I have an illness I was just diagnosed with and a co-worker who is fishing to find out what is wrong with me. I have discussed with management to keep my health matters completely private. However, people talk and I understand that, but this co-worker in particular is known for gossiping about others matters openly with everyone in the company. I do NOT want anyone to know. If this person does find out my illness, is there any recourse I have about not keeping my health matters private? Sounds like an ethical breach to me, but I need to find out. He/she's already been asking me what's wrong and I explain, "none of your business, I'm here to work".

If it does happens, I think you might be able to complain to your Human Resources that she's creating a hostile work environment by badgering you and/or making your illness her business. Depending on whether she's a supervisor, if she is treating you differently it could be a form of discrimination. But if she's not a medical provider or part of your medical care office, then it's not under the HIPAA privacy laws. I would probably want to tell her to stay away from me, but I think you're doing good when you tell her it's none of her business and get back to work.

Really there is little you can do.

The next time she asks, you add to your answer by telling her, that your personal health is non of her business and if she persists in harassing you about it you will take up the matter with human resources.

The legal answer also is that you can't take action in anticipation of a problem. As I understand it you are concerned what she might do if she does find out.

Address her face to face? Certainly. Legally? I don't see an action.