Consider this worst case scenario. You take a health risk assessment that your employer claims is voluntary, but is keeping a record of those who decline. You wrongly assume the findings are only for you to use to manage your own wellness. Instead, a found condition goes to your boss who suddenly turns to another for a promotion he had nearly promised to you. Possible? Is this happening out there? What can you do?