Mandatory Annual Health Check-Ups: Employer Guide

For most Indian employers, a mandatory annual health check-up for employees used to be a wellness line in the induction deck that nobody followed up on. That has changed. As the labour code consolidation moves ahead and the Occupational Safety, Health and Working Conditions Code framework takes shape alongside state rules, periodic medical examination is becoming something an inspector, an insurer or a client auditor may actually ask you to evidence.

The problem is that most HR teams do not know where to start. Obligations sit across central code provisions, state rules still being notified, factory requirements for hazardous processes, shops and establishments rules, and commitments buried in client contracts. The operational reality involves diagnostics vendors, consent forms, sensitive health data, multi-city offices, night shifts, field staff who are never in one place, and a finance team asking what this costs per head.

This guide is for HR managers, founders, admin and EHS leads and payroll teams at Indian companies of roughly 20 to 2,000 employees. One caveat up front, and it will be repeated: thresholds, coverage and notification dates vary significantly by state and establishment type, and they are being updated. Confirm the rules currently notified for your state and your establishment with your state labour department or legal counsel before you finalise policy.

Why Health Check-Ups Moved From "Nice to Have" to a Compliance Expectation

Occupational health in India was, for decades, a factory conversation. Units with hazardous processes had statutory medical examination duties and maintained health registers. Offices, retail chains and service businesses did not see themselves in that picture.

Three things changed. The code consolidation deliberately widened the lens from "factories" to "establishments". State rules framed under the OSH Code framework have in many cases carried forward and extended periodic medical examination expectations beyond traditional manufacturing. And commercial pressure arrived independently of the law, with global clients, ESG reporting and insurance underwriters all asking for evidence of workplace health and safety compliance.

The result is that a 90-person SaaS company in Pune now gets asked, in a client compliance questionnaire, whether it runs an employee health check-up programme and how it stores the records. That has nothing to do with a labour inspector, but it lands on the same HR desk.

The underlying logic

Internalise this, because it helps where the rules are ambiguous. The employer controls the workplace and the work pattern, so the employer carries the duty to ensure work does not damage health. Certain work carries identifiable risk: chemicals, dust, noise, heat, height, machinery, night work, driving, prolonged screen work. Where risk is identifiable, health surveillance catches harm early, and the employer must act on what it finds rather than simply file the report.

Design around that logic and you will usually align with whatever your state notifies. Design around "what is the minimum we can get away with" and you will rebuild the programme in eighteen months.

What is genuinely still moving

Be honest with leadership about the open items:

• Whether and when specific state rules under the OSH Code framework are notified, and their commencement dates.
• Age thresholds and examination frequency, which differ across state drafts and existing rules.
• Which establishments and employee-count thresholds trigger which duties.
• The scope of hazardous process schedules and how they map to non-manufacturing work.
• How health records must be maintained, for how long, and in what format for inspection.

The answer is not to wait. Build something defensible under any reasonable version of the rules, document it, and adjust the parameters when your state notifies specifics. Re-verify annually.

Who Is Covered: Age, Hazardous Work, Night Shifts and Establishment Type

Coverage is not uniform. It is a matrix of establishment type, work type, worker age and shift pattern, and you need to map your workforce against it before buying a single diagnostic package.

Start with classification. Is any premises a factory, or does it involve a manufacturing process? Do you run a hazardous process under the applicable schedules? Which state shops and establishments act covers each office? Do you operate construction sites, mines, plantations or docks, each of which has its own regime? Do you engage contract labour, and who is the principal employer for health surveillance? A company with a Bengaluru office, a Bhiwandi warehouse and a Coimbatore assembly unit is operating under three different compliance pictures.

The table below is a planning aid, not a statement of law. Use it to structure your assessment, then validate every row against the rules notified in the relevant state.

The age threshold

Most rule frameworks and most sensible corporate policies pivot on age: a lighter panel for younger employees, a fuller one from a defined age onward. Do not lift a threshold from a competitor's policy and assume it satisfies your duty. Confirm what your applicable rules specify. Where they are silent, choose a threshold you can defend clinically, document why, and apply it consistently, because inconsistent application is where discrimination complaints begin.

