Management attorneys often use HIPAA as a basis to refuse to provide requested information. While HIPAA generally prohibits disclosure of protected health information, there is an explicit exception for employment records held by a covered entity in its role as employer. Thus, the HIPAA privacy rule generally does not apply to information requested in connection…