Your Health, Your Story
Your medical information is one of the most personal data sets you have. It can include diagnoses, mental health history, treatments, and lifestyle details that you share in confidence with a doctor. While it might seem harmless to mention a health issue
to a colleague or boss, oversharing can have unintended consequences. It can lead to social stigma, unsolicited advice, or even workplace discrimination, which, while illegal, can be difficult to prove. India's Digital Personal Data Protection (DPDP) Act, 2023, strengthens your control over this sensitive information, classifying health data as needing heightened protection and mandating that your explicit consent is required for its collection and use. Think of yourself as the primary guardian of your health narrative.
What You Don't Need to Share
A curious colleague or a well-meaning manager asking why you took a sick day does not entitle them to your full medical history. You are not obligated to disclose your specific diagnosis, the name of your medication, or details of your treatment in most everyday situations. Medical professionals are bound by a code of ethics to maintain confidentiality, and this principle extends to how you should treat your own data. You can simply say you were unwell and are feeling better, or that you're dealing with a health matter and have it under control. The key is to distinguish between a friendly inquiry and a formal requirement. For casual interactions, less is almost always more.
When Disclosure Becomes Necessary
There are specific, legitimate situations where sharing some medical information is required. The most common scenario is in the workplace when you need to request a “reasonable accommodation” under The Rights of Persons with Disabilities Act, 2016. This act covers a wide range of conditions, including physical, mental, and chronic illnesses. If you need adjustments like flexible hours, a modified workstation, or specific leave, you will likely need to provide documentation. However, this doesn't mean sharing everything. The focus should be on your functional limitations and the support you need to perform your job, not necessarily the underlying diagnosis. Other instances include insurance claims, where consent to share information is part of the policy agreement, or when required by a court order.
Navigating Workplace Conversations
When dealing with your employer, it's crucial to understand the principle of “data minimisation.” This legal concept means your employer should only collect information that is strictly necessary for a legitimate purpose, like managing payroll or benefits. If asked for health details, you have the right to ask why they need it and how it will be protected. Under the DPDP Act, your employer is a “data fiduciary,” meaning they have a legal duty to protect your information securely. If you're providing a medical certificate, it often only needs to confirm you were unfit for work, not state the specific illness. For accommodation requests, direct the conversation toward solutions. Instead of saying “I have anxiety,” you could say, “To manage my health condition effectively, I would benefit from a quieter workspace and the ability to occasionally work from home.” This frames the discussion around your needs and abilities, not just the label of a diagnosis.
How to Politely Set Boundaries
Declining to share personal details can feel awkward, but it can be done gracefully. If a coworker pries, you can use a polite but firm response like, “I appreciate you asking, but I prefer to keep my health matters private. Thanks for your concern.” Or, you can redirect the conversation: “I’m managing it, thanks. But tell me, how did your presentation go?” Having a few prepared, neutral phrases can help you feel more in control. Remember, your privacy is a right, not a privilege. You do not need to justify your decision to keep your personal information to yourself. A simple, polite boundary is usually respected, and it reinforces the professional nature of the relationship.
















