Georgia WC Medical Records: 2026 Privacy Rights

Listen to this article · 15 min listen

Getting a Georgia workers’ comp claim paid means you’re going to have to deal with sensitive questions about your medical records and your privacy. You have to know your rights and how the law handles these documents if you want to have a successful claim. If your records are handled wrong or someone gets access who shouldn’t, it can absolutely torpedo your case, costing you benefits or exposing your private health history. So how do you give them the proof they need for your claim without letting them rummage through your entire life?

Key Takeaways

  • Georgia’s law, O.C.G.A. § 34-9-200, says you have to go to medical exams the employer/insurer requests, but it’s only for the body parts and conditions related to your actual work injury.
  • The State Board of Workers’ Compensation (SBWC) has official forms for releasing medical records, like the Form WC-207. You need to read these authorizations very carefully to see what they cover and for how long.
  • You have a right under federal HIPAA rules to ask for and get copies of your own medical records from your doctors, usually within 30 days.
  • The employer and its insurance company can’t just decide to access medical records that have nothing to do with your work injury. If they ask for something that seems irrelevant, you should question it.
  • A smart legal strategy for a Georgia workers’ comp claim is all about managing what medical records get disclosed, giving them enough to build a strong case while protecting your private health information from a fishing expedition.

Understanding Medical Record Access in Georgia Workers’ Compensation

When you get hurt at work in Georgia, your medical records suddenly become the most important part of your workers’ compensation claim. The employer and their insurance carrier do have a right to see information about your injury and treatment so they can figure out your claim and pay for your care. But that access isn’t a free-for-all. Georgia law, specifically O.C.G.A. § 34-9-200, sets the rules for medical exams and what information gets shared. The statute lets the company ask for a medical exam with a doctor they pick, but here’s the kicker: the exam and any record requests have to stick to the injury you’re being compensated for.

I hear this all the time from injured workers, they’re worried their whole medical history is about to become an open book. It’s a real concern, and this is where you have to strike a balance between providing what’s necessary and protecting your privacy. The State Board of Workers’ Compensation (SBWC) has specific forms for this, like the Form WC-207, “Authorization for Release of Medical Information.” When you sign that, you’re giving doctors permission to hand over your files. You have to understand what you’re signing. Insurers often draft these forms to be incredibly broad, and I always tell my clients to scrutinize them and make sure they’re only agreeing to release records that are directly relevant to the work injury claim.

Federal laws like the Health Insurance Portability and Accountability Act (HIPAA) give you a baseline of privacy, but workers’ comp laws often create exceptions to get claims processed. Once you file a claim in Georgia, the expectation of privacy for your medical info is lowered for anything directly related to your work injury. It’s not gone completely for unrelated issues, though. The key phrase is “directly related.” An insurance company can’t just demand your therapy records from ten years ago because your claim is for a broken leg, unless they can prove a direct, compelling reason why it’s connected to your current injury or your ability to heal. That’s a very high bar for them to clear.

Case Scenario 1: The Warehouse Worker’s Back Injury

Take the case of a 42-year-old warehouse worker in Fulton County, we’ll call him Mr. Johnson, who blew out his lower back lifting heavy boxes at a distribution center near the Atlanta airport. He felt immediate pain, and an MRI showed a herniated disc that was going to need surgery. The insurance company accepted his claim for medical care and started paying temporary total disability benefits.

Injury Type: Lumbar disc herniation (L4-L5), requiring discectomy and fusion.

Circumstances: Repetitive heavy lifting on the job, culminating in acute injury during a specific incident.

Challenges Faced: About six months into his recovery, Mr. Johnson was still out of work. He got a letter from the insurer demanding he sign an authorization for all his medical records for the last 10 years because they wanted to look for “pre-existing conditions.” They were specifically asking for records from a chiropractor he saw for a stiff neck five years ago, and even records from a therapist he saw for a short time after a death in the family. The insurer’s goal was obvious: find anything, no matter how unrelated, to argue that his back surgery wasn’t just from work or that something else was slowing his recovery.

Legal Strategy Used: We immediately objected to that ridiculously broad request. We argued that chiropractor visits for neck pain have absolutely nothing to do with a lumbar disc herniation, and his mental health records were completely irrelevant to his physical recovery from a back injury. We pointed them to O.C.G.A. § 34-9-200(b) which limits the employer’s right to information to the “condition for which compensation is sought.” We filed a motion for a protective order with the State Board to shut down their discovery attempt. At the same time, we gave the insurer a limited release, strictly for his lumbar spine medical history for the past two years, which was more than enough to show his baseline back health.

