It is against federal law to demand access to medical records, or demand you too tell about your medical condition.
Read hippa laws. When those laws suits start rolling in it will a **** show.
I don't think it is. HIPPA only applies to medical providers and insurance companies. It has no bearing over private individuals, places of business, or employers.