What a Mandatory Annual Health Check-Up for Employees Actually Involves

A programme has more moving parts than a diagnostics package. It needs a documented risk assessment of hazards by role, which is what justifies why a warehouse operator gets audiometry and a finance analyst does not. It needs an examination protocol with panels differentiated by role and age band. It needs a delivery mechanism, usually a blend of on-site camps and a partner lab network. It needs follow-up and referral, the part most programmes skip and the part that actually protects both employee and employer. And it needs records and governance: consent, storage, access control, retention and the ability to evidence the programme without exposing individual medical data.

Designing the test panel

Tier the panels. A single expensive panel for everyone wastes money on young employees and under-serves older ones and high-exposure roles. Treat the contents below as a design template to review with an occupational health physician, not as a clinical prescription.

Two design notes. Add sex-specific screening components where clinically appropriate, offered rather than imposed, with clear consent. And avoid anything that predicts future disability rather than assessing current fitness for the role; that line matters legally and ethically.

Where rules specify the qualification of the examining practitioner, follow it precisely. For hazardous work a certifying surgeon or a doctor with recognised occupational health qualification may be required. Appoint a named occupational health advisor even if you are not required to, because one doctor who understands your risk profile and reviews aggregate findings turns a diagnostics exercise into an actual programme.

Choosing a Diagnostics Partner and Negotiating Packages

Vendors price aggressively for corporate volume, and the headline per-head number is rarely what you end up paying.

Evaluate on:

• Network coverage near every office, plant and cluster of remote employees. A strong Bengaluru vendor is useless for twelve people in Guwahati.
• NABL accreditation at the specific processing lab, not just at brand level. Ask which lab processes samples from each location.
• On-site camp capability, including whether they bring portable ECG, audiometry and spirometry, which are not standard for everyone.
• Home collection, essential for field staff, remote employees and night-shift workers.
• Report format: individual reports to the employee, plus a de-identified aggregate report to HR. Insist on this split before signing.
• Data handling: storage location, access, breach notification, and willingness to sign a data processing agreement.
• Escalation protocol for critically abnormal findings, and whether a real post-report consultation is included.

Negotiation levers that work: commit to volume across a defined window rather than an open-ended arrangement; bundle dependants at a stated add-on rate, which costs the vendor little and is highly valued; price incremental tests separately so role-specific add-ons are not quoted as bespoke; get camp days included above a threshold headcount per site; cap multi-year price escalation; and insist the aggregate analytics report is included, since that is what lets you prove programme value internally. Have your occupational health advisor review the panel before signing, because long test lists look impressive and often add nothing clinically.

In the contract, include a data processing agreement, confidentiality covering employee health information, confirmation that reports go to the employee directly, an audit right, a defined exit and data deletion process, service credits for missed SLAs, and what happens to records if you switch vendors.

Consent, Privacy and DPDP-Aligned Handling of Health Data

Health data is among the most sensitive personal data an employer will ever hold. India's data protection regime places clear obligations on organisations processing personal data, and health information carries elevated practical risk regardless of how any particular provision is worded.

Build around these principles. Purpose limitation: collect only for the stated occupational health purpose, and do not repurpose for performance, promotion or insurance pricing decisions. Data minimisation: HR should hold fitness status and participation, not raw clinical results, which is the single most important design decision in the whole programme. Notice in plain language and in the languages people actually read. Consent that is specific and revocable where consent is the basis, and an explicit statement of legal obligation where it is not. Security through encryption, access control, logging and a defined breach response. Retention limited to what the purpose or the rules require. And processor obligations contracted with your diagnostics vendor.

Consent versus obligation

If a periodic examination is required by applicable rules for a worker category, participation is a condition of the role, and framing it as optional consent is misleading. What the employee consents to separately is sharing clinical detail beyond what the obligation requires, plus any voluntary add-ons.

Who can see results, and who cannot

State this explicitly in the policy and mean it. Line managers never see clinical results; they see completion status and, where relevant, an accommodation instruction phrased in work terms. HR generalists see fitness status and completion, not clinical detail. Leadership sees de-identified aggregates only, with a minimum group size before any breakdown is published, so a six-person location never gets its own cut. The occupational health physician sees what they need to advise. The employee sees everything about themselves.

