An employee of a local manufacturer is brought to the office with a large laceration to his leg. Before the examination, the manufacturer asks that a urinalysis for illicit drugs be performed. The employee provides a specimen that is later proven to be positive. The employee states that he does not want this reported, but the physician states that he must report it because payment is being made by the employer. Is this legal? What about confidentiality?