ADA, GINA, and EEOC compliance for wellness screenings: what benefits teams need to know in 2026
A workplace biometric screening can be a useful access point for employees, but it is also a medical examination for employment-law purposes. That makes program design a benefits, privacy, and legal issue, not simply a vendor implementation choice. The compliance baseline is straightforward: participation must be voluntary when the program seeks disability-related information or conducts medical exams; individual medical information must be confidential; genetic information demands special caution; and health-contingent incentives need a reasonable alternative standard. The difficult part is applying overlapping rules to a real program. This is an operational guide, not legal advice. Involve ERISA, employment, privacy, tax, and state-law counsel before launching or materially changing an incentivized wellness program.
The legal map: ADA, GINA, ACA, HIPAA, and EEOC roles
The Americans with Disabilities Act (ADA). Title I generally limits medical examinations and disability-related inquiries for current employees, except when job-related and consistent with business necessity. It permits voluntary medical examinations and histories that are part of an employee health program available at the worksite. The statute also requires confidential handling of medical information (ADA, 42 U.S.C. § 12112). A biometric screen and health risk assessment can trigger this framework.
The Genetic Information Nondiscrimination Act (GINA). Title II generally prohibits employers from requesting, requiring, or purchasing genetic information, subject to limited exceptions. Genetic information includes family medical history and can include information about disease manifestation in family members. The EEOC explains that voluntary health or genetic services can be an exception, subject to prior voluntary, knowing, written authorization and strict limits on employer disclosure (EEOC informal discussion letter).
HIPAA/ACA wellness rules. The Affordable Care Act regulations distinguish participatory programs from health-contingent programs offered through a group health plan. For health-contingent programs, rules address reward limits, annual opportunities, uniform availability, and reasonable alternative standards. The U.S. Department of Labor maintains the governing wellness-program resources (DOL wellness program resources).
EEOC. The EEOC enforces Title I of the ADA and Title II of GINA in employment. Its enforcement guidance says a wellness program is voluntary when the employer does not require participation and does not penalize employees who do not participate (EEOC ADA enforcement guidance). Do not reduce this inquiry to a single percentage rule; the current legal posture is more nuanced.
What “voluntary” means in practice
A voluntary program is more than an opt-in checkbox. Benefits teams should test the entire employee experience:
- Can an employee decline the screen or HRA without losing access to health coverage or suffering adverse employment treatment?
- Is the financial consequence so large that it could be viewed as coercive in context?
- Are employees given a clear notice explaining what information will be collected, who receives it, how it is used, and how confidentiality is protected?
- Are individual results delivered to the participant, with the employer receiving only appropriate aggregate reporting?
- Is a reasonable alternative available where the program has a health-contingent standard?
The EEOC’s ADA enforcement guidance also states that medical records from voluntary wellness programs must be confidential and maintained separately from personnel files (EEOC ADA enforcement guidance). Translate that into contract language, access controls, and HR training. Do not give managers names of participants, individual values, or completion details unless a distinct lawful workflow requires it and counsel approves it.
The 2026 EEOC incentive status: do not rely on the old 30% ADA number alone
Benefits teams frequently see the 2016 EEOC rules cited for a 30% self-only coverage incentive cap. The EEOC’s 2016 announcement described that approach for ADA wellness programs tied to a group health plan and a comparable cap for certain spousal health-status information (EEOC 2016 final-rule announcement). However, the incentive portions of the ADA and GINA regulations were vacated after AARP v. EEOC, effective January 1, 2019. The 30% figure therefore is not a safe, current stand-alone ADA/GINA rule.
As of 2026, there is no replacement final EEOC regulation supplying a general numeric incentive limit for these wellness programs. Employers must assess voluntariness under the statutes and EEOC guidance, while separately complying with HIPAA/ACA rules for health-contingent programs under a group health plan. That is a reason to involve counsel for any material reward or surcharge, especially one connected to a biometric screen, HRA, spouse participation, or medical outcome.
