EEOC Informal Discussion Letter

An EEOC Office of Legal Counsel staff member wrote the following informal discussion letter in response to a Federal Register notice. This letter is intended to provide an informal discussion of the noted issue(s) and does not constitute an official opinion of the Commission.

ADA/GINA: Confidentiality of Protected Medical and Genetic Information

December 12, 2018

TRANSMITTED VIA E-MAIL

Ron Bailey
Office of the General Counsel
Occupational Safety and Health Review Commission
One Lafayette Centre
1120 20th Street NW
Ninth Floor
Washington, DC 20036-3457

Re: Request for Comments Regarding OSHRC-4, Payroll and Related Records

Dear Mr. Bailey:

The U.S. Equal Employment Opportunity Commission (EEOC) submits this comment in response to the request for comments regarding the Occupational Safety and Health Review Commission's (OSHRC's) modified system of records, OSHRC-4, Payroll and Related Records.[1]

As you know, the EEOC enforces the federal laws that prohibit employment discrimination on the basis of race, color, religion, sex, national origin, age, disability, or genetic information.[2] The laws enforced by the EEOC also prohibit retaliation for filing a charge or complaint of employment discrimination, participating in an employment discrimination proceeding, or opposing such discrimination.[3] Further, the EEOC coordinates and leads the federal government's efforts to eradicate employment discrimination.[4]

As indicated below in greater detail, we recommend that OSHRC review and revise the routine uses applicable to OSHRC-4 as necessary to avoid any unintended conflict with the Rehabilitation Act of 1973 and Title II of the Genetic Information Nondiscrimination Act of 2008.

Overview of OSHRC-4, Payroll and Related Records

OSHRC-4 covers current and former OSHRC employees and members.[5] Records in the system include, among others, Family and Medical Leave Act records, including "medical information pertinent to leave requests," and leave records.[6] In addition to disclosures generally permitted under 5 U.S.C. § 552a(b) of the Privacy Act, records maintained in OSHRC-4 may be disclosed as a routine use pursuant to 5 U.S.C. § 552a(b)(3) in twenty-three delineated situations.[7]

Confidentiality Requirements of Section 501 of the Rehabilitation Act of 1973

The EEOC enforces Section 501 of the Rehabilitation Act of 1973, as amended (Rehabilitation Act), which prohibits federal agencies from discriminating against qualified applicants or employees on the basis of disability.[8] The Rehabilitation Act restricts the circumstances under which federal agencies may obtain applicants' and employees' medical information, and requires that federal agencies that lawfully obtain such information collect and maintain the information on separate forms and in separate medical files and treat it as a "confidential medical record."[9]

Disclosure of medical information governed by the Rehabilitation Act's confidentiality provisions is permitted only in limited circumstances. Specifically, federal agencies may share medical information with supervisors and managers who need to know about an employee's work restrictions and necessary accommodations, with first aid and safety personnel if an employee's disability might require emergency treatment or assistance in the event of an emergency, and with government officials investigating Rehabilitation Act compliance.[10] The EEOC also has interpreted the Rehabilitation Act to allow federal agencies to disclose information for workers' compensation and insurance purposes.[11]

Confidentiality Requirements of Title II of the Genetic Information Nondiscrimination Act of 2008

The EEOC also enforces Title II of the Genetic Information Nondiscrimination Act of 2008 (GINA), which prohibits employment discrimination based on genetic information.[12] Protected genetic information under GINA includes, among other things, family medical history and genetic test results.[13] GINA restricts the circumstances under which federal agencies may obtain applicants' and employees' genetic information, and, like the Rehabilitation Act with respect to covered medical information, requires that federal agencies that lawfully obtain genetic information keep it confidential and retain it in separate medical files.[14]

Federal agencies may disclose genetic information in six limited circumstances[15]:

1. To the employee or family member about whom the information pertains upon receipt of the employee's or family member's written request;
2. To an occupational or other health researcher conducting research in compliance with certain federal regulations;
3. In response to a court order expressly authorizing disclosure of specified genetic information;
4. To government officials investigating compliance with Title II of GINA, if the information is relevant to the investigation;
5. For leave certification under the FMLA or state family and medical leave laws; or
6. To a public health agency only with regard to information about the manifestation of a disease or disorder that concerns a contagious disease that presents an imminent hazard of death or life-threatening illness.

