FMLA Authentication and Clarification of Medical Certification
A practical employer guide to FMLA authentication and clarification, including when employers may contact a health care provider, who may make contact, what questions are allowed, HIPAA authorization concerns, and common employer mistakes.
Authentication & Clarification Quick Facts
Use this section as a quick employer reference before contacting a health care provider.
What Is FMLA Authentication and Clarification?
Authentication and clarification are limited ways an employer may follow up on a complete and sufficient FMLA medical certification.
Verifying the Certification
Authentication means providing the health care provider with a copy of the certification and asking the provider to verify that the information was completed or authorized by the provider who signed it.
- Verify signature or authorization
- Confirm the form came from the provider
- No additional medical information
- Document date and method of contact
Understanding the Response
Clarification means contacting the provider to understand handwriting or the meaning of a response already provided on the certification.
- Clarify unreadable handwriting
- Understand an unclear answer
- Do not ask new medical questions
- Stay within the certification form
Who May Contact the Health Care Provider?
FMLA rules limit who may contact the employee’s health care provider for authentication or clarification.
HR or Leave Administration
The employer may use a health care provider, human resources professional, leave administrator, or management official.
- HR professional
- Leave administrator
- Management official
- Employer-designated health care provider
Direct Supervisor Contact
The employee’s direct supervisor may not contact the employee’s health care provider under any circumstances.
- No manager calls
- No supervisor emails
- No informal provider outreach
- No worksite pressure through management
HIPAA and Authorization
Employers should consider whether HIPAA authorization or employee permission is needed before a provider will discuss clarification.
- Use proper authorization when needed
- Respect provider privacy limits
- Ask only permitted questions
- Document refusal or nonresponse
Authentication and Clarification Workflow
Employers should follow a careful process before contacting a health care provider.
Review Certification
Confirm whether the certification is complete and sufficient or whether the employee first needs a deficiency notice.
Provide Cure Opportunity
If the certification is incomplete or insufficient, give the employee an opportunity to cure before provider contact.
Define the Purpose
Decide whether the contact is for authentication, clarification, or another permitted process.
Use the Right Contact
Use HR, a leave administrator, management official, or health care provider—not the employee’s direct supervisor.
Limit the Questions
Ask only what is needed to verify the certification or understand the existing response.
Document the Outcome
Record who contacted the provider, when contact occurred, what was asked, and what response was received.
FLARE™ Insight
Authentication and clarification are often misunderstood because employers treat them like open-ended medical follow-up. They are not. A strong process separates deficiency notices, authentication, clarification, second opinions, and final designation so HR does not accidentally overstep or create inconsistent documentation.
Common Authentication and Clarification Mistakes
These are the mistakes employers should audit before contacting a health care provider.
Letting the Direct Supervisor Call
The employee’s direct supervisor should never contact the employee’s health care provider.
Skipping the Cure Process
If certification is incomplete or insufficient, the employee should first be given a chance to cure the deficiency.
Asking New Medical Questions
Clarification does not allow employers to ask for additional medical information beyond what the certification form requires.
Using Clarification Instead of Second Opinion
If the employer doubts the validity of a complete certification, second-opinion rules may apply instead.
No HIPAA Authorization Process
Providers may require authorization before discussing individually identifiable health information.
No Contact Log
Employers should document the contact person, date, purpose, question asked, and response received.
Authentication and Clarification Tracking Table
Use this table as a practical employer checklist before contacting a health care provider.
| Item | Employer Action | Why It Matters | Documentation to Keep |
|---|---|---|---|
| Certification Review | Determine whether the certification is complete and sufficient. | Provider contact should not replace the deficiency cure process. | Certification copy, review notes, deficiency notice if applicable. |
| Purpose of Contact | Classify the contact as authentication or clarification. | Limits the employer to the proper scope of contact. | Contact purpose, question list, HR approval notes. |
| Authorized Contact Person | Use HR, leave administration, a management official, or health care provider. | Prevents improper direct supervisor contact. | Name, role, date of contact, internal authorization. |
| HIPAA / Authorization | Determine whether authorization is needed for provider discussion. | Supports privacy-compliant communication. | Authorization form, provider response, employee communication. |
| Question Limits | Ask only permitted questions tied to verification or understanding existing responses. | Prevents improper requests for additional medical information. | Written questions, call notes, provider response. |
| Final Leave Decision | Use the clarified or authenticated information to continue certification review or designation. | Connects provider contact to the final FMLA process step. | Review notes, WH-382, final designation record. |
Related FMLA Notice Resources
Authentication and clarification connect closely to certification requests, deficiency notices, and second opinions.
Medical Certification Request
Explains when employers may request FMLA certification and which forms may apply.
View Medical Certification →Certification Deficiency Notice
Explains what to do when certification is incomplete, insufficient, or needs correction.
View Deficiency Notice →Second and Third Medical Opinions
Explains when employers may request additional medical opinions if they doubt certification validity.
View Second and Third Opinions →FMLA Authentication and Clarification FAQs
Common employer questions about contacting health care providers under FMLA.
Can an employer contact the employee’s health care provider?
Yes, but only for limited purposes such as authentication or clarification, and only after the employee has had an opportunity to cure deficiencies when required.
Can the employee’s direct supervisor contact the provider?
No. The employee’s direct supervisor may not contact the employee’s health care provider under any circumstances.
What is authentication?
Authentication means asking the health care provider to verify that the certification information was completed or authorized by the provider who signed it.
What is clarification?
Clarification means contacting the provider to understand handwriting or the meaning of an existing response on the certification.
Can employers ask for additional medical information?
No. Employers may not ask the health care provider for additional information beyond what the certification form requires.
What if the employee refuses authorization for clarification?
If the employee does not authorize clarification and does not otherwise clarify the certification, the employer may deny FMLA leave if the certification remains unclear.
Need Help Reviewing Your FMLA Certification Process?
Fralick’s Benefit Consulting helps employers review certification workflows, deficiency notices, authentication and clarification processes, second-opinion escalation, documentation standards, and leave administration gaps through the FLARE™ Discovery process.