How is it legal for an employer to retain a doctor in the workplace and REQUIRE employees to use this doctor,thereby having access to such info as blood pressure,cholesterol,tobacco use,etc. Then turn around and use this information to require employees to enroll in certain "programs"or pay exorbitant penalties for health care. How is this not a hipaa violation?
