Here is a link to an article posted on the Jackson Lewis Workplace Privacy Blog that may interest healthcare employers.

http://www.workplaceprivacyreport.com/2011/03/articles/ada/ada-violated-when-employer-responds-to-state-subpoena-and-discloses-former-employees-medical-records/