Case Study: Does HR Need to Be on the Phone During Your Return-to-Work Appointment?

An employee in New York is currently receiving short-term disability benefits and preparing to return to work.

According to the employee, HR told them they need clearance from the doctor who originally took them out of work. But HR also told them to provide the date and time of the appointment so that someone from HR can be on the phone during it and hear what the doctor says about returning to work.

The employee's immediate concern was privacy. They wondered whether this would violate HIPAA and believed HR should only need documentation confirming whether they can return and whether they have any restrictions.

There are some important nuances here.

But from an HR perspective, my first question is much simpler:

Why does HR need to be present for the medical appointment?

Needing Medical Information Isn't the Same as Needing Access to the Appointment

Return-to-work documentation is normal.

Depending on the circumstances, an employer may need confirmation that an employee is able to return to work, the date they're cleared to return, and whether they have restrictions that affect their ability to perform their job.

I've handled plenty of medical documentation as part of leave and accommodation processes.

But there's an important difference between obtaining the information HR needs to administer someone's return to work and participating in the employee's medical appointment.

Based on what this employee described, I don't understand what HR gains from being present on the phone that couldn't be accomplished through appropriate return-to-work documentation.

And before agreeing to something that gives an employer significantly more access to a medical encounter, that's the question I would ask.

The HIPAA Question Is More Complicated Than It Sounds

The employee immediately thought, "This has to violate HIPAA."

I understand why.

But workplace medical privacy is more complicated than simply asking whether HIPAA applies.

HIPAA primarily governs how certain healthcare providers, health plans, and other covered entities handle protected health information. Employers also have obligations surrounding employee medical information under employment laws that may apply to a particular situation.

In practical HR terms, the important takeaway is this:

Employee medical information should be treated as confidential.

Medical documentation shouldn't simply become part of an employee's ordinary personnel file. Access shouldn't be given to everyone who happens to manage or work with that employee. Managers generally need to know what affects the workplace — for example, that an employee has a restriction preventing them from lifting more than a certain amount — not every detail of the employee's diagnosis, treatment, medications, or medical history.

That's how I approached medical information throughout my years working in HR, and it's also why this particular request makes me pause.

If HR is present during an actual medical appointment, there is a significant possibility that the conversation will include information that has absolutely nothing to do with whether the employee can return to work.

Why create that situation if the necessary information can be obtained another way?

Short-Term Disability Doesn't Answer the Leave Question

There's another important piece of this case.

The employee tells us they're on short-term disability.

What we don't know is whether their absence is also covered by FMLA or another form of protected leave.

Short-term disability is generally an income-replacement benefit. It doesn't tell us, by itself, what employment protections apply to the absence.

That's a distinction I see people miss frequently.

Someone might be receiving STD benefits while also using FMLA leave. Someone else might receive STD benefits without being eligible for FMLA at all. Other protections or employer policies may also be relevant.

So I wouldn't want to make assumptions about this employee's rights or their employer's obligations based solely on the fact that they're receiving short-term disability.

What I'd Do in This Situation

I wouldn't start by accusing HR of violating HIPAA.

I also wouldn't immediately agree to let them participate in the appointment.

I'd ask for clarification in writing.

Something simple:

"Can you clarify what information HR needs directly from my provider during the appointment, and whether written return-to-work documentation confirming my return date and any applicable restrictions would satisfy the requirement?"

There may be an explanation we don't have.

Maybe the employee misunderstood what HR meant. Maybe HR explained the process poorly. Maybe there's something specific about the employee's position or circumstances that isn't included in the original post.

That's why I wouldn't jump straight from an unusual request to "this is illegal."

But if the answer really is, "No, written documentation isn't sufficient. We need someone from HR listening to your medical appointment," I'd have more questions.

What specifically does HR need to hear?

Why can't that information be requested through documentation?

What happens if unrelated medical information comes up during the appointment?

Who from HR will be listening?

What will be documented or retained afterward?

And what exactly is the employee being asked to authorize the healthcare provider to disclose?

Those are questions I would want answered before moving forward.

The Bigger Issue Isn't Just HIPAA

I think this case is a good example of why workplace medical privacy conversations can become confusing so quickly.

Employees often hear "medical information" and think HIPAA.

Employers sometimes legitimately need medical information to administer leave, accommodations, benefits, or a return to work.

Both of those things can be true while there is still a much more practical question sitting in the middle:

Does the employer actually need the information it's asking for — and is there a less intrusive way to get it?

Good HR practice isn't about collecting every piece of information you might conceivably be allowed to request.

It's about collecting the information you actually need to administer the employment process in front of you, protecting it appropriately, and limiting access to the people who need it.

In this case, I can understand why an employer needs to know whether an employee is able to return to work and whether there are restrictions that need to be addressed.

What I don't understand, based on the information provided, is why someone from HR needs to be sitting on the phone during the employee's medical appointment.

And that's where I'd start asking questions.