29 CFR Part 1630, Regulations to Implement the Equal Employment Provisions of the ADA (Title I Regulations with amendments issued through May 2016)

(c) Examination of employees. A covered entity may require a medical examination (and/or inquiry) of an employee that is job-related and consistent with business necessity. A covered entity may make inquiries into the ability of an employee to perform job-related functions.

(1) Information obtained under paragraph (c) of this section regarding the medical condition or history of any employee shall be collected and maintained on separate forms and in separate medical files and be treated as a confidential medical record, except that:

(i) Supervisors and managers may be informed regarding necessary restrictions on the work or duties of the employee and necessary accommodations;

(ii) First aid and safety personnel may be informed, when appropriate, if the disability might require emergency treatment; and

(iii) Government officials investigating compliance with this part shall be provided relevant information on request.

(2) Information obtained under paragraph (c) of this section regarding the medical condition or history of any employee shall not be used for any purpose inconsistent with this part.