail. A complete accommodation record usually includes the request, acknowledgment, job description, essential function analysis, notes from discussions with the employee, medical support if the disability or need is not obvious, option assessments, trial measures, undue hardship analysis, implementation steps, and follow-up results. Every one of those documents may become evidence in an EEOC charge or litigation. Well-kept files show a thoughtful, individualized process. Poor files suggest delay, inconsistency, or bias.
Employers should request only documentation that is reasonable under the circumstances. If the disability and need for accommodation are obvious, asking for a full diagnostic file is excessive. If clarification is needed, ask for functional limitations tied to essential job duties, expected duration where relevant, and possible accommodation ideas. Overcollection creates privacy risk without improving decision quality. The Job Accommodation Network has long recommended focusing on limitations and accommodation rather than diagnosis, and that advice aligns with defensible ADA practice.
One common mistake is storing accommodation outcomes only in email. When a supervisor informally agrees to remote work, extra breaks, a noise-reducing headset, or intermittent schedule changes based on a health condition, that arrangement still belongs in a controlled accommodation record. Informal fixes can be useful, but undocumented arrangements often collapse when supervisors change, attendance systems trigger warnings, or coworkers question fairness. Centralized records protect both employer and employee.
Leave, return to work, workers’ compensation, and overlapping laws
Title I recordkeeping often overlaps with the Family and Medical Leave Act, state leave laws, workers’ compensation statutes, Occupational Safety and Health Administration requirements, and employer disability benefit processes. The overlap does not erase ADA confidentiality. A medical certification supporting FMLA leave, a workers’ compensation orthopedic report, or a short-term disability form may serve different legal purposes, but each still requires separate confidential storage if held by the employer. Employers should resist the temptation to create one giant “leave file” accessible to anyone touching attendance. Access should track business need.
Return-to-work situations are especially sensitive. A common scenario is an employee returning after surgery with lifting restrictions. Operations needs to know the restrictions, scheduling needs to know the temporary assignment, payroll may need coding, and safety may need emergency planning. None of those functions requires broad circulation of surgical details, diagnosis codes, or medication lists. The employer should distill medical input into workplace restrictions and accommodation actions, then share only that operational summary with those who need it.
Drug and alcohol issues require nuance. Current illegal drug use is not protected the same way as disability, but test results and treatment information can still implicate confidentiality obligations and other laws. Records from alcohol treatment, medication-assisted treatment, or substance use accommodation requests are highly sensitive and should be handled with the same disciplined separation as other medical files. This is an area where employers often need legal review because ADA, state privacy rules, and safety obligations can intersect sharply.
Building a defensible Title I recordkeeping program
A workable program starts with a data map. Identify where medical and disability-related information enters the organization: applicant tracking systems, recruiting emails, onboarding vendors, occupational health portals, leave administrators, accommodation platforms, workers’ compensation carriers, wellness vendors, and local supervisor files. Then assign one intake path, one storage standard, one access model, and one retention rule. Without that mapping, organizations believe they have separate medical files while copies of the same records sit in inboxes, shared drives, and case notes across departments.
Next, standardize forms and decisions. Use accommodation request templates, manager routing instructions, and restriction-only communication forms for supervisors. Audit random files quarterly. Check whether personnel files contain stray medical content, whether access logs show unnecessary viewing, and whether older records are retained according to policy and legal holds. In my experience, routine audits catch the real failures: scanned doctor notes attached to performance reviews, manager notebooks with diagnoses, and broad shared-drive folders labeled “employee issues.”
Finally, connect recordkeeping to culture. Employees disclose medical information only when they trust the process. When HR responds quickly, limits questions to what is necessary, and explains who will see what, cooperation improves and disputes decrease. Title I compliance is not just about avoiding penalties. It allows employers to make sound employment decisions based on ability, essential functions, and accommodation options rather than rumor or overexposure of private health information. Review your current workflows, clean up access, and make separate protected ADA recordkeeping a visible standard across your Title I employment program.
Frequently Asked Questions
What ADA records must employers keep separate from regular personnel files?
Under Title I of the Americans with Disabilities Act, employers must keep employee medical information and disability-related documentation separate from the general personnel file. In practice, that includes medical questionnaires, doctor’s notes, fitness-for-duty information, accommodation request records, documentation supporting leave tied to a medical condition, post-offer medical exam results, workers’ compensation medical records when they reveal medical conditions, and any other records that contain diagnosis, treatment, restrictions, or other health-related details. The key principle is not just the label on the document, but the content. If a record reveals that an applicant or employee has a disability, a medical condition, functional limitations, or has requested an accommodation based on a medical need, it generally belongs in a confidential medical file rather than the standard HR file.
That separation matters because the ADA’s confidentiality rules are broader than many employers realize. Even a seemingly routine email chain about an accommodation, a manager’s notes from a conversation about restrictions, or an uploaded document in an HRIS can become an ADA-protected record if it includes medical information. Employers should train HR staff and managers to identify these materials early and route them to the correct location. The safest approach is to treat medical and disability-related information as a distinct record category with its own storage rules, access controls, and retention practices, rather than relying on employees or supervisors to decide case by case where something belongs.
