Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
When you’re running a small business, unplanned sick days can throw your roster, deadlines and customer commitments into chaos.
At the same time, medical information is sensitive, and you can’t just demand details whenever you feel like it.
Getting your approach to medical certificates for work right (from day one) helps you manage absences fairly, keep good records, and reduce the risk of an employment dispute later.
What Is A Medical Certificate For Work (And What Is It Used For)?
A medical certificate for work is typically a note or certificate from a registered health practitioner confirming an employee:
- was unfit for work for a particular period (or requires modified duties); and/or
- is fit to return to work from a certain date (sometimes with conditions).
In practice, employers use medical certificates to support:
- Sick leave administration (recording leave correctly and applying any sick leave policies consistently);
- Workforce planning (covering shifts, redistributing workload, meeting customer demand);
- Health and safety decision-making (for example, whether someone is safe to operate machinery, drive, or work alone); and
- Managing patterns of absence where there are legitimate concerns about attendance, wellbeing, or capacity to perform the role.
From a legal perspective, the main framework you’ll keep coming back to includes:
- Holidays Act 2003 (minimum sick leave entitlements and when proof can be requested);
- Employment Relations Act 2000 (good faith obligations and fair process);
- Privacy Act 2020 (how you collect, use, store and share health information); and
- Health and Safety at Work Act 2015 (ensuring workers are not put at risk, including where fitness for work is an issue).
Because your employment documentation sets the expectations, it’s worth making sure your Employment Contract and internal processes are aligned with what the law allows.
When Can You Ask For A Medical Certificate (And Who Pays)?
This is where many small businesses get tripped up, especially when you’re under pressure and just need certainty around staffing.
The Default Rule: After 3 Consecutive Calendar Days
Under the Holidays Act 2003, you can generally ask an employee for proof of sickness or injury (such as a medical certificate) if they have been away for three or more consecutive calendar days.
“Consecutive calendar days” includes days that aren’t working days. So if an employee is off sick on Friday and Monday, that may be counted as four consecutive calendar days (Friday, Saturday, Sunday, Monday), even though only two were working days.
Asking Earlier Than 3 Days: You Can, But There’s A Catch
You can request proof within the first three consecutive calendar days, but if you do, you’ll need to pay the employee’s reasonable costs of getting that proof.
There’s also a timing point to keep in mind: if you’re going to require proof early, you should tell the employee as early as practicable (so they have a fair chance to arrange it).
For a small business, that practical detail matters. If you ask for a certificate on day one or two because you’re worried about rostering, you should assume you’ll be covering the cost and making the request early (rather than surprising the employee later).
What If Your Employment Agreement Says Something Different?
Some employment agreements try to set stricter requirements (for example, “a medical certificate is required for any sick day”). This can be risky if it effectively removes minimum rights or is applied unfairly.
Even where your documents say you may ask for proof earlier, the Holidays Act rules still matter (including the requirement to pay reasonable costs if you’re asking within the first three consecutive calendar days).
If you want a consistent approach to managing absences across your team, it’s better to set this out in a clear Workplace Policy and make sure it’s consistent with the Holidays Act 2003 and applied in good faith.
What Counts As “Proof” Of Sickness Or Injury?
In many cases, a medical certificate is the most straightforward form of proof. Legally, the key point is that any proof you request should be something that is reasonable in the circumstances and reasonably acceptable for confirming the employee wasn’t fit for work.
What’s important is that you:
- make the request lawfully (timing and cost rules);
- apply your approach consistently; and
- don’t ask for more personal information than you actually need to manage the absence.
What Information Can You Request, And How Do You Handle Privacy?
When you ask for a medical certificate, it’s easy to think “we need all the details.” In reality, you usually only need confirmation of capacity - not a diagnosis.
You Usually Don’t Need A Diagnosis
In most situations, it’s enough for you to know:
- the employee is/was unfit for work for a stated period; and
- any relevant restrictions (for example, “no lifting over X kg”, “reduced hours”, “no driving”).
If a certificate includes a diagnosis, you should treat it as sensitive personal information and avoid circulating it internally.
Only Collect What You Need
Under the Privacy Act 2020, health information is generally considered sensitive. As an employer, you should only collect personal information if it’s necessary for a lawful purpose connected with your business.
So as a practical rule of thumb:
- Do ask for confirmation of incapacity and dates.
- Do ask for restrictions if you need to assess whether the employee can safely do their job.
- Don’t demand details of the condition unless there’s a genuine, specific reason and you’re using a fair process.
Store Medical Information Carefully
Medical certificates should be handled like confidential HR records. That means:
- store them securely (restricted access);
- limit who can view them (usually the owner/manager and payroll/HR only);
- don’t leave them on a shared drive or printed on a counter; and
- only keep them as long as you genuinely need them for employment administration and compliance.
A good Privacy Policy and internal HR handling guidance can help set the standard across your business, even if you only have a small team.
Be Careful When Asking For Extra Information
Sometimes you’ll have a legitimate reason to ask for more detail - for example, where there are health and safety concerns or you’re considering a return-to-work plan with adjustments.
In those situations, don’t “wing it”. Consider using a tailored consent process (especially if you’re seeking information beyond a standard medical certificate), such as a Medical Release Consent Form, so the employee understands what is being requested, why, and who it will be shared with.
It’s also worth making sure your wider HR approach supports privacy compliance - for example, through an Employee Privacy Handbook that sets clear boundaries and expectations.
Practical Steps For Small Business Employers (So You Stay Consistent)
When you’re busy, the biggest risk isn’t bad intent - it’s inconsistency. One employee gets asked for proof, another doesn’t. One manager wants a certificate on day one, another never asks. That’s the kind of thing that can escalate quickly.
Here’s a practical system you can implement to manage medical certificates for work in a way that’s fair and workable.
1) Put The Rules In Writing
You don’t need a 50-page manual, but you do want clarity. Your documents should cover:
- how employees should notify you they’re sick (who to contact, by when, and how);
- when you may request a medical certificate for work (including the 3 consecutive calendar day rule);
- what happens if you request proof within 3 days (including who pays the reasonable cost);
- how sick leave is recorded (paid sick leave vs unpaid leave, if entitlements are exhausted); and
- privacy expectations (how certificates are stored and who can access them).
These details are commonly set out across the employment agreement and a workplace policy suite, so it’s worth checking your Employment Contract and Workplace Policy work together (and don’t contradict each other).
2) Train Your Frontline Managers (Even Informally)
If you have supervisors or a duty manager, they’re often the first person an employee calls in sick. Give them a simple script, such as:
- thank the employee for letting you know;
- confirm the expected absence period (if known);
- confirm when they should check in next; and
- only mention a medical certificate if the request is lawful and appropriate.
Managers should also avoid “diagnosis talk” (for example, asking “what’s wrong with you?”). It’s not usually necessary, and it can create privacy and discrimination risk if handled poorly.
3) Decide When You’ll Ask For Certificates Within The First 3 Days
Because requesting a medical certificate within the first three consecutive calendar days means you pay the cost, it helps to decide ahead of time when you’ll use that option (and how you’ll communicate it early).
Common examples where employers choose to request earlier proof include:
- where the employee is rostered for a critical shift and the absence will cause significant disruption;
- where there’s a recent pattern of absences around weekends/holidays (but note: you still need to apply a fair process);
- where health and safety risks make fitness for work a genuine concern; or
- where the employee has previously provided unreliable information (again, handle carefully and in good faith).
The key is consistency and fairness - not suspicion as a default setting.
4) Have A Clear Process If Someone Can’t Get A Certificate
Sometimes employees can’t access a doctor quickly. Instead of letting this turn into conflict, decide what your business will do, for example:
- allow an extra day to provide the certificate where reasonable;
- ask the employee to keep you updated and confirm when they have an appointment; and
- record your requests and the employee’s response in writing (politely and neutrally).
A small process improvement here can save a lot of time (and stress) later.
Return To Work, “Fit For Work” Notes, And Your Health And Safety Duties
For many businesses, the real issue isn’t the absence itself - it’s what happens when the employee comes back. If someone returns too early or is not actually fit for their duties, that can create safety risks and operational issues.
When Should You Ask For A Fitness For Work Clearance?
You may consider requesting a clearance (or clarification) where:
- the illness or injury could affect safety-critical tasks (driving, machinery, working at heights, working with vulnerable people);
- the employee has had an extended absence;
- there are clear signs the employee is not coping with their normal duties; or
- you’re offering modified duties and need guidance on restrictions.
Any request should be connected to a real business need, and you should be careful not to overreach into private details. A short, role-focused “can this person safely perform X duties?” approach is usually more appropriate than “tell us everything about your health”.
Modified Duties And Return-To-Work Plans
If a certificate suggests restrictions, you may need to consider temporary changes such as:
- reduced hours;
- alternative tasks;
- additional breaks; or
- working from home (where the role allows it).
This is a good example of where good faith matters. Even in a small business, a short written plan (what duties will change, for how long, and when you’ll review it) can prevent misunderstandings.
If you’re unsure what adjustments are reasonable in your situation, it’s worth getting tailored advice before you make a decision that impacts someone’s role or pay.
What If You Suspect Misuse Or A Pattern Of Absences?
It’s uncomfortable, but it happens: an employee’s sick leave pattern raises questions, or a medical certificate doesn’t seem to align with what’s going on operationally.
The important thing is to handle it carefully. Jumping straight to allegations can create significant legal risk, especially if it becomes a disciplinary process without proper steps.
Start With Records And Facts (Not Assumptions)
Before you take any action, check:
- the sick leave record (dates, frequency, any patterns);
- what proof you requested and when;
- what the employee actually said at the time; and
- whether similar issues have been handled consistently across your team.
Sometimes what looks like “misuse” is actually a genuine health issue, a caring responsibility, or a burnout situation that needs a different management approach.
Have A Proper Conversation First
Often the best first step is a private, respectful meeting to discuss attendance concerns. Keep it focused on work impact (rostering, deadlines, coverage) rather than personal judgment.
If the employee says there’s an ongoing health issue, you can discuss what support or adjustments might be needed and what information (if any) is required to assess that.
If It Becomes A Performance Or Disciplinary Issue, Follow A Fair Process
If the concern escalates (for example, you suspect dishonesty, or the employee repeatedly fails to follow absence notification processes), you may need to shift into a more formal process.
This is where small businesses can get exposed if they move too fast or skip steps. A fair process generally involves:
- clearly explaining the concern and the impact;
- giving the employee a genuine opportunity to respond;
- considering their explanation with an open mind; and
- only then deciding what action (if any) is reasonable.
If you’re heading into warning territory, it’s smart to get advice early and make sure your steps are defensible. A structured Performance Management Process can make a big difference to how safely you manage the situation.
Key Takeaways
- A medical certificate for work is usually used to confirm an employee is unfit for work for a stated period and/or fit to return with any restrictions.
- In New Zealand, you can generally request proof after 3 consecutive calendar days of sickness or injury, and those days can include weekends and non-working days.
- If you request proof within the first 3 consecutive calendar days, you’ll need to pay the employee’s reasonable cost of obtaining it (and you should raise the request as early as practicable).
- You typically don’t need a diagnosis - focus on dates and capacity/restrictions, and treat medical information as sensitive under the Privacy Act 2020.
- Small businesses are best protected when expectations are set clearly in an Employment Contract and supported by a consistent Workplace Policy.
- If you suspect misuse or you’re managing repeated absences, start with facts and follow a fair process (and get advice early if it’s heading toward formal action).
If you’d like help tightening up your employment documents and absence processes (including how and when to request a medical certificate for work), you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.


