Employers need enough medical information to manage accommodation, but that does not mean they are entitled to everything that could be learned about an employee's health.
In AA v. Inuvik Regional Hospital (Government of the Northwest Territories), 2024 CanLII 54015, a hospital employee raised disability discrimination, harassment and privacy concerns arising from a return to work process. The human rights panel rejected several of the allegations, but it found a breach in the way the employer sought medical information.
The employer altered a return to work form and obtained sensitive information beyond what was required at that stage. The panel distinguished legitimate functional information from additional medical detail that the established process did not call for. It awarded $5,000 for injury to dignity, feelings and self respect.
The rest of the complaint did not succeed. Actions such as changing locks and removing the employee's name from a schedule were not found to be discriminatory harassment on the evidence. That makes the decision particularly useful because it does not treat every uncomfortable part of a return to work process as a human rights violation.
The practical lesson is about proportionality. An employer may need to know what an employee can and cannot do, whether restrictions are temporary or continuing and what accommodation might be effective. The employer does not automatically need diagnosis details or other sensitive information that adds nothing to those questions.
A structured medical information process helps. Standard forms, clear instructions and agreed procedures can reduce unnecessary disclosure. But the protection disappears if people modify the process in a way that seeks more information than the workplace decision actually requires.
For HR and disability management teams, the safer question is not whether medical information would be useful in a general sense. It is whether each piece of information is reasonably necessary for the decision that has to be made now. That narrower approach protects employee privacy while still giving the employer what it needs to manage a safe and workable return.