FMLA Medical Certification: What Employers Can and Cannot Ask

Medical certification is one of the most powerful tools employers have under FMLA. It confirms that the employee’s condition is genuine. It establishes the expected duration and frequency of leave. It provides the documentation you need to manage the leave effectively.

However, the certification process comes with strict rules. Asking for too much information, contacting the healthcare provider incorrectly, or mishandling the certification once you receive it can all create liability. Here is exactly what employers can and cannot do.

When you can require medical certification

You can require medical certification any time an employee requests FMLA leave for their own serious health condition, to care for a family member with a serious health condition, or for a qualifying military exigency. Requiring certification is optional — but almost every employer should do it consistently.

Requiring certification consistently for all FMLA leave requests of the same type is essential. If you require certification for some employees but not others in similar situations, you create a discrimination claim. Build certification requirements into your written FMLA policy and apply them uniformly.

The timeline for requesting and receiving certification

When you provide the Notice of Eligibility and Rights and Responsibilities, include the appropriate certification form at the same time. The employee then has a minimum of 15 calendar days to return the completed certification.

The 15-day period can be extended if the employee makes a good-faith effort to obtain certification and has a reasonable explanation for the delay. However, you are not required to grant extensions automatically. Document any extension you grant and the reason for it.

If the employee fails to return the certification within 15 calendar days without a reasonable explanation, you can deny the FMLA leave request. Be careful here — denying leave and then later discovering a valid reason for the delay creates problems. Communicate clearly in writing before denying the request.

Which form to use

The DOL provides official certification forms that satisfy FMLA requirements. Use them rather than creating your own forms.

Form WH-380-E covers the employee’s own serious health condition. Form WH-380-F covers a family member’s serious health condition. Form WH-384 covers qualifying military exigencies. Form WH-385 covers leave to care for a covered servicemember.

Using the official forms ensures you are requesting appropriate information without overstepping. Creating custom forms that request information beyond what the official forms require is a common mistake that can violate FMLA’s medical privacy protections.

What the certification must include

A complete and sufficient medical certification must include several elements. It must identify the serious health condition involved. It must state the date the condition began and its probable duration. It must include a statement that the employee is unable to perform the essential functions of their job or that the family member requires care.

For intermittent leave the certification must also estimate the frequency and duration of expected absences. This frequency and duration information is critical for managing intermittent leave and for identifying when actual absences exceed what the certification supports.

What employers can and cannot ask

The rules around what you can ask are specific and important. Understanding them prevents common mistakes.

You can ask the healthcare provider to clarify or authenticate the certification. Clarification means asking the provider to make the certification legible or to explain a term or a statement that is unclear. Authentication means confirming that the provider actually completed and signed the certification. Both are permitted.

You cannot ask the healthcare provider for a specific diagnosis. CFRA in California explicitly prohibits this and the federal FMLA regulations are interpreted similarly in most contexts. The certification must describe the nature of the condition in general terms without requiring the provider to name the specific diagnosis.

You cannot request additional medical information beyond what the official certification form asks for. Asking the provider to send medical records, test results, or treatment notes goes beyond what FMLA permits.

You cannot contact the healthcare provider directly through the employee’s supervisor. Only a healthcare professional or an HR representative may contact the provider. Direct supervisor involvement in the certification process is prohibited because it may pressure the provider or the employee.

Handling an incomplete or insufficient certification

When you receive a certification that is incomplete or insufficient, you must notify the employee in writing. The written notice must identify specifically what information is missing or insufficient. You must give the employee at least seven calendar days to fix the deficiency and resubmit.

You cannot deny leave simply because the initial certification has gaps. The seven-day cure period is mandatory. Only after the employee fails to correct the identified deficiencies within seven days can you deny the leave request based on insufficient certification.

Requesting recertification

Once you have an approved certification, you can request recertification under certain circumstances. You can request recertification no more frequently than every 30 days in connection with an absence unless specific exceptions apply.

Those exceptions include situations where the employee requests an extension of leave, where circumstances described in the original certification have changed significantly, or where you receive information casting doubt on the continued validity of the certification. In those situations you can request recertification before the 30-day period expires.

Send recertification requests in writing. Give the employee 15 calendar days to respond. Document every recertification request and response carefully.

Confidentiality of medical certification information

All information obtained through the medical certification process is strictly confidential. Store it separately from the employee’s general personnel file in a secure location with limited access.

You can share the information with supervisors and managers on a need-to-know basis — but only to tell them what restrictions and accommodations may apply. You cannot share the underlying diagnosis or medical details. You can share return-to-work dates and work restrictions. You cannot explain why those restrictions exist.

Violating medical confidentiality requirements can create liability under FMLA and potentially under the ADA as well. Train everyone who handles FMLA certifications on these requirements explicitly.

Keeping certification documentation organized

Managing medical certification documentation across multiple employees requires a reliable system. Every certification request, every certification received, every deficiency notice, and every recertification request must be dated, stored, and accessible.

FMLAPro helps manage your complete FMLA certification process inside Microsoft Excel. Your team can start using it immediately without any new software installations. Visit our store to learn more or contact us with any questions about the certification process.