Employers are required to monitor and supervise employee health in specific, well-defined situations: when workers are exposed to hazardous substances above certain thresholds, when they hold safety-sensitive positions, when they return from injury or illness, and when federal regulations mandate periodic screening. Outside these situations, the law actually restricts how much medical information an employer can demand. Understanding both sides of that line is essential for staying compliant and protecting workers.
Hazardous Exposure Triggers Medical Surveillance
The most common trigger for employee health monitoring is workplace exposure to a regulated substance. OSHA sets permissible exposure limits for hundreds of chemicals, dusts, and materials, and when workers are exposed at or above the action level, medical surveillance becomes mandatory. The specifics vary by substance, but the structure is similar: a baseline exam when exposure begins, followed by periodic follow-ups at set intervals.
Respirable crystalline silica offers a clear example. Workers exposed above the action level must receive an initial physical exam with emphasis on the respiratory system, a baseline tuberculosis test, lung function testing (spirometry), and a chest X-ray. Those exams repeat every three years for as long as the exposure continues. If a chest X-ray shows early signs of scarring in the lungs, the worker must be referred to a board-certified specialist in pulmonary disease or occupational medicine for further evaluation.
Noise exposure follows a similar pattern. When workers are exposed to an 8-hour average of 85 decibels or higher, employers must provide a baseline hearing test within six months of the first exposure (or within one year if using a mobile testing van). Annual hearing tests follow, each compared against that baseline to detect any shift in hearing ability over time.
Safety-Sensitive Jobs Require Periodic Exams
Certain jobs carry enough public safety risk that health monitoring is required regardless of whether the worker has a known health problem. Commercial motor vehicle drivers are the most widespread example. A DOT physical exam is valid for up to 24 months, meaning drivers must be re-examined at least every two years. If the medical examiner identifies a condition that needs closer tracking, such as high blood pressure, the certificate can be issued for a shorter period, requiring the driver to return sooner.
DOT physicals must be performed by a licensed medical examiner listed on the Federal Motor Carrier Safety Administration’s National Registry. That includes physicians, physician assistants, advanced practice nurses, and doctors of chiropractic. The exam evaluates vision, hearing, cardiovascular health, and other factors directly tied to the ability to safely operate a commercial vehicle.
Similar periodic monitoring applies to workers in other safety-sensitive roles: airline pilots, nuclear plant operators, law enforcement officers, and firefighters all face regular health evaluations tailored to the physical and cognitive demands of their positions.
Respirator Use Requires Medical Clearance
Before an employee can be assigned to wear a respirator, OSHA requires a medical evaluation to confirm they can physically tolerate it. Respirators place extra stress on the heart and lungs, and certain health conditions can make wearing one dangerous. The evaluation starts with a standardized questionnaire that covers medical history, respiratory symptoms, and cardiovascular conditions.
Importantly, the employer or supervisor is not allowed to see the employee’s answers. The completed questionnaire goes directly to the reviewing healthcare professional, who then determines whether the employee is cleared to wear a respirator, needs a follow-up exam, or should not wear one at all. This is one of the clearest examples of health monitoring where privacy protections are built directly into the process.
After an Exposure Incident
When an employee is potentially exposed to a bloodborne pathogen, such as through a needlestick injury or splash to the eyes or mouth, a specific post-exposure protocol kicks in immediately. The first steps are physical: wash the wound with soap and water, flush any splashes with clean water or saline, and report the incident to a supervisor. Medical evaluation should follow as quickly as possible.
The timeline for preventive treatment is tight. For hepatitis B exposure, post-exposure prophylaxis should be given within 24 hours. For HIV, it should start within hours. The follow-up testing schedule stretches much longer. Hepatitis C requires blood testing at 4 to 6 months after exposure, with an optional earlier test at 4 to 6 weeks. HIV testing continues for at least 6 months, with checks at baseline, 6 weeks, 3 months, and 6 months. Workers receiving HIV prophylaxis are also monitored for drug side effects for at least two weeks.
Fitness-for-Duty Evaluations After Injury or Illness
When an employee has been out of work due to a health problem, employers can require a fitness-for-duty evaluation before allowing them to return. These assessments look at two variables: the nature of the work and the worker’s current health condition. The goal is to determine whether the employee can perform essential job functions without posing a risk to themselves or others.
A fitness-for-duty evaluation may include a functional capacity assessment, which can involve task simulations or validated physical tests that mirror actual job demands. The evaluating provider considers physical strength, mental and cognitive capacity, and social functioning as they relate to the specific role. The outcome is one of three determinations: fit for duty, fit with accommodations, or unfit for duty.
The Americans with Disabilities Act governs this process closely. Employers can only require these evaluations when they have a reasonable, objective basis for believing the employee’s condition affects their ability to do the job safely. The ADA also requires employers to consider reasonable accommodations before declaring someone unfit, such as modified duties, adjusted schedules, or assistive equipment.
Legal Limits on Medical Inquiries
Outside of the situations described above, employers face significant restrictions on when they can ask about an employee’s health. Under the ADA, a covered employer cannot require a medical examination or ask disability-related questions unless the inquiry is job-related and consistent with business necessity. That standard is met when the employer has a reasonable belief, based on objective evidence, that a medical condition will impair the employee’s ability to perform essential functions or will pose a direct threat.
There are several narrower situations where medical inquiries are permitted. Employers can ask employees to justify sick leave use with a doctor’s note, as long as that policy applies equally to all workers. They can conduct medical inquiries mandated by another federal law or regulation (like DOT physicals or OSHA surveillance). And they can offer voluntary health programs, including wellness screenings and health risk assessments, without meeting the job-related standard, provided any medical records collected are kept confidential and stored separately from personnel files.
That separation of records matters in every context. Employers may not mix medical information into standard personnel files, and access to health data should be limited to those with a legitimate need to know.
Mental Health and Workplace Surveillance
Monitoring psychological health at work raises distinct challenges. While employers increasingly use technology to track productivity, communication patterns, and even biometric data, research suggests that invasive surveillance can itself harm mental health by creating a climate of fear, resentment, and eroded trust. Lower organizational trust is independently associated with poorer well-being, meaning that monitoring intended to improve performance can backfire if it feels punitive.
That said, the relationship is not entirely one-directional. Some research has found a positive association between certain forms of monitoring and job satisfaction, particularly when tracking data is used to give workers constructive feedback rather than to discipline them. The key factors are transparency, worker autonomy, and sensitivity to the power dynamics embedded in collecting employee data. Surveillance that empowers workers tends to be received positively; surveillance that controls them does not.
For employers interested in tracking burnout or stress trends, anonymous aggregate surveys remain the most ethically defensible approach. Individual-level psychological monitoring crosses into territory where legal protections, ethical norms, and practical effectiveness all push back.
How Long Health Records Must Be Kept
OSHA requires employers to retain employee medical records for the duration of employment plus 30 years. Exposure records, which document what substances a worker encountered and at what levels, must be kept for 30 years. These retention periods exist because many occupational diseases, particularly lung conditions and cancers, can take decades to develop after initial exposure. If a former employee develops silicosis or mesothelioma 20 years after leaving a job, those records become critical for establishing the connection between work and illness.