If you cannot enforce this technically, you cannot claim it in policy. That is a strong argument for holding health-check metadata in an HRMS with proper role-based access control rather than a shared drive folder.

The consent workflow itself is simple: issue the policy and privacy notice at induction and again before each cycle; capture acknowledgement digitally with a timestamp; capture separate specific consent for optional components and dependant coverage; provide a logged withdrawal mechanism; and record the basis for each data element so you can answer a data-subject request without a scramble.

Medical Fitness Certificates: Pre-Employment Versus Periodic

These are different instruments, and conflating them creates exposure.

Pre-employment examination determines whether a candidate is fit to perform the essential functions of a specific role, with reasonable accommodation. Conduct it after a conditional offer, not during screening. Define the physical and sensory demands of the role in writing first and give that profile to the examining doctor. The output to HR should be a fitness determination and any accommodation recommendation, never a clinical report, and the clinical detail stays with the medical provider rather than the recruitment file. Never use it as a proxy for screening out disability, chronic conditions or pregnancy, because that is where legal risk concentrates.

Periodic examination detects early signs that work is affecting health and confirms continued fitness. Most Indian employers settle on an annual medical examination for employees in covered categories and a longer interval for low-risk groups, but follow applicable rules on frequency where they specify one and your risk assessment where they do not. Trigger off-cycle examinations on role change into a higher-risk category, after long medical absence, after an incident, or after an exposure event. Results feed back into the risk assessment: if three warehouse staff show hearing thresholds shifting, the answer is a noise survey, not individual counselling.

Store the certificate, not the underlying clinical file. A workable certificate carries the employee identifier, role, date, examining practitioner name and registration number, fitness determination, any conditions or accommodations, and the next due date. It should not carry diagnoses.

Scheduling Logistics for Multi-Location and Shift-Based Teams

This is where most implementations fall apart. Choose a scheduling model first. The cohort model divides the workforce into monthly cohorts by location or joining anniversary, smoothing workload across the year, and suits most companies. The campaign model uses one or two intensive windows with on-site camps, better for single-site manufacturing. The anniversary model is cleanest conceptually and hardest to run camps around. Above roughly 200 employees across multiple sites, cohorts plus quarterly camps at large sites and lab network access everywhere else usually works best.

Fasting is a bigger obstacle than people expect. Communicate the requirement at least seventy-two hours ahead and repeat it, schedule fasting draws in the first two hours of the day, provide breakfast immediately after the draw, and allow rescheduling without penalty, because punishing people who forgot and ate simply produces no-shows.

Settle the payroll mechanics before the first camp. Is check-up time paid time, which for a statutory examination it sensibly is? Is travel covered and reimbursed, up to what cap? Does a camp day count as a working day, and how is it coded so it does not trigger an absence flag? Nothing sours a programme faster than an employee losing attendance for a mandatory health check.

Linking Health Checks to Group Health Insurance and Wellness Benefits

Done well, the check-up becomes the entry point to your employee wellness benefits stack rather than an isolated annual event.

On the insurance side, aggregate de-identified data strengthens your position at renewal. Check whether your group policy already includes preventive check-up benefits, so you are not paying twice for the same tests. Make sure employees know which follow-up consultations and treatments the policy covers, because the check-up finds the issue and the policy should fund the fix. OPD and teleconsultation riders materially increase the chance an abnormal finding gets acted on. Never share individual data with insurers without a proper basis and clear notice.

On the wellness side, let aggregate findings drive the calendar rather than the reverse. Run the cycle, get the de-identified report, identify the top two or three risk themes, build the next two quarters of programming around them, and measure the same indicators next cycle. That closed loop is your answer when finance asks what the wellness budget bought.

Some hard lines: never make wellness participation a condition of insurance eligibility or premium share, never rank employees or teams on health metrics, never let a manager see who had an abnormal finding, and make dependant coverage genuinely optional with the same protections applied to dependant data.

