Is It Illegal to Ask About Medical Conditions? U.S. Privacy Rules Explained

In the United States, asking someone about a medical condition is not automatically illegal. The answer depends on who is asking, why they need the information, and how they use or share it. Federal laws such as the Americans with Disabilities Act (ADA), the Health Insurance Portability and Accountability Act (HIPAA), and the Family and Medical Leave Act (FMLA) address different situations. State and local laws may add protections. Understanding the context helps distinguish a lawful, limited request from an inappropriate or discriminatory one.

Is It Illegal to Ask About Medical Conditions?

Usually, a person may ask about another person’s health, but the person being asked generally does not have to answer. Simply asking a question is different from requiring disclosure, keeping medical information confidential, or making a decision based on it. Those actions may be restricted by law, depending on the setting.

For example, a friend can ask whether someone has a health condition, but that question is generally a matter of personal boundaries, not a federal privacy violation. A prospective employer, by contrast, faces specific restrictions on medical questions during hiring. A health care provider may ask relevant questions to diagnose or treat a patient, while HIPAA limits how covered providers use and disclose protected health information.

There is no single U.S. law that makes every question about a medical condition illegal. The rules are context-specific, and state or local protections can be broader than federal law.

When Employers Can Ask About Medical Conditions

The ADA is a central federal law governing disability-related questions at work. It applies to covered employers and generally restricts medical inquiries and examinations at different stages of employment. The goal is to prevent employers from screening people out based on disability while still allowing legitimate, job-related processes.

Before a job offer

Before making a conditional job offer, an employer generally may not ask an applicant whether they have a disability, what medications they take, or about the nature or severity of a medical condition. Questions likely to reveal a disability can also be prohibited, even if they do not name a specific diagnosis.

Employers may ask whether an applicant can perform particular job duties, with or without a reasonable accommodation. They may also ask an applicant to describe or demonstrate how they would perform a job-related task, provided the inquiry is not a disguised medical examination.

Employers can ask voluntary questions for affirmative action purposes in certain circumstances, but the information must be handled separately from hiring decisions. Rules can vary by employer type and applicable state or local law.

After a conditional job offer

After extending a conditional offer, an employer may ask medical questions or require a medical examination if it does so for all entering employees in the same job category. If the process reveals a disability, the employer generally cannot withdraw the offer simply because of that information. It may do so only if the applicant cannot perform essential job functions, even with reasonable accommodation, or if the applicant poses a direct threat that cannot be reduced through accommodation.

Any decision must be based on reliable, individualized evidence—not stereotypes or assumptions about a diagnosis. A direct-threat assessment must consider the nature, severity, likelihood, and imminence of potential harm.

During employment

Once someone is employed, a medical inquiry or examination generally must be job-related and consistent with business necessity. An employer may have a valid reason to ask for information when objective evidence suggests that a medical condition may affect the employee’s ability to perform essential duties or may create a safety concern.

An employee may also disclose a condition when requesting a reasonable accommodation. The employer can request limited documentation when the disability or need for accommodation is not obvious, but it generally should seek only information needed to confirm the disability-related limitation and identify an effective accommodation. It should not demand a complete medical history without a sound, job-related basis.

Medical Information at Work: Privacy and Confidentiality

Under the ADA, medical information obtained by an employer must generally be kept confidential and stored separately from ordinary personnel files. It may be shared in limited circumstances, such as with supervisors who need to know about necessary work restrictions or accommodations, safety personnel when emergency treatment may be required, or government officials investigating compliance.

Confidentiality does not mean an employer can never discuss a workplace adjustment. A supervisor may need to know that an employee has modified hours or must avoid a particular task. In most cases, the employer does not need to disclose the employee’s diagnosis to explain the arrangement to coworkers.

Other laws can apply as well. The Genetic Information Nondiscrimination Act (GINA) generally restricts employers from requesting, requiring, or using genetic information in employment decisions, subject to limited exceptions. The FMLA and state leave laws may allow employers to request medical certification to support qualifying leave, but the request should follow the applicable rules and focus on the leave-related need.

Does HIPAA Prevent People From Asking About Health?

HIPAA is not a general law that makes it illegal to ask someone about a medical condition. It primarily regulates covered health care providers, health plans, and health care clearinghouses, as well as certain business associates that handle protected health information for them.

HIPAA generally restricts covered entities from using or disclosing protected health information without authorization or another legal basis. It does not usually regulate what a private individual, neighbor, ordinary employer, or most businesses may ask in conversation. It also does not automatically prevent a patient from sharing their own information.

