2. Does my employer have access to my medical records or insurance claims?

A. Absolutely not. HIPAA prohibits employers from accessing patient records or insurance claims because it could result in discrimination. If an employer wants to see any of your medical information, the employer would need to receive your written permission. Under HIPAA, your supervisor or human resource officials can request a doctor's note or information about your health only if needed to administer sick leave, workers' compensation, wellness programs or health insurance.

3. What rights do I have to access and control my health information?

A. Health insurers and providers must make your health records available to you upon request, allow you to copy the records and make corrections. Insurers and providers have an obligation to tell you how your health information may be used or shared. Even if you undergo genetic testing, federal regulations make that information subject to the same privacy protections of HIPAA. A 2008 federal law prohibits employers from denying you a job or firing you, and health insurers from refusing coverage, based on genetic information.

If you believe your rights have been violated, you can file a complaint with your provider or health insurer or with the U.S. Department of Health and Human Services.