Can this be signed electronically?

Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. §7001) and UETA in most states, provided intent, consent, attribution, and reproducible records are present.

Do I need a HIPAA BAA?

If a third-party platform will store or transmit protected health information, execute a Business Associate Agreement to meet HIPAA requirements before sending PHI electronically.

Is notarization required?

Not usually for routine fitness-for-duty forms. Notarization is only required if a specific legal process or state rule calls for it; verify with counsel for high-risk or statutory situations.

How long must records be kept?

Follow federal baselines such as IRS (minimum 3 years) and HIPAA retention (6 years, 45 CFR §164.530(j)); retain longer if state law or industry rules require it.

What if the signer disputes the signature?

Maintain a tamper-evident audit trail, authentication logs, and any consent disclosures; those records support attribution and defend the validity of electronically signed certifications.

How can a certification be revoked or updated?

Provide a documented amendment process: collect a new signed certification or add a dated provider addendum; maintain both original and amended records for auditability.

Electronic Signature
Templates
HR
Employee Health Certification

Employee Health Certification

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

EMPLOYEE HEALTH CERTIFICATION

Purpose: This Employee Health Certification documents the employee's current health status, immunization and screening history, fitness for duty, and any reasonable accommodation needs. The information provided will be used to determine fitness to perform job duties, required workplace accommodations, and compliance with relevant workplace health and safety obligations. All medical information will be treated as confidential and handled in accordance with applicable law.

Personal Information

Full legal name Address

Phone

Email

Position Information

Job title Department Reporting manager

Start date:

Salary/wage: $

Employment History

Employer 1

Company name Job title

From:

To:

Primary responsibilities Reason for leaving

Employer 2

Company name Job title

From:

To:

Primary responsibilities Reason for leaving

Education

Highest degree or certification Institution Graduation date

Professional References

Reference 1

Reference 2

Reference 3

Health and Immunization Information

Current health status: Please indicate any condition(s) that could affect your ability to perform essential job functions.

Immunization status (check all that apply):

Fully vaccinated Partially vaccinated Not vaccinated Decline to disclose Date of most recent relevant immunization

Tuberculosis screening

Test type:

Date:

Result:

Examinations, Screenings, and Testing Consents

I have completed a pre-employment or periodic physical examination as required by the employer. I consent to drug and alcohol screening now and in the future as required by employer policy. I consent to a fitness-for-duty evaluation if required to determine my ability to safely perform essential job functions. I authorize release of relevant medical information to the employer's designated health professional for the purpose of evaluating work restrictions or accommodations. If physical exam completed, provider name and date

Accommodations and Work Restrictions

I require a reasonable accommodation to perform my job duties. I do not require a reasonable accommodation at this time. If yes, describe recommended accommodation or work restrictions

Emergency Contact

Contact name Relationship Phone

Legal Disclosures and Employment Statements

At-Will Employment: Employment with the employer is at-will unless otherwise established by a written agreement signed by an authorized representative. Nothing in this Health Certification alters the at-will nature of the employment relationship.

Equal Employment Opportunity: The employer provides equal employment opportunities and makes employment decisions without regard to protected characteristics. Medical information provided will not be used unlawfully in hiring, assignment, or termination decisions.

Confidentiality: Medical information collected through this form will be maintained separately from general personnel files and will be treated as confidential medical information in accordance with applicable law. Disclosure is limited to those with a need to know for safety, accommodation, or compliance purposes.

False Statements: Providing false, misleading, or intentionally incomplete medical information may subject the employee to disciplinary action, up to and including termination.

Applicant Certification and Authorizations

I certify that the information on this Employee Health Certification is true and complete to the best of my knowledge. I authorize the employer and its designated medical professionals to contact the health care providers identified on this form for verification of information relevant to determining work restrictions or accommodations. I also authorize the employer to obtain information from prior employers regarding work-related health and safety matters when necessary for job assignment or compliance.

I certify that all information provided is true and complete. I authorize the employer to contact previous employers and medical providers for job-related health information as described above. I consent to background checks and screenings to the extent required by employer policy for the position.

