Medical certificate privacy: employer questions and clinical records

Find out what the employer wants to establish

An employer may be concerned that a document is genuine, that dates are unclear or that a separate workplace-safety question remains unanswered. Those are different issues. Ask for the request in writing so you and the clinic can understand it accurately.

For example, an incorrect spelling may need an administrative correction. A request for your full consultation notes involves sensitive health information. A requirement for a specific fitness assessment may need a different clinician or process. Treating all three as “checking the certificate” can obscure what is actually being asked.

What does Fair Work say?

Fair Work explains that employers can request reasonable evidence for sick or carer's leave, including for a short absence. Its guidance also says it does not consider employer contact with the employee's doctor for further information reasonable. The evidence process is not an open-ended invitation to investigate a medical history. Fair Work guidance on notice and medical evidence

That guidance should not be stretched into a universal answer for every employment situation. Legal Aid NSW describes circumstances involving requests for medical information or examinations, including questions about performing a role safely. If your case goes beyond routine leave evidence, obtain advice about the particular request. Legal Aid NSW: Employment problems: requests for medical information or examinations

Verification is not a clinical consultation

A certificate verification process can confirm limited document information. It should not be assumed to provide the employer with access to your diagnosis, treatment or consultation record. Ask the issuing service what its verification process actually discloses before relying on assumptions about the word “verification”.

Doccio provides a certificate verification service using the certificate's verification ID. If the employer raises a concern about authenticity or an error, contact the clinic through its normal support process. Verification does not itself decide your paid leave entitlement.

Health information has privacy protections

The Office of the Australian Information Commissioner explains that Australian privacy law places rules on how health services collect, use and disclose health information. These protections are relevant when another party asks a clinic for information about your care. Office of the Australian Information Commissioner: Health information

Avoid sending broad consent or complete records without understanding the purpose. Ask which information is needed, who will receive it and how it will be used. If you are asked to sign an authority and are unsure about its effect, seek advice before treating it as routine paperwork.

What if the clinic receives a call?

You can ask the clinic how it handles third-party requests. It may need to establish the caller's identity and consider what, if anything, it can appropriately disclose. Do not assume that any person claiming to be a manager is entitled to receive clinical details.

If the issue is a genuine error, explain the correction needed and let the issuing clinician review it. Do not change the document yourself. If the employer asks for a new clinical opinion, the doctor may need an assessment rather than an administrative amendment.

What should I do if there is a disagreement?

Keep the certificate, the employer's request and your correspondence. Ask whether the concern relates to evidence, pay, privacy or fitness for work. This helps you identify whether the next conversation belongs with the clinic, payroll, Fair Work, your union or an employment adviser.

Do not ask the doctor to certify an opinion they cannot support simply to end the dispute. Equally, do not assume you must disclose every detail because your manager asked. The right response depends on the actual request and the rules applying to the employment arrangement. Fair Work guidance on notice and medical evidence Legal Aid NSW: Employment problems: requests for medical information or examinations

Where can I read more?

For the general evidence standard, read are online medical certificates valid?. For the separate question of document wording, see does a certificate need to include a diagnosis?.

If you need a new assessment, use Doccio's certificate service. If you already have a document, start by explaining the specific query to the issuing service. Keeping the question narrow helps avoid unnecessary disclosure and directs it to the person best placed to respond.

Identify what the employer is actually asking

Ask whether the concern is authenticity, the dates, work capacity or access to clinical information. These are different requests. A verification process can establish that a document was issued without necessarily revealing the consultation record. A request for capacity information may need a more specific clinical assessment.

Keep the exact wording of the request and bring it to the issuing service. Avoid summarising everything as “my employer wants more details” when the service needs to know which details and why. A clear request is easier to assess appropriately.

Do not send the whole record by default

Before sharing a consultation summary, consider whether it contains information unrelated to the workplace question. Ask the clinician or clinic whether a more focused document can address the legitimate request. The OAIC's health information guidance explains the privacy framework for handling health information.

Do not assume that giving consent to one disclosure means consenting to every future conversation. Ask what information would be shared, with whom and for what purpose. If you are uncertain about the workplace's authority to request it, seek appropriate employment advice.

Prepare a calm response to a query

A practical response can acknowledge the request, ask what specific issue needs resolving and explain that you will contact the issuing service. For example: “Please confirm whether you need the certificate's authenticity checked or additional information about work capacity. I will ask the clinic about the appropriate process.”

This is an administrative example, not a legal response for every dispute. Keep the tone factual and preserve copies. Do not alter the certificate or add clinical detail yourself to make it appear more acceptable.

Corrections and new opinions are different

A misspelled name or incorrect administrative detail may be a correction request. Additional dates, a diagnosis or a new opinion about duties may require further clinical assessment. Explain the distinction when contacting the service so it can route the request appropriately.

The issuing clinician decides what can be supported. An employer's preferred wording does not establish that the wording is clinically accurate. If the request goes beyond the original assessment, ask what appointment or records would be needed rather than expecting a document to be rewritten automatically.

Use secure channels for the exchange

Confirm the recipient and the employer's preferred submission process before sending a document. Avoid posting a certificate in a group chat that includes people who do not need it. Keep the original copy and note when and where it was submitted.

If a document went to the wrong recipient, contact the relevant organisation promptly for advice. Ask the clinic about its process if you are worried that information was disclosed incorrectly. Do not try to solve a privacy concern by forwarding more records to a wider group.

Know when the question needs independent advice

An ordinary sick-leave evidence query and a separate fitness-for-work process can involve different considerations. If the request is broad, disputed or linked to possible employment action, obtain appropriate advice rather than assuming a general online guide settles the issue.

Continue necessary health care while the administrative question is resolved. A clinician can explain their opinion and privacy process, but cannot guarantee how an employer will decide a dispute. Keep the health, evidence and employment questions clear so each can be addressed by the right person.

Discuss your next step with a doctor

Read about Doccio's medical certificate assessment and book an online doctor appointment for a suitable non-emergency concern. Bring the relevant history, records and questions from this guide. A doctor decides whether advice, treatment, a document, testing or in-person care is appropriate. Check current fees and service information before booking. If symptoms are urgent, use the appropriate urgent or emergency service instead of waiting for a routine appointment.