Can Your Employer Call Your Doctor to Verify a Note?

Your employer's ability to call your doctor and ask about your medical situation is more limited than most people realize. Here's what the law actually allows — and what it prohibits.

Yes, your employer can call the practice listed on your doctors note to verify it is real, but HIPAA prevents them from asking about your diagnosis, treatment, or any other medical details. Specifically, your employer may confirm that a note was legitimately issued by a licensed provider — but your doctor cannot disclose your condition without your written authorization.

If your note is being questioned, understanding exactly where the line is gives you a strong legal footing.

TL;DR

  • Employers can call to confirm a doctors note is legitimate, but your provider cannot share your diagnosis or treatment details without your consent.
  • HIPAA applies to healthcare providers — not employers — but it still shields your medical information from disclosure.
  • A telehealth-issued note includes provider credentials and contact info, satisfying employer verification requests.

In This Article

What HIPAA Actually Says About Employer Verification

HIPAA (the Health Insurance Portability and Accountability Act) governs how healthcare providers handle your protected health information (PHI). Here's what most people miss: HIPAA applies to healthcare providers, not to employers.

Your employer is not covered by HIPAA directly.

However, your doctor is covered by HIPAA. That means your physician, nurse practitioner, or how to get a real doctors note online cannot share your medical information — including confirming or denying details of your visit or diagnosis — with your employer without your explicit written authorization.

So while your employer is technically free to pick up the phone and call your doctor's office, what they'll hear in response is: "We cannot confirm or deny information about patients without written authorization from the patient."

What Employers Are Allowed to Do

Even though employers can't access your medical records without your consent, they do have some verification options:

Verify Provider Credentials

Employers can cross-check whether the physician named on your note is a real, licensed medical professional. This is done through public databases — state medical board licensee lookup tools and the CMS National Provider Identifier registry.

This is not a HIPAA violation because it's accessing public licensing records, not your medical information.

Confirm the Note's Authenticity

Using doctors note verification services, some employers verify whether the format and content of a note are consistent with how that provider typically issues documentation. They're looking for obvious signs of forgery — not accessing your private records.

Request Clarification About Work Restrictions

If your note includes a work restriction (e.g., "no lifting over 20 lbs for 10 days"), your employer can ask your provider for clarification about whether those restrictions are compatible with your specific job duties — but only with your written consent, typically through an ADA or FMLA process.

What Employers Cannot Do

Your employer cannot:

  • Call your doctor and ask for your diagnosis
  • Request your complete medical records
  • Ask your doctor how long you've been a patient or about prior visits
  • Access your treatment history or medication list
  • Ask your doctor to elaborate on the nature of your illness beyond what's on the note

Any employer that demands this information is overstepping. If you're asked for more medical information than a standard note provides, you can politely decline and note that you've provided legally sufficient documentation.

The Employer's Right to Know: The Minimum Necessary Standard

Even when employers are acting within their rights — such as administering FMLA leave or making ADA accommodations — they're subject to a "minimum necessary" standard. They can only request the information they need to make the specific determination at hand, not a broad sweep of your medical history.

For a standard sick day note, the minimum necessary information is: a licensed provider saw you, determined you were ill, and recommended the days you missed. Your diagnosis adds nothing to this determination and you are not required to provide it.

Can Your Employer Deny a Valid Note?

Yes, but only in limited circumstances. An employer can deny a note if:

  • The note is incomplete (missing provider credentials, dates, or signature)
  • There are clear signs of forgery or document manipulation
  • The absence doesn't qualify under the company's specific sick leave policy terms

They cannot deny a note simply because they want more information than you're required to provide. Our guide on whether an employer can deny a doctors note covers this in detail.

Telehealth Notes and Verification

A concern some employees have about telehealth notes is whether they'll hold up to employer scrutiny. The answer is yes — provided they're issued by a properly licensed provider through a legitimate platform.

Notes from SwiftCareMD include the provider's full name, NPI number, and state license credentials. An employer doing a credential check will find a real, licensed physician in their state's medical board database.

Our notes are formatted to include everything an employer legitimately needs and nothing they don't. If your employer has specific questions about documentation format, our 24/7 live chat support team can help you address them.

Learn more at our HIPAA-compliant doctors note page.

Frequently Asked Questions

My employer is demanding my diagnosis. Do I have to provide it?

For a standard absence, no. A note confirming you were evaluated and needed medical leave is sufficient.

If your employer is making an accommodation determination under the ADA, they may request information about functional limitations — but even then, your specific diagnosis is generally not required.

What if my employer says they "can't verify" my telehealth note?

Ask them specifically what they need to verify. Provider name and NPI can be checked against public databases.

If they want to call the telehealth platform directly, they can confirm that the platform employs licensed physicians — but again, your specific case information is protected without your consent.

Can an employer fire me for refusing to disclose my diagnosis?

In most cases, an employer cannot legally require diagnosis disclosure as a condition of accepting a sick leave note. If you believe you're being pressured to disclose protected health information as a condition of employment, consider consulting an employment attorney.

Related Reading