All employee medical records will be kept confidential and will not be disclosed or reported without the employee's express written consent to any person within or outside the workplace except as required by the standard or as may be required by law.