re: #26 erik_t
HIPAA would specifically limit the kinds of information that could be shared with employers. Employers are noncovered entities, but insurers, doctors, hospitals are. For instance, health information cannot be used or shared without your written permission unless this law allows it. For example, without your authorization, your provider generally cannot: Give your information to your employer; Use or share your information for marketing or advertising purposes; or Share private notes about your health care.