Not everyone involved in a hiring decision needs to see the same level of health information. This explainer sets out how access levels work on the Medrisk platform and why they matter for privacy obligations.
Why access levels exist
Health information collected for a hiring decision is sensitive information. Sharing more of it than the decision requires exposes candidates to unnecessary disclosure and exposes employers to risk under privacy and discrimination law.
The levels available
Access runs from no results access, where a user can request assessments but see no outcomes, through scope control for their own requests or the whole organisation, then the summary certificate, then the certificate plus flagged responses, and finally the complete assessment record.
Choosing the right level
Most hiring managers need the certificate: a risk rating, assessment summary, module outcomes and doctor notes. Deeper levels suit safety or people teams who carry a specific obligation to act on detail. Setting this up once, by role, removes the judgement call from day to day use.