Record Retention and What an Inspector May Ask For

Assume you will one day have to demonstrate the programme to an inspector, a client auditor, or in the context of an employee claim. Design your records for that moment.

Retention periods vary by rule set and can be long, particularly for hazardous exposure work where health effects appear years later. Confirm the requirement applicable to your establishment rather than applying a generic default.

Prepare answers to these in advance:

1. Show me your health check-up policy and when it was last reviewed.
2. Show me who is due this cycle and their completion status.
3. Show me fitness certificates for workers in these roles.
4. Who is your examining medical practitioner and what are their qualifications?
5. What is the risk assessment for this role and how did you derive the test panel?
6. What did you do about the abnormal findings from the last cycle?
7. How do you handle contract workers?
8. Where are these records stored and who has access?
9. Show me the record for this specific employee.
10. How do employees raise a workplace health concern?

Question six separates a real programme from a paper one. A documented follow-up trail, even for a handful of cases, is worth more than a thick file of unread reports. And being able to produce a filtered, exportable report in minutes rather than reconstructing it from email threads changes the tone of an inspection entirely.

Budgeting and Per-Employee Cost Planning

Finance will ask for a number. Build it from diagnostics package cost per tier, exposure-specific add-ons, dependant coverage, camp charges where not bundled, the occupational health physician retainer, follow-up consultations, communication and logistics, programme administration time, and lost productive time, which is real and usually ignored.

The figures below are hypothetical and used only to show the shape of the calculation. Diagnostics pricing in India varies widely by city, vendor, panel and volume, so get live quotes.

Illustrative company: 480 employees across a head office, two branches and a warehouse.

Two observations from this illustrative model. The diagnostics line is only about seventy percent of the true cost, so teams that budget the package price alone under-budget significantly. And the blended per-employee figure is small relative to typical group health premium per employee, which makes the internal case straightforward.

Frame the ask in three parts: the compliance portion, which is not discretionary; risk reduction, where you commit to measuring your own claims and absence data across cycles rather than quoting a savings percentage; and retention value, particularly where dependants are included. Avoid return-on-investment multiples you cannot substantiate.

Rolling Out a Mandatory Annual Health Check-Up for Employees, Step by Step

Phase 1, assess. Map every location, its classification and applicable state rules. Confirm with counsel or your state labour department which periodic examination obligations apply to each site and worker category. Build a role-level risk assessment with input from line managers, who know the actual exposures. Inventory what you already do, including insurance-bundled benefits. Identify your data protection gaps.

Phase 2, design. Define tiers, panels, frequency and age thresholds. Draft the policy and privacy notice in the required languages. Define the access model. Design the record set and retention approach. Get leadership sign-off on budget and policy.

Phase 3, source. Issue an RFP to three or four vendors. Evaluate on network, accreditation, data handling, SLA and report format, not price alone. Negotiate and contract, including the DPA. Appoint the occupational health physician.

Phase 4, configure. Set up the health-check module in your HRMS with due dates, cohorts, reminders, document types and access roles. Configure the attendance and payroll code. Build consent capture. Test end to end with a pilot group.

Phase 5, launch. Communicate through a leadership message, policy release, FAQ and manager briefing. Run camps and open booking. Monitor participation weekly. Ensure reports reach employees directly.

Phase 6, close the loop. Collect the aggregate report, review it with the physician, action and document follow-ups and accommodations, feed findings into the risk assessment and next year's wellness calendar, and update the policy.

Roles and Responsibilities: A RACI You Can Copy

Ambiguity about ownership is the most common reason programmes stall.

R responsible, A accountable, C consulted, I informed. Adapt it, but ensure every row has exactly one A.

Common Mistakes HR Teams Make

Treating it as a procurement exercise. Buying a package and booking a camp is not a programme. Without a risk assessment, follow-up mechanism and record set you have spent money and gained little protection.

Letting HR hold raw clinical reports. The most common privacy failure. HR receives a folder of PDFs containing diagnoses, uploads them to a shared drive, and now holds sensitive health data with no access control. Reports go to the employee; HR holds fitness status.

Applying one policy across states without checking. Especially for night-shift conditions and women employees. A single national policy is fine as a floor, but every state needs a verification pass.

