There are some mandatory reporting qualifications to the confidentiality requirements but that does not include an employer.
By way of example, a doctor is required to report any suspicion of child abuse and, as breakfastburrito has pointed out, some diseases are reportable.