Why does the ADA require medical information to be stored separately?
The ADA requires separate storage to protect employee privacy and to reduce the risk that medical information will improperly influence employment decisions. When disability-related or medical information sits in a regular personnel file, it becomes far easier for supervisors, recruiters, or decision-makers to see information they do not need and should not use. That creates legal exposure not only for confidentiality violations, but also for discrimination, failure-to-accommodate claims, and retaliation allegations if employment actions appear connected to disclosed medical details. Separate storage helps establish a clean boundary between employment decision-making and protected health information.
From a practical standpoint, separate files also support better internal discipline. They force employers to define who actually needs access, why they need it, and how that access should be documented. In many organizations, ADA records end up scattered across inboxes, leave management platforms, shared drives, supervisor desk files, and workers’ compensation folders. That fragmentation is where compliance problems start. A separate, controlled recordkeeping process allows an employer to centralize medical information, reduce accidental disclosure, and respond more consistently when an employee requests an accommodation, takes protected leave, or returns to work with restrictions. In other words, separate storage is not just a legal technicality; it is one of the main compliance tools the ADA expects employers to use.
Who is allowed to access confidential ADA medical records?
Access should be limited to people with a legitimate business or legal need to know. That usually means a small group of HR professionals, designated leave or accommodation administrators, in-house counsel when legal review is necessary, and certain safety or operational personnel in narrow circumstances. Supervisors and managers may be told about necessary work restrictions or accommodations, but they generally should not receive broad access to underlying medical records or diagnoses unless there is a specific reason the information is needed. First aid and safety personnel may be informed if an employee’s condition could require emergency treatment or special evacuation procedures. Government officials investigating ADA compliance may also be entitled to review relevant records.
The important distinction is between access to functional information and access to full medical documentation. A manager may need to know that an employee cannot lift over a certain weight, needs a modified schedule, or requires specialized equipment. That does not mean the manager needs copies of physician notes, details about a diagnosis, or the entire accommodation file. Employers should build their systems around that distinction by using role-based permissions, redacted communications where appropriate, and standardized summaries that communicate restrictions without oversharing medical details. If an employer cannot explain why a particular person can view a medical record, that access is probably too broad.
How should employers handle ADA records across hiring, leave, accommodations, and workers’ compensation processes?
Employers should treat ADA recordkeeping as a cross-functional compliance issue rather than a stand-alone HR filing task. Medical information can enter the organization through many doors: a post-offer medical inquiry during hiring, a request for reasonable accommodation, FMLA or other leave paperwork, return-to-work certifications, wellness program participation, or a workers’ compensation claim. If each process stores information independently without a common confidentiality standard, the employer can easily lose control over where protected records live and who can see them. A strong process maps every intake point for medical information and establishes a consistent rule that disability-related and medical records go into a protected medical record system or file, not the general employee file.
That process should also address technology and workflow design. For example, HRIS document tabs, shared email boxes, case management systems, payroll notes, and manager uploads should be reviewed to ensure medical documents are not being saved in visible or unrestricted locations. Workers’ compensation records deserve special attention because they often contain medical information and may be maintained by a separate team, vendor, or insurer. The same goes for leave administration platforms and third-party accommodation tools. Employers should decide where the official confidential file resides, who owns it, how duplicate records are minimized, and how communications are summarized for supervisors without disclosing unnecessary medical detail. The most defensible systems are the ones that account for the full lifecycle of the information, not just where the paper file ends up at the end.
What are the biggest ADA recordkeeping mistakes employers make, and how can they avoid them?
One of the most common mistakes is assuming that only formal medical records count. In reality, ADA-protected information often appears in informal places: manager emails about an employee’s condition, interview notes mentioning a disability, Slack or Teams messages about restrictions, calendar invites for accommodation meetings, or scanned documents uploaded to a general personnel folder. Another frequent problem is over-access. Employers may lock down paper files but leave digital systems configured so that supervisors, recruiters, payroll staff, or local administrators can still view medical notes. A third issue is inconsistency. Different teams may handle accommodations, leave, and workers’ compensation separately, with no unified standard for confidentiality, retention, or access control.
To avoid these problems, employers should start with a practical audit of where medical and disability-related information is actually created, received, stored, and shared. That means reviewing forms, intake channels, software permissions, manager practices, and vendor workflows, not just written policies. From there, they should create clear rules for what qualifies as confidential medical information, where it must be stored, who may access it, and how supervisors should receive only the information they need to implement restrictions or accommodations. Regular training is essential, especially for managers who are often the first to receive accommodation requests or doctor’s notes. Finally, employers should periodically test the system. If a confidential ADA record can still be found in a personnel file, a supervisor inbox, or a broadly shared drive, the process needs refinement. Good ADA recordkeeping is less about having a policy on paper and more about making sure daily workflows consistently protect the information the law requires employers to separate and safeguard.
