Human Resources will ensure that employee medical records required are kept confidential and are not disclosed or reported without the employee's express written consent to any person within or outside the workplace except as required by the standard or as may be required by law.