Civ. Code 56.20 bars an employer from obtaining medical information about an employee from the employee’s medical provider without the employee’s signed authorization and bars the employer from discriminating against the employee for refusing to provide that authorization. The section also bars the employer from using such information against the employee. Here, the court concludes that an employer’s requirement that an employee obtain a COVID-19 test and provide the employer with proof the test was negative or that the employee was vaccinated did not violate section 56.20 because that section forbids only getting or using information that the employer obtains directly from a health care provider. Here, by contrast, the employer demanded that the employee, himself, provide the required information. The statute does not apply in that circumstance. See also Rossi v. Sequoia Union Elementary School (2023) 94 Cal.App.5th 974.