Settlement/Verdict Amount: After a few months of fighting and the insurer seeing their big discovery request was going nowhere, we settled Mr. Johnson’s claim for $285,000. This covered his medical bills (past and future), his lost wages, and his permanent disability rating. We got it done in mediation at the SBWC’s Atlanta office, so he didn’t have to go through a formal hearing.

Timeline: The whole case, from injury to settlement, took 18 months. We shut down the medical record dispute within 3 months of our objection.

This case is a perfect example of a classic insurance company tactic: the fishing expedition. They cast a wide net for records, hoping to catch something they can use against you. If you don’t know your rights or aren’t willing to fight back against these overreaching demands, your entire personal medical history gets exposed for no good reason. The win here came from showing how irrelevant their requests were to his specific work injury.

Case Scenario 2: The Construction Worker’s Knee Injury

Ms. Rodriguez, a 30-year-old construction worker in DeKalb County, fell from a scaffold at a Brookhaven job site and tore the meniscus and ACL in her knee. It was a serious injury that needed reconstructive surgery and a ton of physical therapy. Her employer, a big commercial contractor, accepted the claim at first.

Injury Type: Torn meniscus and ACL rupture in the right knee.

Circumstances: Fall from a scaffold due to equipment malfunction.

Challenges Faced: During a PT session, Ms. Rodriguez casually mentioned to her therapist that her knees sometimes got “achy” after long shifts, even before the fall. That little comment ended up in the therapy notes. The insurance company jumped all over it. They started arguing that her severe ACL tear was just an aggravation of a pre-existing degenerative problem, and they tried to deny the surgery and long-term PT. They demanded all her orthopedic records since she was a kid, trying to find old sports injuries.

Legal Strategy Used: We admitted that yeah, Ms. Rodriguez might have had some minor aches before, who doesn’t in a physical job? But we hammered the point that the acute trauma of falling off a scaffold was the direct cause of the torn ligaments. It wasn’t a gradual thing. We got a sworn statement from her orthopedic surgeon who stated, without a doubt, that this severe injury was from the fall and not the natural result of some minor, pre-existing ache. We also refused to give them a blanket release, limiting it only to records for significant knee injuries, not general soreness. We got ready for a hearing, planning to focus on the doctor’s testimony to prove causation. We were prepared to argue that even if she had a pre-existing condition, the work accident made it so much worse that the employer was on the hook for everything under Georgia law (O.C.G.A. § 34-9-1(4)).

Settlement/Verdict Amount: The insurer, staring down our strong medical evidence and the fact that we were ready to go to court, caved. They agreed to a $190,000 settlement. This paid for all her medical care, including a second surgery and job retraining, on top of her permanent disability benefits. The settlement happened right after we filed a request for a hearing with the SBWC which showed them we were serious.

Timeline: From injury to settlement, it took 15 months. The fight over medical causation was resolved within 4 months of the insurer’s challenge.

This just goes to show how an innocent comment in a doctor’s note can get twisted and used against you by an insurance company. It also shows why it’s so important to have your doctors clearly separate any old, minor issues from the new, major injury caused by the accident. In these fights, your treating doctor’s opinion is often the most powerful weapon you have.

Case Scenario 3: The Office Worker’s Carpal Tunnel Syndrome

Ms. Chen, a 55-year-old administrative assistant at a tech company in Midtown Atlanta, developed severe carpal tunnel in both her wrists from years of constant typing. Her job was all data entry and document prep. She filed a workers’ comp claim for an occupational disease.

Injury Type: Bilateral Carpal Tunnel Syndrome (CTS), requiring surgical release on both wrists.

Circumstances: Gradual onset from repetitive strain at work over several years.

Challenges Faced: The insurer denied her claim right away. They argued that CTS is common and could have been caused by her hobbies or something else. They demanded all of her primary care records to look for other conditions that can cause similar symptoms, like diabetes or thyroid problems. They even wanted her job history for the past 20 years to see if she did similar work anywhere else.