Ignoring contract workers. If contract staff work on your premises your principal employer exposure is real. Put the obligation in the contract, collect the evidence, audit it.

No follow-up loop. Reports are issued, abnormal findings sit unread, nothing happens. If an employee later claims the employer knew and did nothing, an undocumented file is a liability rather than a defence.

Making it feel punitive. If employees suspect results affect job security, participation collapses and honest disclosure disappears. Say clearly, from leadership and in writing, that results are confidential and are not used in employment decisions except where fitness for a specific role is genuinely at issue.

Scheduling that ignores shift and field realities. Weekday morning slots at head office guarantee poor coverage of exactly the populations with the highest occupational risk.

Budgeting the package price only. No camp charges, no physician retainer, no follow-up fund, no productive time. Then the programme gets cut mid-year.

Weak consent records. Verbal consent, or a line buried in an offer letter, will not stand up. Capture it specifically, with timestamps and version references, and make withdrawal easy.

No aggregate reporting. Without a de-identified aggregate view you cannot demonstrate value, target wellness spend, or spot an emerging hazard.

Leadership quietly opting out. Programmes where the senior team skips the check-up lose credibility immediately. Have the founders go first, visibly.

Special Considerations: Women Employees, Night Shifts and Field Staff

Women employees. Ensure a female attendant or examiner is available for any physical examination, and say so in advance. Offer women-specific screening as opt-in, never mandatory. Never test for pregnancy as part of an employment-related examination or make employment decisions on that basis. Ensure genuine privacy at camp venues, meaning a separate examination room rather than a curtained corner of a conference room. Check the current notified night-work conditions in every state where women work night shifts, since these typically cover consent, transport, security, minimum numbers on shift and facilities, and they change.

Night-shift workers. Schedule around the sleep window, not the office day. Discuss fatigue, sleep quality and metabolic indicators with your occupational health physician when designing the panel. Consider a fitness assessment before assigning sustained night work, handled sensitively and without discrimination. Provide the same follow-up access as day staff, which usually means teleconsultation.

Field staff and drivers. Home collection is the only realistic mechanism here. Vision and cardiac screening carry particular weight for anyone who drives for work. Build a generous booking window and accept lower same-week completion in exchange for higher overall completion. Where drivers come through a vendor, put the fitness evidence requirement in the vendor contract.

Employees with disabilities or chronic conditions. The examination assesses fitness for the role with reasonable accommodation, not general health. Never use findings to exit an employee without a documented accommodation attempt, and keep accommodation records separate from clinical records, phrased in work terms.

Measuring Outcomes and Participation

Measure a few things well rather than building a dashboard nobody reads.

On participation, track completion rate against the eligible population overall and by location, shift and role band; time from due date to completion; no-show and reschedule rate by slot type; vendor report-delivery SLA adherence; follow-up closure rate for flagged findings; and consent capture completeness.

On health outcomes, track only de-identified aggregates with a minimum group size before publishing any cut: the proportion of participants with indicators outside reference range by broad category, year-on-year movement in your top risk themes, exposure-specific indicators for high-risk roles such as hearing threshold shifts in noise-exposed groups, and referral uptake.

On programme health, track cost per employee against budget, employee feedback on the check-up experience, vendor SLA performance, and the number of workplace changes made as a result of aggregate findings. That last one is the most meaningful single metric in the entire programme.

A workable rhythm: a weekly completion tracker for HR ops during the cycle, a monthly participation and budget view for the HR lead, a post-cycle aggregate findings review for leadership, an annual compliance and cost summary for founders or the board, and an on-demand inspection pack.

Policy Template Outline You Can Build From

Use this structure for your own employee health check-up policy India draft, then have counsel review it against your state's notified rules.

