If an employer, employment agency, labor organization, or joint labor-management committee possesses genetic information about an employee or member, such information shall be maintained on separate forms and in separate medical files and be treated as a confidential medical record of the employee or member. An employer, employment agency, labor organization, or joint labor-management committee shall be considered to be in compliance with the maintenance of information requirements of this subsection with respect to genetic information subject to this subsection that is maintained with and treated as a confidential medical record under section 12112(d)(3)(B) of this title.
With respect to the regulations promulgated by the Secretary of Health and Human Services under part C of title XI of the Social Security Act (42 U.S.C. 1320d et seq.) and section 264 of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note), this chapter does not prohibit a covered entity under such regulations from any use or disclosure of health information that is authorized for the covered entity under such regulations. The previous sentence does not affect the authority of such Secretary to modify such regulations.