Legal Strategy Used: Our strategy was to draw a direct, undeniable line from her job duties to her carpal tunnel. We got detailed job descriptions, ergonomic reports on her desk setup, and even statements from coworkers about how much she had to type every day. When it came to her medical records, we gave a very limited release to her primary care doctor, authorizing them to only disclose records about neurological symptoms or conditions that might look like CTS, and only for the last five years. We completely refused their blanket request for all primary care records and her entire work history. We hired an occupational medicine expert who wrote a report connecting her CTS directly to her work, pointing to the years and intensity of her typing. We also reminded the insurer that under O.C.G.A. § 34-9-280, occupational diseases are compensable when they come from the job and aren’t just an ordinary disease of life.

Settlement/Verdict Amount: Faced with our strong evidence and a clear legal strategy, the insurer folded and settled for $160,000. This covered her surgeries, future medical care, and permanent partial disability. We finalized the settlement during a pre-hearing conference at the State Board.

Timeline: From filing the claim to getting the settlement, it took 14 months. The disputes over causation and medical records were settled in about 6 months.

Occupational disease claims like carpal tunnel always bring up these privacy fights. Insurers will always try to blame anything but the job. The whole game is to prove the connection to the work environment and to tightly control the flow of your medical information, giving them only what’s actually relevant. It’s about preventing the insurance company from misusing your private health data, not about hiding the ball.

Protecting Your Privacy While Pursuing Your Claim

The lesson from all these cases is that you have to be vigilant about who sees your medical records. Here’s what you need to do:

  • Be Specific: Any authorization form you sign for medical records needs to be as narrow as possible. It should name the specific condition, limit the dates, and specify the types of records. Never sign a blank check that gives an insurer access to your entire medical history.
  • Relevance Is Everything: Insurers are only supposed to get medical info that’s relevant to your work injury. If they start asking for records about your allergies when you broke your arm, you have the right to object.
  • Get Your Own Records: You have the right to get copies of your own medical records from your doctors. You should. It’s important to know what’s in there and make sure it’s accurate. Under HIPAA, providers have to give you your records within 30 days of your request.
  • Get Legal Help: Trying to handle this alone is a recipe for disaster. An experienced Georgia workers’ comp lawyer knows how to read these authorization forms, fight back against overreaching requests, and protect your privacy. They know the ins and outs of O.C.G.A. § 34-9-200 and how to use it.

The goal is always the same: give the insurance company the information it needs to approve and pay your claim, but don’t open up your entire life for their inspection. This takes careful management of your paperwork and a willingness to push back on improper requests.

Controlling your medical records and protecting your privacy are foundational to a strong Georgia workers’ compensation claim. By knowing your rights and being smart about how you disclose information, you can build your case without sacrificing your personal health data. How you handle your medical records can absolutely change the outcome of your claim.

Can the workers’ comp insurer really demand ALL my medical records?

No. Under Georgia law (O.C.G.A. § 34-9-200), the employer and their insurer are only entitled to medical records for the specific condition you’re seeking benefits for. They can’t go on a fishing expedition through your entire medical history for things unrelated to your work injury.

What is this Form WC-207 they want me to sign?

Form WC-207 is the Georgia State Board’s official “Authorization for Release of Medical Information.” Signing it gives your doctors permission to release your records. You should always read it very carefully before signing. It’s best to have an attorney review it to make sure the release is limited to only the relevant injury and dates.

How do I get my own medical records in Georgia?

You have a right to your own records. Just ask your doctor’s office or the hospital’s medical records department. Under federal HIPAA rules, they have to respond to your request, usually within 30 days. You’ll probably have to fill out their release form and might have to pay a small fee for the copies.

What happens if the insurer says my injury was a pre-existing condition?

If an insurer tries to deny your claim by blaming a pre-existing condition, the burden is on them to prove that old condition is the ONLY cause of your current problem. In Georgia, if a work accident makes a pre-existing condition worse (aggravates it) and that’s what’s keeping you from working, the employer is still responsible for your benefits. Your doctor’s opinion is everything in these fights.

Are my mental health records protected in a workers’ comp claim?

Yes, your mental health records have very strong protections. An insurer can’t get them unless your mental health is a direct part of your claim (for example, if you’re claiming PTSD from the accident). Even then, the release should be extremely narrow and limited only to the relevant condition and time period.

Editorial Team

The Editorial Team at Work Injury Roswell is a group of writers and editors who cover personal injury and workplace law in Georgia. They research each story and publish under a shared desk byline — experts in their fields, working as one team.