Speak to the office manager, naming no names, but indicate that personal medical information on you has gotten out and you are very disturbed about it. It's a violation of law, actually, since some of the federal privacy acts have been legislated. Ask her what the company is doing to stop such leaks. As to sick leave, we no longer have sick leave and/or vacation, we simply have PTO (Personal Time Off) so no explanation is necessary. In fact, we've been instructed to call in as early as possible and leave a voicemail message that you are sick and will not be in. They don't want to know about your illnesses and all the details. It's none of their business, unless it has a direct impact on your ability to work. As to your social life, keep your mouth shut! And if you confide personal details to a friend at work and Katie starts talking about them, just ask her "How did you hear about this?" Calling gossips on their behavior, politely but firmly, in front of others, is the only way to stop this kind of thing.

Since it seems to be common knowledge that she's quite the gossip, stop telling her anything other than the bare minimum. If everyone did this, maybe she'd get a clue.

As a business owner I agree with those above. The office manager has a ethical and legal responsibility to stop the gossip.

Add me to the list of commenters who would say that she is violating HIPPA.

But beyond that, we had issues with people sharing confidential information about our customers and co-workers. We wrote this confidentiality pledge that all employees, directors, attorney's, and accountant's are required to sign. I adjusted the wording to remove references to our business name, so if some of the wording seems odd, that is the reason. Violations of it would result in suspension or firing.

Note item #5. We added that specifically to address issues like you were talking about.

SECTION 37 PLEDGE OF CONFIDENTIALITY

Following is a reproduction of a Pledge of Confidentiality to be signed by all directors, staff members, and agents.

PLEDGE OF CONFIDENTIALITY
As a representative or agent of the (employer name deleted by me) I ledge to keep customer, employee, director, and committee member information confidential. Included in this confidentiality pledge is the following:

1. I will not talk about specific customers, accounts, loans, etc., with anyone other than fellow representatives or agents.

2. Information about a customer that is obtained in the course of business will not be used against that member in any private or employment-related situations.

3. (I deleted this section due to the confidentiality of our business.)

4. I will do whatever I can to maintain the confidentiality of the members of the (business name).

5. Information that is learned about employees, directors, or committee members, where it would be reasonable to assume the person involved would not want others to know this information, is not to be discussed with anyone other than business representatives or agents (and even then, it should only be on a NEED to know basis), unless directed to do so by the President, Executive Committee, or Supervisory Committee.

______________________________________
Name

_____________________
Date

Circle One: Employee
Director
Committee Member
Agent (circle one) Attorney Accountant

__________________