I recently had surgery that resulted in removing cancer. I have a supplemental insurance plan paid for solely by me that will cover reimbursements (ie. Aflac). My employer is requesting copies of my claim submissions, which includes private healthcare information, for my "file". Can they do this? If not, how could this be addressed and dealt with?