Employers’ workplace medical records are generally not protected by HIPAA simply because they contain health information. Employment records held by an employer in its role as an employer are usually outside HIPAA’s protected-health-information rules. However, the ADA, state privacy laws, workplace policies, and other laws may require confidentiality.

There can be exceptions and overlapping rules. If an employer receives health information through a group health plan or a covered health care provider, the role in which the information is held matters. The specific facts determine which privacy requirements apply.

Medical Questions in Schools, Housing, and Public Services

Schools and colleges

Schools may need health information to respond to emergencies, administer medication, arrange disability accommodations, or meet other legal obligations. For students with disabilities, federal laws such as the Individuals with Disabilities Education Act (IDEA) and Section 504 of the Rehabilitation Act may apply, depending on the student and institution.

Privacy rules also depend on the records and setting. The Family Educational Rights and Privacy Act (FERPA) generally governs education records at covered schools; it is distinct from HIPAA. A school may ask for documentation relevant to an accommodation, but the scope and process depend on the applicable law, school level, and request.

Landlords and housing providers

The Fair Housing Act prohibits discrimination based on disability in covered housing. A housing provider generally should not ask every applicant for a diagnosis. When a person requests a reasonable accommodation and the disability or need is not apparent, a provider may be able to request reliable information necessary to establish the disability-related need.

That does not ordinarily entitle the provider to a full medical file or unnecessary details. The appropriate documentation depends on the request and applicable law. Some state and local laws provide additional protections, and housing rules may differ for particular types of housing.

Businesses and public services

Businesses open to the public may ask questions that help provide a service, but they generally cannot use disability-related inquiries to discriminate against customers. Under the ADA, they may ask limited questions in certain circumstances—for example, questions needed to determine whether an animal qualifies as a service animal when its role is not obvious. They generally may not demand medical records or ask for the person’s diagnosis.

Public agencies and service providers may also have obligations under disability-rights laws. A request for medical information should be tied to a legitimate purpose, such as evaluating an accommodation, and should not be used to exclude someone based on assumptions.

Insurance, Medical Care, and Other Common Situations

Health care providers routinely ask about symptoms, diagnoses, medications, and medical history when the information is relevant to care. Patients can ask why information is needed, how it will be used, and whether a particular question can be left unanswered. Withholding relevant information may affect diagnosis, treatment, or safety.

Insurance rules depend on the type of coverage and the information requested. Health insurers covered by federal law generally cannot use health status to deny or charge more for coverage in many common situations, but the rules differ for life, disability, and long-term-care insurance. Applicants should not assume that protections for health insurance apply to every insurance product.

Government forms, disability-benefit applications, occupational licensing, and safety-sensitive jobs may also involve health questions. Whether a question is permitted depends on the program’s authority, the relevance of the information, and any applicable privacy or anti-discrimination law.

When a Medical Question May Be Improper

A question is more likely to raise legal concerns when it is asked for a prohibited purpose, seeks more information than is reasonably necessary, or leads to discrimination. Warning signs include:

• Pre-offer job screening: An employer asks applicants about diagnoses, medications, or disability history before making a conditional offer.
• Unequal treatment: A person is asked medical questions because of a disability or perceived condition while comparable people are not.
• Unnecessary detail: A decision-maker demands extensive records when a limited confirmation would address the stated need.
• Improper disclosure: Medical information is shared with people who do not have a legitimate need to know.
• Stereotype-based decisions: Someone is rejected, disciplined, or denied service based on assumptions about a condition rather than individualized evidence.

Not every intrusive or uncomfortable question violates a law. The question’s setting, purpose, and consequences matter, and some states and cities impose protections beyond federal requirements.

How to Respond to a Medical Question

A person does not always need to disclose a diagnosis. A measured response can clarify the request without sharing unnecessary details:

• Ask why the information is needed and how it will be used.
• Ask whether a more limited answer or document would meet the stated requirement.
• For a workplace accommodation, explain the work-related limitation and requested adjustment; provide only appropriate supporting documentation.
• For a school or housing accommodation, ask which records are required and who will have access to them.
• Keep copies of requests, forms, emails, and responses, especially if the question affects hiring, employment, housing, or access to a service.

When a request seems discriminatory or excessive, a person can consult the relevant agency or a qualified attorney. The U.S. Equal Employment Opportunity Commission (EEOC) handles many federal employment-discrimination matters; the U.S. Department of Housing and Urban Development (HUD) handles federal fair-housing complaints. Filing deadlines and procedures can be strict, so prompt guidance is important.

Key Laws and Their General Scope

These laws address different relationships and records; one law should not be assumed to govern every medical question. For a specific dispute, the relevant facts, state law, and the identity of the person requesting information all matter.