Additional Notes (for employee or employer use)

Signature

Employee Name:

Signature:

Date:

What an Employee Health Certification Is and when it's used

An Employee Health Certification is a formal written or electronic statement documenting an individual's fitness for duty, recent medical evaluation, vaccination or test results, or release to work after illness or exposure. Employers use it to make consistent return-to-work decisions, to meet workplace safety policies, and to maintain an auditable record of clinical attestation. The form typically captures employee identity, date(s) of exam or test, clinical findings, provider attestation, effective date, and handling instructions for protected health information under HIPAA.

Why the Employee Health Certification matters for employers and employees

A clear, compliant certification clarifies fitness-for-duty status, supports reasonable accommodation decisions, and creates a durable record for audits or disputes. Using a standard form improves consistency, reduces administrative delay, and helps ensure protected health information is handled under HIPAA while permitting valid electronic execution under ESIGN and state UETA statutes.

Who issues and who completes this certification

Employers and health professionals are the primary issuers; employees and occupational providers complete and attest to the information.

HR managers and benefits teams — collect certifications, verify completion, and apply return-to-work policies consistently across workforce populations.
Occupational health clinicians and primary care providers — supply clinical findings, testing or vaccination details, and a signed attestation of fitness for duty.
Employees and applicants — provide accurate identifying information, symptom history, relevant test records, and their signature or consent for electronic processing.

Proper role separation and secure routing ensure employers receive necessary information without unneeded PHI exposure.

Step-by-step: completing an Employee Health Certification

Follow these four sequential steps to complete and submit a compliant certification.

01

Gather records: Collect test results, vaccination records, and IDs before starting the form.
02

Complete fields: Enter all required fields; use MM/DD/YYYY for dates and full legal names.
03

Provider review: Have the licensed clinician attest, sign, and date the form as required.
04

Submit securely: Send via your employer's secure portal or an approved eSignature workflow to HR or occupational health.

Configuring a secure online workflow for the certification

Set up fields, authentication, and retention rules before sending to ensure compliance and a clear audit trail.

Field	Configuration
Authentication method	Email link with optional SMS code or stronger MFA
Conditional fields	Show follow-up questions only if symptomatic or unvaccinated
Required attachments	Enforce upload for test or vaccine evidence
Retention policy	Apply HIPAA-compliant retention rules and access controls

Where the completed certification goes and how it flows

Common routing paths ensure the right stakeholders get the record while protecting PHI and preserving an audit trail.

Submit to HR: HR receives redacted summary or full PHI per internal policies
Upload to EHR: Occupational health systems store certified records in employee health charts
Share with provider: Employer may request provider verification for clarification
Store securely: Apply encryption and access controls for long-term retention

Technical needs for secure electronic completion and submission

Use platforms that support audit trails, PHI protections, and common integrations to minimize friction and preserve evidence.

Integrations: Salesforce, Microsoft 365, Google Workspace supported
File formats: PDF, DOCX accepted; export to PDF/A for archiving
Authentication: Email, SMS code, or stronger MFA options

Timing and typical deadlines associated with the certification

Different events trigger certification deadlines; align timing with workplace policy, public health guidance, and accommodation timelines.

Pre-employment screening:

Complete before start date when required by position or law

Return from illness:

Submit provider clearance before returning to on-site duties

Post-exposure testing:

Provide results within employer-established exposure response period

Periodic review:

Annual or role-based re-certification as required

Record retention trigger:

Retention begins from creation or last update

Common mistakes to avoid

Missing or mismatched names and identifiers that prevent record matching and cause verification delays.
Incomplete clinical details or vague language (e.g., 'fit now') that fail to specify restrictions or duration.
Failing to secure PHI during transmission or storage, risking HIPAA exposure and regulatory scrutiny.
Using an unauthenticated signature or lacking consent evidence, which undermines electronic signature validity.

Key risks and potential penalties for noncompliance

HIPAA penalties: Civil fines and corrective action

OSHA citations: Workplace-safety violations for inadequate procedures

Discrimination claims: Improper handling can lead to legal exposure

Payroll disruption: Delays in clearance may affect attendance and pay

Data breach costs: Notification and remediation expenses

Record validity risk: Unsigned or altered documents may be inadmissible

Recommended security and compliance controls

Encryption in transit: TLS 1.2/1.3

Encryption at rest: AES-256

HIPAA compliance: BAA required

E-signature law: ESIGN and UETA adherence

Audit trail: Tamper-evident logs retained

Third-party certification: SOC 2 Type II

Essential elements to include on a professional certification

A complete certification combines identity, clinical findings, provider credentials, effective dates, privacy directions, and signature fields to be legally useful and operationally effective.

Employee details

Full legal name, employer identifier, job title, and contact information so records can be matched and personnel actions linked to the correct file.

Examination date

Exact MM/DD/YYYY of exam or test to anchor clearance timelines and to support epidemiologic or administrative follow-up if exposure occurs.

Clinical findings

Clear description of symptoms, test results, diagnosis, or vaccination status including relevant limitations or recommended work restrictions.

Provider attestation

Printed provider name, credentials, clinic name, and a dated signature block to establish provenance and permit verification when necessary.

PHI handling

Instructions for what employer may retain, redaction steps, and that records will be stored under applicable privacy rules such as HIPAA.

Signature block

Employee and provider signature and dates; for electronic workflows include signer consent, authentication method, and audit-trail evidence.

How this form differs from related medical documents

Compare the Employee Health Certification to similar records to choose the correct template and avoid duplicate or conflicting documentation.

Criteria	Employee Health Certification	Medical Release
Primary purpose	fitness-for-duty	information release
PHI scope	job-related findings	broader medical history
Signature required
Employer use	return-to-work decisions	provider-to-provider sharing

Typical eSignature vendor pricing and basic feature comparison

Select an eSignature provider that supports HIPAA, provides an audit trail, and fits your volume; signNow is listed first for direct comparison across common plans and features.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/yr	Varies by plan	Varies by plan	Varies by plan

Real-world examples of how organizations use certifications

Two representative examples show operational uses and outcomes when certifications are integrated with secure electronic workflows.

Martin Properties — Founder

Real-estate firm adopted online certifications to close processes remotely and reduce in-person meetings.

Faster document turnaround and fewer paper errors.
"I can process and execute all of these documents online with 100% compliance and built-in security. Whether on mobile or working offline, I can get forms back to their necessary parties efficiently."

Fertility Centers of Illinois — Founder

A healthcare practice standardized provider attestations and patient consents using electronic forms to align with HIPAA workflows.

Clearer clinical provenance for records.
The airSlate SignNow team has been exceptional, responsive, the API has been great, and we're extremely happy that we chose airSlate SignNow as a company.

Practical tips to improve accuracy and speed

Applying these practices reduces rework, protects privacy, and helps ensure certifications are reliable for operational and legal use.

Verify identity first

Match the employee's legal name and identifier to HR records using government ID or employer ID before accepting the certification to avoid mismatches and verification delays, especially when processing high volumes.

Require supporting documents

Mandate upload of test results, vaccination cards, or clinic notes where appropriate and validate file names and dates to reduce later requests for clarification and minimize administrative follow-up.

Limit PHI exposure

Store full PHI only where operationally needed; consider redacting unnecessary details for payroll and scheduling teams and restrict access to occupational health staff to meet HIPAA principles.

Keep auditable trails

Use an eSignature solution that records timestamps, IP addresses, authentication method, and a tamper-evident certificate to preserve admissible evidence of consent and execution.

Frequently asked questions about Employee Health Certifications

Answers to common legal, technical, and practical questions when preparing, signing, and storing certifications.

Need help? Contact support

Can this be signed electronically?
Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. §7001) and UETA in most states, provided intent, consent, attribution, and reproducible records are present.
Do I need a HIPAA BAA?
If a third-party platform will store or transmit protected health information, execute a Business Associate Agreement to meet HIPAA requirements before sending PHI electronically.
Is notarization required?
Not usually for routine fitness-for-duty forms. Notarization is only required if a specific legal process or state rule calls for it; verify with counsel for high-risk or statutory situations.
How long must records be kept?
Follow federal baselines such as IRS (minimum 3 years) and HIPAA retention (6 years, 45 CFR §164.530(j)); retain longer if state law or industry rules require it.
What if the signer disputes the signature?
Maintain a tamper-evident audit trail, authentication logs, and any consent disclosures; those records support attribution and defend the validity of electronically signed certifications.
How can a certification be revoked or updated?
Provide a documented amendment process: collect a new signed certification or add a dated provider addendum; maintain both original and amended records for auditability.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now