Federal guidelines require employees’ health information to be kept confidential. But employers also have an obligation to protect the workplace.