Participation-based versus outcome-based incentives
A participatory program rewards completing an activity, such as attending a screening or answering an HRA, without requiring an employee to reach a health outcome. Under HIPAA/ACA, it is not a health-contingent program merely because it offers a reward for participation. It can still implicate ADA voluntariness and confidentiality if it asks health questions or includes a medical exam.
An activity-only health-contingent program requires an activity related to health, such as a walking program or tobacco-cessation course. An outcome-based health-contingent program requires achieving or maintaining a health factor, such as a target biometric value. Outcome-based designs create the greatest need for a reasonable alternative standard, accessible communications, and careful nondiscrimination review.
For health-contingent programs, the ACA regulations generally limit the total reward to 30% of the cost of coverage, with up to an additional 20% for tobacco-related programs, subject to applicable conditions. They also require a reasonable alternative standard or waiver in specified circumstances, with special requirements for outcome-based programs. Confirm exact application with counsel and plan documents rather than applying a headline percentage to every wellness reward.
Reasonable alternative standards are a program feature, not a remediation
An alternative standard gives an eligible individual a real path to the same reward when a health factor, medical condition, or other protected circumstance prevents completion of the original standard. For an outcome-based target, offer the alternative without demanding proof that the employee cannot meet the target. For activity-only programs, the plan may seek verification where allowed, but should use the least burdensome process and follow provider-recommendation rules.
Operationalize alternatives before launch. Define who receives the request, how quickly it is handled, whether a participant’s physician recommendations are honored, how the reward is credited, and how employee privacy is protected. Put the availability statement in every program description, not just a terms-and-conditions PDF. A nonfunctional alternative path can undermine an otherwise well-designed program.
GINA: keep family history and genetic information out of casual wellness forms
Do not ask an employee for family medical history in a general benefits survey or build it into a biometric-screening registration form. Do not offer an incentive for an employee’s own genetic information. The EEOC’s GINA materials emphasize that individual genetic information may be provided to the person and health provider, while the employer may receive it only in aggregate form; they also address limits on inducements tied to family information (EEOC GINA final-rule explanation).
Spousal programs require particular review. The statutory analysis differs between a spouse’s current or past health status and genetic information, and rules on inducements have been litigated and changed. Do not reuse old template language without counsel’s current review. Children’s health and genetic information are especially sensitive; the 2016 EEOC materials made clear that incentives tied to children’s current or past health status or genetic information were prohibited (EEOC fact sheet).
Common design mistakes and a pre-launch checklist
The predictable errors are: making an employee’s plan access depend on a screen; treating a large surcharge as “voluntary” because employees can technically decline; routing individual completion data to supervisors; collecting family history without a compliant basis; setting an outcome target without a viable alternative; and using vendor contracts that do not define permitted data use.
Before launch, document the purpose of the program, data map, notice, participation rule, incentive calculation, alternative standard, vendor security controls, aggregate-reporting thresholds, employee communication, accommodation process, and escalation contacts. Ensure the vendor’s privacy representation does not become a substitute for the employer’s own statutory responsibilities.
How PicMed helps
PicMed can support clinically organized health risk assessment programs for employers and onsite biometric screening programs with participant communications, clinical workflows, and aggregate reporting. Employers should have qualified counsel review their specific incentive, notice, data, and eligibility design before implementation.
Frequently asked questions
Are biometric screenings permitted under the ADA?
They can be offered as part of a voluntary employee health program. The ADA requires confidentiality for medical information, and the EEOC’s guidance says a program is voluntary when employees are not required to participate or penalized for declining.
Is a 30% incentive always allowed for a wellness screening?
No. Do not rely on the vacated 2016 EEOC incentive provisions as a universal ADA/GINA safe harbor. HIPAA/ACA rules may separately apply to health-contingent group-health-plan programs. Seek counsel.
Does GINA prohibit a health risk assessment?
It restricts employers’ acquisition and use of genetic information, including family medical history. A health risk assessment must be designed to avoid improper genetic-information questions and disclosures.
Related articles
Word count (article body, excluding metadata and schema): 1,482