As I understand it, HIPAA only applies to health care providers or health plans and their "business associates."

Employers are not required to comply with HIPAA.

Correct.  it would be unprofessional for a Human Resources  employee to disclose personal medical information, but it would not be a HIPAA violation.

Too late now, but im surprised your dr put those kind of details in your medical request...I was under the impression all they had to say was you were going out under a medically recommended surgery... and needed ____ recommended period of time off from work...

Good luck with your HR dept...

I am with suppershopper and naveychic- first you do not need to tell your employer what you are doing only provide a note that says you need so much time off for medical reasons. However, your HR department is absolutely required to keep your medical information confidential and secure. If she tells your business to others you have a right to grievance against it. Seeing as you have already given her your medical documents I would maybe follow up with a friendly warning that your medical information is confidential and that you want to make sure that the department keeps it that way. Good luck on Monday!

The FMLA forms are federal forms that requires the doctor put the details if the condition. The employer needs to be able to determine if it meets the guidelines of a "serious health condition".  I'm an HR Manager and had to have all those details put out there, but luckily I confided in my boss and she held the paperwork so no one else could pull/read them.

I'll say that if someone in my staff disclosed anything about an employees medical condition, I'd discipline them harshly!!

Thanks @Melissa and @Navychic, but these were insurance papers to cover the short term disability/FMLA. I very specifically asked the nurse who filled them out if she had to write it in so specifically, and she said yes :(

Oh well...hopefully I am overreacting and her professionalism will kick in.

I am overreacting and her professionalism will kick in.

-I doubt it. I usually trust peoples prior track record than have blind faith..

I have a similar situation. I was hoping to be very discrete to HR. But, after I received the paperwork the insurance company requires to be filled out for short term disability, it asks for my height/weight AND reason for leave. In addition, it asks "have you had this condition before". I still tried to prevent HR from seeing the form by offering to send it in myself but they said they need to make a copy for my HR file.

It's possible you could attempt to scare her in to silence by saying, "I trust the nature of my surgery will be kept quiet in accordance with HIPPA and the FMLA". That's what I did. Of course, I don't know if it worked for sure but I haven't heard any rumors (though, I would be the last to know).

Yeah, I am trying to decide if making a veiled threat will help or hurt. Its out of our hands now, anyway, though, right?

Wishing you the best in both recovery and secrecy!!

Only health care providers are bound by HIPAA regulations.  Employers are not.  It would be unprofessional for an HR person to share that information, but NOT a HIPAA violation.

If she is a blabbermouth, she should not be in HR.  I would contact HER manager if she reveals personal information.

Lora