The Occupational Safety and Health Administration has issued a directive to its personnel concerning the accessing of personally identifiable employee medical records during compliance reviews or where OSHA standards require such information. The directive notes that an employee’s right to privacy regarding their health information “is not absolute,” and in order for OSHA to carry out its statutory obligations, it is necessary for it to review certain medical information of employees. The directive is instructive for employers in determining what kind of records and medical information OSHA is entitled to obtain.