The ADA requires employers to maintain strict confidentiality on any medical- or disability-related information. That means keeping it in a separate, secure file, away from prying eyes that have no business viewing the information. But confidentiality doesn’t apply just to paper or electronic records. Employers also have to make sure they don’t discuss such information with those who don’t need to know.