My employer forces everyone to submit their prescription medication information, with disciplinary action if you don't. I work in construction. Do they have the right to ask for my prescriptions?
Your privacy rights around medication at work
Questions about prescribed medication can come up in various workplace situations. You might face them during a pre-employment health questionnaire, a return to work meeting after illness, or as part of ongoing health and safety checks.
If your employer has asked you to disclose what medication you take, you may feel uncertain about where you stand. Do they have the right to ask? Are you obliged to answer?
Employers can ask about medication in some circumstances, but your privacy is protected by law. In most cases, they cannot demand this information without a legitimate reason, though certain safety-critical roles may legally require such disclosure.
Workplace Privacy Rights Checker
Your employer has asked for something that feels intrusive. Tell us what they want and your situation and we will explain your rights and what you can do.
Try our Workplace Privacy Rights Checker free, here on this site →How UK data protection law treats health information
Details about your health, including any medication you take, fall under a stricter category of personal data. Under the UK General Data Protection Regulation and the Data Protection Act 2018, this counts as special category data.
Special category data has stronger legal protections than ordinary personal information. Your employer cannot collect or process it just because they think it might be useful at some point. They must demonstrate both a lawful basis under GDPR Article 6 and meet an additional condition under GDPR Article 9 or the Data Protection Act 2018 before they can lawfully handle this type of information.
To process your health data, an employer must first establish a lawful basis under data protection law. Common examples include:
- Fulfilling their legal obligations as an employer
- Protecting your health and safety or that of others
- Having your explicit consent
On top of this, they must also meet an additional condition that specifically permits the processing of special category data. One frequently relied upon condition is that processing is necessary for employment purposes, such as assessing your fitness to carry out your role or making reasonable adjustments for a disability.
Your employer should be able to explain why they need the information and what legal basis they are relying on. If they cannot give you a clear answer, that may suggest their request lacks proper justification.
Your situation may be slightly different. ask a question below ↓ and our editorial team will reply with our advice.
When an employer may have valid reasons to ask
There are situations where asking about medication can be reasonable and lawful. Context matters, and the request needs to be proportionate to the circumstances.
Health and safety is one of the more common grounds. Certain medications can cause side effects such as drowsiness, dizziness or impaired concentration. If your job involves operating machinery, driving, working at height or other safety-sensitive tasks, your employer may have a legitimate interest in knowing whether any medication could affect your ability to do the work safely.
Return to work processes following sickness absence sometimes involve questions about ongoing treatment. This is often to help your employer understand whether any support or adjustments might be needed. Occupational health professionals may be involved in these discussions, and they typically treat the information confidentially.
If you have a disability or long-term health condition, your employer has a duty under the Equality Act 2010 to consider reasonable adjustments. Understanding your medication and its effects can sometimes be relevant to working out what adjustments might help. However, this should be handled sensitively, and you should not feel pressured to share more than is necessary.
Pre-employment health questionnaires are another area where medication questions appear. Employers are generally not allowed to ask health-related questions before offering you a job, except in limited circumstances. These include checking whether you can carry out a function that is intrinsic to the role, or whether reasonable adjustments would be needed during recruitment.
What you can do if you feel uncomfortable
You are entitled to ask your employer why they need the information and how they intend to use it. An employer following proper legal guidelines should be willing to explain their reasons.
If you feel the request is excessive or lacks justification, you can raise your concerns. You might start by speaking to your line manager or HR department. In some cases, it may help to put your concerns in writing so there is a record.
You are not automatically required to disclose every medication you take. In many situations, it will be enough to confirm whether any medication could affect your ability to do your job safely, though some roles may require more specific information depending on the nature of the work.
Where occupational health services are involved, they often act as an intermediary. They can assess your fitness for work and advise your employer on any adjustments needed, without necessarily passing on specific medical details.
If you believe your employer has mishandled your health information or made an unlawful request, you can seek advice from Acas, which offers free guidance on workplace disputes. You may also contact the Information Commissioner's Office if you have concerns about how your data has been processed.
The ICO website provides guides on the lawful basis for processing, special category data, and your rights under data protection laws. GOV.UK also has information on workplace rights, disability discrimination and the Equality Act 2010.
For the purposes of data protection law, you have strong rights over how your health information is used and shared. While employers can ask questions in certain circumstances, they must respect the legal limits and handle any data you do share with care. You have the right to access information held about you and to question how it is being processed.
If they want me to tell them my medications and start that conversation, can I then ask them for adjustments? Even though I didn’t declare my illness on my work application 3 years ago? If they say “you’ve managed 3 years just fine” can I reply “I’ve been taken the same meds for 3 years and you’ve never bothered to ask before?”
I have been diagnosed with TB and my doctor gave me a six weeks sick note.
I told my employer about it, I sent them a sick note and laboratory results paper.
But now they want medical reports, stating that a sick note is not enough.
Am I obliged to give them medical records are they not violating my rights by doing so.
i have a disability and the day I did my return to work interview due to it none the manager nor the assistant manager were working but only another key holder with no managerial role.
What happened is that the form we filled was inadvertently sent from the store email address accessible to all the staff to HR and the managers. Me and a colleague deleted it but reappeared once HR replied the following day. I brought it up to the manager in charge because, even if the attachment was cancelled with the reply from HR, he was mentioning that reduced hours and 'episode', but anyone could have read anyway. Nevertheless, two weeks after I found this full thread in the archive section of the account.
I complained again and had to raise a grievance, but the reply was that that it is not a reportable breach and there is no evidence someone else saw it. I don't agree with as this are private information I have not decided to share and mine only. I wonder where the truth lies. On top of this, from the reply it is clear that the company has no system in place to how to process safely such information as you would expect to comply with GDPR. Can you give me some inputs?
Now as I said yesterday I had said meeting with area manager and he said before he could discuss a transfer he needed to talk to me about the medication I'm taking and that he was worried but also annoyed with the fact as area manager he had not been informed of this I explained that I didn't see why I'm being pulled up why surely that was my managers fault not mine. He said that's not the point. The issue is he was not informed and I need to be referred to occupational health for a company medical which I don't have a problem with but he also says that due to my medication saying take twice daily and others I take at night. Then it indicates that I'm stoned or possibly sleeping at work. I explained that the fact I've worked nightshift for 26 years my medication is taken in the morning before I go to bed and the prescription says night possibly due to it being meds you take before rest. Although he has a valid point and assume I need to speak to my house and get the wording changed. He said that OH will determine if I'm fit for my job. I feel as though he's saying instead off a transfer I'd probably be let go after so many years. I'm gutted and love my job supporting people with physical and mental /learning disabilities. That although I have a curve in my spine I've recently been diagnosed with emfpasema and blocked arteries in my heart but have only had 2 sick days in 8 years.
Could I possibly lose my job ?? Is there anything I can do to help the situation
I look forward to your reply
shaz
And when I take it - do I have to do that or what can I do - cos I just think it’s a way of getting rid of me please Help
Later in the year I had some sick time and then interviewed about this event by the same person that I complained about he had access to what drugs I'm on to manage my condition I am not happy that that man had that access I think that my employer has broken the data protection act could someone please explain to me is this so.
Ask Employee Privacy Rights a question
Ask our editorial team a question and we will reply with our advice. Tell us as much about your situation as you can: the more detail you give, the more useful our answer can be.
You do not need to use your real name. Please do not include your full address, phone number, email address, or the names of other people. We may edit or remove identifying details for privacy and legal reasons.
Comments are moderated before publication.