If you’ve ever been told, “We need your medical records for your OPF,” you probably felt uneasy — and for good reason. Your Official Personnel File (OPF) is a government employment record, not a medical chart. Yet many agencies routinely ask employees to provide medical information that is irrelevant, overly intrusive, or flat-out unlawful.

This guide explains exactly what agencies are allowed to request, what crosses the line, how to safeguard your medical privacy, and what to do when your agency is demanding more than the law permits.


What Is the OPF — and Why Medical Requests Are Sensitive

Your OPF is a personnel file containing employment history, actions, designations, and benefits information. It is not meant to store full medical records, diagnoses, or private health information.

Agencies may reference limited medical documentation in certain situations, but they cannot:

  • Demand entire medical histories

  • Store diagnostic details unrelated to job duties

  • Require treatment records or therapy notes

  • Collect genetic information

  • Use medical information to penalize an employee

Your OPF should never become a shadow medical file.


When Agencies Request Medical Records — and Why It Often Goes Wrong

Medical requests tied to employment typically arise in:

  • Reasonable accommodation cases

  • FMLA certifications

  • Fitness-for-duty concerns

  • Workers’ compensation (OWCP)

  • Sick leave disputes

  • Misconduct investigations involving alleged impairment

But the problem is not that the agency asks for information — it’s that they often ask for:

  • Far more than legally necessary

  • Information unrelated to essential job functions

  • Highly personal data that federal law protects

This overreach is both common and fixable.


What Agencies Can Legally Request

Medical documentation must be:

  • Narrowly tailored

  • Job-related

  • Necessary to verify an impairment or evaluate a workplace impact

Legitimate OPF-related medical info includes:

  • Confirmation of a condition that affects job performance

  • Functional limitations

  • Work restrictions

  • Expected duration

  • Accommodation-related details

Anything beyond this is usually unlawful.


What Agencies Cannot Request

The following requests almost always cross the line:

  • Complete medical files

  • Diagnosis information (unless you choose to disclose it)

  • Full treatment or therapy notes

  • Prescription lists

  • Mental health history unrelated to work functions

  • Genetic information or family health history

  • Records revealing stigmatized conditions (HIV status, psychiatric history, etc.)

Requests like these violate the Rehabilitation Act, ADA principles, FMLA limits, and GINA.


Red Flags: When Your Agency Has Gone Too Far

Be alert to the warning signs of improper medical demands:

  • “We need your entire medical history.”

  • “We must know your diagnosis to process the request.”

  • “We will deny your leave unless you release treatment notes.”

  • “Your medical information must go in your OPF.”

  • “You must sign a blanket authorization form.”

  • “Your condition is psychological — we need all behavioral records.”

These are violations — not standard procedure.


How Medical Information Must Be Stored

Medical information must be kept separate from the OPF, in a confidential, limited-access medical file.

Only employees with a legitimate need (typically reasonable accommodation, EEO, or safety officials) may access it.

If your medical information is placed in the OPF:

  • It is a breach of privacy

  • It may violate federal regulations

  • You may have an actionable EEO claim


Why Agencies Overreach: The Hidden Reasons

Agencies sometimes push for more records because of:

  • Misunderstanding of the law

  • Overly cautious HR personnel

  • Desire to evaluate the legitimacy of medical conditions

  • Internal preference for minimizing liability

  • Attempts to use medical information during discipline or performance actions

Regardless of motive, overreach is unlawful.


How to Push Back Professionally and Effectively

You can stop improper medical requests without appearing uncooperative.

Here is the most effective approach:

Step 1: Ask for Specificity

Can you please identify the exact medical information needed, why it is necessary, and how it relates to my essential job functions?

This forces the agency to commit to lawful boundaries.

Step 2: Offer Functional Information Only

I can provide functional limitations relevant to my job duties, as required by the Rehabilitation Act.

Step 3: Decline Broad Releases

Never sign blanket medical release forms unless legally required (rare).

Step 4: Request Separate Medical File Storage

Please confirm that any medical information provided will be kept in a confidential medical file, not my OPF.

Step 5: Document Everything

If the agency persists, documentation becomes your leverage for EEO or OSC complaints.


Hypotheticals: When Agencies Get It Wrong — and How It Gets Fixed

Hypo 1: The Blanket Release Form

Employee is told to sign a form giving the agency access to all medical providers.
Employee objects and asks for specifics.
Agency retracts request and accepts a functional statement instead.

Hypo 2: The Diagnosis Demand

HR insists on knowing the diagnosis before granting telework.
Employee cites Rehab Act limits.
HR accepts revised functional documentation and approves the accommodation.

Hypo 3: The OPF Violation

Medical letter is stored in the OPF.
Employee raises the issue.
Agency removes it, issues apology, and updates internal procedures.


What To Do If the Agency Refuses To Back Down

You should seek legal help if:

  • The agency asks for full medical records

  • Your OPF contains confidential medical information

  • HR is threatening discipline unless you provide diagnosis

  • Requests escalate or become punitive

  • You face a fitness-for-duty threat based on minimal evidence

This is where legal pressure is most effective — agencies typically correct course quickly.


Why Federal Employees Trust NSLF

Federal employees choose National Security Law Firm because we understand the internal mechanics of federal HR systems. Our attorneys come from DHS, TSA, CBP, DOJ, Army JAG, the intelligence community, and DOHA. We know how the government handles (and mishandles) medical information — and how to enforce your rights.

  • Deep insider experience

  • Nationwide representation

  • D.C.-based for federal employment law matters

  • 4.9-star Google rating from federal employees nationwide

  • Free consultations

  • Attorney Review Board collaboration system

When agencies cross the line, we push back — effectively.


Protect Your Privacy. Protect Your Career.

If your agency is asking for medical information that feels wrong, it probably is. You have strong rights under federal law, and we can help you enforce them.

Book a free consultation

National Security Law Firm: It’s Our Turn to Fight for You.