Recommendation Regarding Routine Uses Applicable to OSHRC-4

We believe that a few of the routine uses applicable to OSHRC-4 would permit disclosure of protected medical and/or genetic information in system records in circumstances beyond what the Rehabilitation Act and GINA permit. For example, Routine Use 3 permits OSHRC to disclose system records to government agencies when necessary to obtain relevant information regarding, among other things, OSHRC decisions with respect to hiring, appointment, or retention; suitability investigations; contract awards; or the issuance of a license or grant.[16] Routine Use 4 permits OSHRC to disclose system records to government agencies upon request when relevant and necessary for the requesting agency's use in connection with, among other things, employee hiring, appointment, or retention; suitability investigations; contract awards; or the issuance of a license or grant.[17]

We recommend that OSHRC review and revise the routine uses applicable to OSHRC-4 as necessary to prevent any unintended legal conflicts. For example, OSHRC could exempt medical and genetic records, reports, or information from disclosure, where possible, or redact protected medical and/or genetic information from records prior to disclosure.

Thank you for the opportunity to provide these comments in response to the proposed information system. Should you have any questions, please feel free to contact me.

Sincerely,

 

Lisa Schnall
Senior Attorney Advisor
Office of Legal Counsel
U.S. Equal Employment Opportunity Commission

FOOTNOTES:

[1] Privacy Act of 1974; System of Records, 83 Fed. Reg. 56,380 (Nov. 13, 2018).

[2] See Title VII of the Civil Rights Act of 1964, as amended, 42 U.S.C. § 2000e et seq.; the Age Discrimination in Employment Act of 1967, as amended, 29 U.S.C. § 621 et seq.; Section 501 of the Rehabilitation Act of 1973, as amended, 29 U.S.C. § 791; Titles I and V of the Americans with Disabilities Act of 1990, as amended, 42 U.S.C. § 12101 et seq.; the Equal Pay Act of 1963, 29 U.S.C. § 206(d); and Title II of the Genetic Information Nondiscrimination Act of 2008, 42 U.S.C. § 2000ff et seq.

[3] 42 U.S.C. § 2000e-3(a); 29 U.S.C. § 623(d); 29 U.S.C. § 791(g) (incorporating, among other provisions, the anti-retaliation provision of the ADA into the Rehabilitation Act); 29 U.S.C. § 215(a)(3); 42 U.S.C. § 2000ff-6(f).

[4] Exec. Order No. 12,067, 43 Fed. Reg. 28,967 (June 30, 1978).

[5] 83 Fed. Reg. at 56,381.

[6] Id.

[7] Id. at 56,381 – 82.

[8] 29 U.S.C. § 791 et seq. See also 29 U.S.C. § 791(g) (applying the standards under Title I of the Americans with Disabilities Act of 1990 to the Rehabilitation Act).

[9] 42 U.S.C. § 12112(d); 29 C.F.R. §§ 1630.13, 1630.14(b)(1), (c)(1), (d)(1).

[10] 29 C.F.R. § 1630.14(b)(1), (c)(1), (d)(1).

[11] 29 C.F.R. pt. 1630, App. § 1630.14(b).

[12] 42 U.S.C. § 2000ff et seq.; 29 C.F.R. pt. 1635.

[13] 42 U.S.C. § 2000ff(4); 29 C.F.R. § 1635.3(c).

[14] 42 U.S.C. § 2000ff-1(b); 42 U.S.C. § 2000ff-5.

[15] 42 U.S.C. § 2000ff-5; 29 C.F.R. § 1635.9.

[16] 83 Fed. Reg. at 56,381 – 82.

[17] Id. at 56,382.