29 C.F.R. § 38.41
(b)
(3) Any medical or disability-related information obtained about a particular individual, including information that could lead to the disclosure of a disability, must be collected on separate forms. All such information, whether in hard copy, electronic, or both, must be maintained in one or more separate files, apart from any other information about the individual, and treated as confidential. Whether these files are electronic or hard copy, they must be locked or otherwise secured (for example, through password protection).
(i) Knowledge of disability status or medical condition and access to information in related files. Persons in the following categories may be informed about an individual's disability or medical condition and have access to the information in related files under the following listed circumstances: