medical records

We keep seperate files in HR for employees medical records. Also, one of our department managers has been keeping medical records such as doctors slips and excuses in a file for each employee - she keeps at her desk. Is there a problem with doing that?
Comments