1. Purpose and scope covering entities, locations, effective date and version.
2. Definitions including worker, establishment, hazardous process, periodic and pre-employment examination, fitness certificate, sensitive personal data.
3. Regulatory context, stated generally, with a note that requirements vary by state and are verified periodically. Avoid quoting section numbers that may change.
4. Coverage and eligibility: categories, age bands, role tiers, contract workers, dependants.
5. Examination types and frequency: pre-employment, periodic, return-to-work, role-change, post-incident.
6. Test panels by tier, with an annual physician review commitment.
7. Scheduling and attendance: booking, camp calendar, fasting instructions, reschedule policy, pay treatment, travel reimbursement.
8. Consent and privacy: what is collected, purpose, basis per data element, retention, withdrawal, grievance route.
9. Access to results, with an explicit table and a statement that managers do not see clinical results.
10. Follow-up and accommodation: referral pathway, employer-funded scope, request process, confidentiality.
11. Fitness determinations: categories used, operational meaning, second-opinion mechanism.
12. Records and retention: what, where, how long, who administers deletion.
13. Vendor management: provider, DPA reference, escalation contacts, SLA summary.
14. Non-discrimination statement.
15. Roles and responsibilities, in summary form.
16. Review: annual commitment, owner, version history.

Annexures: privacy notice; consent and dependant consent forms; fitness certificate format; role risk assessment template; follow-up and accommodation log; employee FAQ.

An HR Compliance Checklist for 2026

Work through this once, then re-run it at the start of each cycle. It doubles as a readiness check before any inspection or client audit.

• [ ] Every location classified and mapped to applicable state rules
• [ ] Periodic examination obligations confirmed with counsel or the labour department within twelve months
• [ ] Role-level risk assessment completed and dated
• [ ] Policy approved, versioned and published in required languages
• [ ] Privacy notice issued and acknowledgement captured
• [ ] Consent records complete for optional components and dependants
• [ ] Tiers, panels and frequency reviewed by the occupational health physician
• [ ] Vendor contracted with a signed data processing agreement
• [ ] Occupational health physician appointed and briefed
• [ ] HRMS configured with due dates, reminders, document types and access roles
• [ ] Attendance and payroll code for check-up time configured
• [ ] Camp calendar published, including night-shift and field-staff slots
• [ ] Managers briefed, with explicit instruction that they receive no clinical results
• [ ] Pre-employment examination integrated into onboarding, post-offer
• [ ] Contract worker obligations written into vendor contracts
• [ ] Follow-up and referral pathway defined and funded
• [ ] Records retention schedule defined per applicable rules
• [ ] Access control tested, including that managers cannot see clinical data
• [ ] Aggregate de-identified reporting agreed with the vendor
• [ ] Inspection response pack assembled in one place
• [ ] Post-cycle review scheduled with a named owner

Integrating the Programme With Your HRMS

A health check-up programme generates due dates, reminders, documents, consent records, access rules and audit trails. That is exactly the shape of work an HRMS handles well and spreadsheets handle badly.

Configure a health-check record type on the employee profile holding examination date, type, tier, fitness status, next due date and the certificate document, but no clinical detail. Make due dates rule-driven, derived from role, age band, location and last examination, so the system computes who is due. Build automated reminders to the employee ahead of the due date, escalating to HR ops on overdue, with any manager notification saying only that a compliance item is outstanding. Add document workflows for certificate upload with approval and automatic expiry. Capture versioned consent with timestamps. Enforce role-based access control technically, and test it before launch. Integrate the attendance and payroll code. Build reporting for completion by cohort, overdue lists, expiring certificates and an exportable inspection pack. Keep an audit trail of who accessed which record and when. And hook the programme into onboarding and offboarding, so pre-employment examination is an onboarding task and retention or deletion is handled at exit.

Here is one employee's cycle when it runs properly. The system flags a warehouse-cohort employee as due in six weeks based on role tier and last examination date. An automated notification goes out with the camp calendar and booking link. The employee books a slot, and fasting instructions arrive seventy-two hours prior while the attendance system is pre-populated with the check-up code. The employee attends; the vendor sends the clinical report to the employee and only a fitness determination and certificate to HR. HR ops uploads the certificate, and the next due date sets automatically. Where a follow-up is recommended, a task is created and its closure logged without recording clinical detail. Every access to the certificate is logged.

None of these steps is complicated. The difficulty is doing them consistently for several hundred people across multiple sites, which is precisely why the workflow belongs in a system rather than an inbox.

