Can my employer see my medical records in a workers' comp claim?

An insurer, third-party administrator retained by a self-insured employer pursuant to Section 3702.1 to administer the employer’s workers’ compensation claims, and those employees and agents specified by a self-insured employer to administer the employer’s workers’ compensation claims, are prohibited from disclosing or causing to be disclosed to an employer, any medical information, as defined in Section 56.05 of the Civil Code, about an employee who has filed a workers’ compensation claim, except as follows:

Can my employer see my workers' comp medical records?

California law allows your employer to receive only two narrow categories of your medical information, not your full file.

Three kinds of people usually handle your claim file: the insurance company, a third-party administrator the insurer hires, or, on a self-insured job, that employer's own claims staff. A nurse case manager assigned to your file works on that same claims side and follows the same limit. Section 3762(c) stops all of them from passing your medical information to your actual employer, with only two exceptions:

• Your diagnosis and the treatment given for the condition you are claiming.
• Any work restrictions your employer needs to change your duties or offer modified work.

Older injuries, unrelated health conditions, and similar history outside your claim do not fit either category. Subdivision (a) of the same law is easy to confuse with this rule, but it covers something different: it lets your employer see claim-file material connected to the cost of the insurance policy. That part of the law is about premiums, not your medical history. Subdivision (c), covered above, is what keeps your health details out of that premium-related access. Subdivision (b) is a separate rule on the same premium-related access. It blocks documents covered by attorney-client privilege or another legal privilege, not medical records specifically.

Does HIPAA apply to workers' comp claims in California?

HIPAA's privacy rule mainly covers health plans, health care providers, and similar organizations, and it already lets them share information with the workers' comp system.

Many workers assume HIPAA is what keeps an employer out of a medical file. That is usually not the actual protection at work here. HIPAA's privacy rule applies to health plans, health care clearinghouses, and certain health care providers, not to a workers' comp insurer or an employer acting only in that role.

Where HIPAA does apply, such as at your doctor's office, it does not block your records from reaching the workers' comp system. Federal privacy rules include a specific workers' compensation exception: a covered health care provider may disclose protected health information as needed to carry out workers' comp law, without asking your permission first.

So the stronger limit on what reaches your employer is not HIPAA. It is Labor Code section 3762, covered above.

What medical records can workers' comp access, and what reaches my employer?

Your claims administrator can gather the records needed to evaluate your claim, but handing those records to your employer is limited to the same two categories.

After you file a claim, your treating doctor's office usually sends records about the claimed injury to the insurer or third-party administrator so they can decide whether to accept the claim and pay for care. That exchange runs between your doctor's office and the claims side. By itself, it does not put your file in your employer's hands.

What the claims side may then hand to your actual employer stays narrow:

• Your diagnosis and treatment for the condition you are claiming.
• Work restrictions your employer needs to adjust your duties or find you modified work.

If a document does not fit one of those two categories, section 3762 does not let the claims administrator pass it to your employer.

Can my employer talk to my workers' comp doctor?

This statute does not give your employer a right to contact your treating doctor directly, and a separate rule limits contact with medical evaluators.

Your primary treating physician (PTP) works on your medical care, not for your employer. If a qualified medical evaluator (QME) gets involved instead, Labor Code section 4062.3 sets its own notice and contact rules for that evaluator. Those rules protect the evaluation process. They are a different statute from the employer-disclosure limit covered on this page.

What can I do if my medical information was shared with my employer?

Write down what was shared, raise it with the claims administrator or California's Division of Workers' Compensation, and talk to an attorney if it continues.

Start by writing down what your employer seems to know, when you noticed it, and who told you. Ask the claims administrator, in writing if you can, what was sent to your employer and why. If the information goes beyond the two categories in section 3762, say so in writing and ask for it to stop.

If your employer treats you worse after learning your diagnosis, such as by cutting hours or pushing you out, that can raise separate concerns under California's job-protection laws. See what to do if your employer retaliates after a claim.

California's Division of Workers' Compensation runs a free Information and Assistance service for questions like this one.

A privacy question like this one usually comes up during the medical-treatment stage of a claim, while records move between your doctor, the claims side, and sometimes your employer. See where that stage sits inside the full California workers' comp claim process. If you are not sure whether what happened crosses the line in section 3762, or whether you need help from a workers' comp lawyer for this, the firm reviews each matter individually.

Call (661) 273-1780 or use the contact form to talk through what happened. There is no fee unless you win.