Pre-employment medical examinations (PEME) are a standard requirement in Philippine hiring practices. Employers commission these examinations to determine an applicant’s physical and mental fitness for the position, to comply with occupational safety and health standards, and to mitigate workplace risks. Although the employer bears the cost and designates the clinic or physician, the medical data generated—laboratory results, X-rays, diagnoses, and fitness certifications—constitute sensitive personal information belonging to the examinee. Philippine law unequivocally recognizes that the examinee, whether still an applicant or already hired as an employee, holds a vested right to access these results.

Constitutional Foundations
The 1987 Constitution provides the bedrock for this right. Article III, Section 1 guarantees due process and the protection of life, liberty, and property, which includes the right to privacy and control over one’s personal information. Article II, Section 15 declares that the State shall protect and promote the right to health. Implicit in these provisions is the principle that no person may be deprived of knowledge concerning his or her own bodily condition when that information is collected through a medical procedure initiated for employment purposes. The Supreme Court has repeatedly affirmed that the right to privacy is not merely a negative right against intrusion but includes a positive right to access personal data that directly pertains to the individual.

The Data Privacy Act of 2012 (Republic Act No. 10173)
The cornerstone statute is Republic Act No. 10173, the Data Privacy Act (DPA). Health information is classified as “sensitive personal information” under Section 3(l). When an employer or its contracted clinic processes PEME results, both parties act as Personal Information Controllers (PICs) or Personal Information Processors (PIPs).

Section 16 of the DPA expressly grants every data subject the following rights:

The right to be informed whether personal information is being processed;
The right to access the data, including the sources, recipients, and purpose of processing;
The right to obtain a copy in an intelligible form;
The right to challenge the accuracy of the data and demand rectification or erasure.

These rights attach the moment the examinee undergoes the PEME, even before any employment contract is signed. The applicant is a data subject; the fact that the employer commissioned and paid for the examination does not transfer ownership of the data. Implementing Rules and Regulations (IRR) of the DPA, particularly Rule IV, require PICs to provide access “within a reasonable time” and in a format that is clear and understandable. The National Privacy Commission (NPC) has clarified that 15–30 days is generally reasonable absent compelling justification for delay.

Labor Code and Occupational Safety and Health Framework
The Labor Code (Presidential Decree No. 442, as amended) does not contain a single provision that expressly addresses access to PEME results, yet several provisions reinforce the right. Article 162 empowers the Secretary of Labor and Employment to promulgate occupational safety and health (OSH) standards. Department Order No. 136-14 (Revised Guidelines on OSH) and the OSH Standards require employers to maintain medical records but do not authorize withholding them from the worker.

Book Six of the Labor Code, which governs post-employment, and the general principle of fair dealing in labor contracts (Article 1700) further support the view that an employer cannot use a worker’s own medical data as a secret weapon in disciplinary or termination proceedings. If an employer relies on PEME findings to deny employment or impose conditions, due process under Article 277(b) requires the employee to be furnished with the evidence relied upon—including the medical report itself.

Medical Ethics and Physician-Patient Relationship
Even though the employer pays the bill, a physician-patient relationship is formed when the examinee submits to the physical examination. Republic Act No. 2382 (The Medical Act of 1959) and the Code of Ethics of the Philippine Medical Association impose upon the examining physician the duty to safeguard patient confidentiality while simultaneously recognizing the patient’s right to full disclosure of findings. The physician cannot release the complete medical abstract or laboratory results to the employer without the examinee’s informed consent, nor can the physician refuse a direct request from the examinee for a copy. The only permissible disclosure to the employer is a fitness certification or a redacted summary sufficient for employment purposes.

Special Sectors and Regulations
Certain industries are governed by more specific rules that nonetheless preserve the right of access:

Overseas Employment (Seafarers and OFWs): Department of Migrant Workers (formerly POEA) Memorandum Circulars require accredited clinics to issue a copy of the PEME results to the seafarer upon request. The medical certificate transmitted to the manning agency or principal is limited to fitness status; the detailed clinical abstract remains the property of the examinee.
Government Service: Civil Service Commission rules and Republic Act No. 6713 (Code of Conduct and Ethical Standards for Public Officials) treat PEME results as part of the employee’s 201 file. CSC Memorandum Circular No. 8, Series of 1999, expressly allows employees to inspect and copy their own records.
Hazardous Occupations: DOLE Department Order No. 149-15 and the OSH Standards mandate periodic medical examinations; the same access rights apply to both pre-employment and periodic results.
HIV and Other Infectious Diseases: Republic Act No. 11166 (Philippine HIV and AIDS Policy Act) imposes stricter confidentiality but simultaneously grants the tested individual an absolute right to receive the test results directly from the testing center.

Limitations and Exceptions
The right to access is not absolute. Under Section 16(f) of the DPA and NPC Advisory Opinion No. 2017-001, access may be refused or limited only when:

Disclosure would reveal the identity of a third-party informant who was promised confidentiality (rare in standard PEME);
The data forms part of a purely internal evaluation not yet finalized (the “deliberative process” privilege, which ends once the hiring decision is made); or
National security or public safety demands otherwise (virtually inapplicable to ordinary private-sector employment).

Aggregate or anonymized statistical data compiled by the employer or clinic for OSH compliance may be withheld, but individual results cannot. An employer may not invoke “trade secret” or “proprietary medical protocol” to deny access.

Enforcement Mechanisms and Remedies
An aggrieved applicant or employee has multiple avenues:

Administrative: File a complaint with the National Privacy Commission. The NPC may impose fines of up to ₱5 million per violation and issue cease-and-desist orders.
Labor: File a complaint with the Regional Office of the Department of Labor and Employment or the National Labor Relations Commission for violation of due process or unfair labor practice. Unjustified refusal to furnish medical results has been treated as a form of constructive dismissal in appropriate cases.
Civil: Action for damages under Article 26 and Article 32 of the Civil Code (violation of privacy and constitutional rights) and under the DPA itself (actual, moral, and exemplary damages).
Criminal: Willful violation of the DPA carries penalties of imprisonment from one to six years and fines.

The burden of proving that access was properly granted or that a valid exception applies rests on the employer or clinic.

Practical Procedure for Requesting Access
The examinee may make a written or electronic request addressed to the employer’s Human Resources Department or directly to the examining clinic. The request need not state a reason. Upon receipt, the PIC must:

Verify the requester’s identity;
Provide the data in portable format (PDF, printed copy, or secure electronic transmission);
Include all raw laboratory results, radiology reports, specialist referrals, and the examining physician’s notes;
Explain any medical terminology upon request.

Refusal or unreasonable delay triggers the remedies outlined above.

Conclusion
The right of an employee—or prospective employee—to access pre-employment medical examination results is not a mere courtesy extended by benevolent employers; it is a statutory and constitutional entitlement rooted in privacy, health, and due process. Employers and medical service providers who treat PEME results as their exclusive property do so at their peril. In an era of heightened data protection awareness, strict adherence to the Data Privacy Act, Labor Code principles, and medical ethics is not only legally mandated but essential to maintaining trust in the employment relationship. Philippine law leaves no room for secrecy when the subject of the secret is the worker’s own body.