C.R.S. § 8-13.3-412
8-13.3-412. Confidentiality of employee information - definition
8-13.3-412. Confidentiality of employee information - definition. (1) An employer shall not require disclosure of details relating to domestic violence, sexual assault, or stalking or the details of an employee's or an employee's family member's health information as a condition of providing paid sick leave under this part 4.
(2) Any health or safety information possessed by an employer regarding an employee or employee's family member must:
(a) Be maintained on a separate form and in a separate file from other personnel information;
(b) Be treated as confidential medical records; and
(c) Not be disclosed except to the affected employee or with the express permission of the affected employee.
(3) As used in this section, "affected employee" means the employee:
(a) About whom the health information pertains or who is the victim of the domestic abuse, sexual assault, or harassment; or
(b) Whose family member is the subject of the health information or is the victim of the domestic abuse, sexual assault, or harassment.