Frequently Asked Questions

Is a mandatory annual health check-up for employees legally required in India?

It depends on your establishment type, location and the work your people do. Obligations for periodic medical examination have historically been clearest for factories and hazardous processes, and the OSH Code framework alongside state rules has been extending occupational health expectations more broadly. Because state rules vary and are being updated, the only reliable answer for your business comes from checking the rules currently notified for your state and establishment type with your state labour department or legal counsel. Many employers now run a programme regardless, because client audits, insurance and employee expectations all point the same way.

What age should we set as the threshold for a fuller check-up panel?

Where applicable rules specify a threshold, follow it. Where they do not, choose one you can justify clinically with your occupational health physician, document the reasoning, and apply it consistently. Many Indian corporate programmes use a lighter panel for younger employees, a fuller panel from a defined mid-career age, and an enhanced tier for the senior band. Consistency and documented rationale matter more than matching another company.

Can we see our employees' medical reports?

You should not want to. The defensible design sends the full clinical report to the employee and the provider only, while HR receives a fitness determination, the certificate and any accommodation recommendation phrased in work terms. Line managers see completion status and accommodation instructions, never clinical detail. Holding raw clinical reports in HR creates data protection exposure with no compliance benefit.

What happens if an employee refuses to attend?

Distinguish two situations. Where the examination is required by applicable rules for that worker category, participation is a condition of the role and refusal becomes a compliance matter handled through your normal process, but only after you have removed practical barriers such as scheduling and travel. Where it is a voluntary wellness offering, refusal carries no consequence. Make sure the policy says clearly which is which, and confirm the requirement in your state before treating anything as mandatory.

How should we handle health data under India's data protection rules?

Apply purpose limitation, data minimisation, clear notice, specific consent where consent is the basis, strong access control, defined retention and secure deletion. Sign a data processing agreement with your diagnostics vendor. Hold the minimum viable dataset in HR, keep clinical detail with the employee and the provider, and maintain an audit trail of who accessed what. Confirm your specific obligations with counsel, since the regime and its rules continue to develop.

What does a health check-up programme cost per employee in India?

It varies widely by city, vendor, panel design and volume, so get live quotes rather than relying on published figures. Budget more than the diagnostics package: camp charges, physician fees, follow-up consultations, communication and logistics, and productive time. In the illustrative model above, diagnostics accounted for roughly seventy percent of total programme cost, a useful reminder that package price alone will under-budget the programme.

How do we run this for remote employees and field staff?

Use a partner with genuine national network coverage plus home sample collection, and give field staff a wider booking window rather than a fixed camp day. Provide a reimbursement fallback for pin codes the vendor cannot reach. Track completion centrally so distributed employees are not quietly excluded, since remote and field populations are usually where completion rates fall first.

How long do we need to keep health check-up records?

Retention depends on the rules applicable to your establishment and worker category, and can be long for hazardous exposure work where health effects appear years later. Do not apply a generic default. Confirm the specific period that applies to you, document it in your policy, and configure your HRMS to enforce both retention and deletion. Keep policy documents, risk assessments and de-identified aggregate reports long-term, since they carry no privacy risk.

Conclusion: Build the System Once, Run It Every Year

The shift from optional perk to occupational health compliance expectation is already underway, and the employers handling it well are not the ones spending the most. They are the ones who mapped coverage honestly, designed panels around actual risk, protected health data properly, and built a workflow that runs the same way every cycle without heroics from the HR team.

Start with the coverage map and the risk assessment, because everything else depends on them. Get data handling right at design stage, since retrofitting privacy is painful. Budget the full cost, not just the package price. And verify the rules applicable to your state and establishment type with your labour department or counsel, then re-verify annually, because this area is genuinely still moving.

If you want the operational side handled in one place, CozyHR can store health check-up records and fitness certificates against employee profiles with role-based access, trigger due-date reminders automatically, manage consent and document workflows, and keep a full audit trail for inspections. It also links check-up status to attendance and payroll codes so a mandatory health check never shows up as an unexplained absence. Try CozyHR to see how the whole cycle looks when it runs on rails.