C.R.S. § 8-13.3-412

(1) An employer shall not require disclosure of details relating to domestic violence, sexual assault, or stalking or the details of an employee’s or an employee’s family member’s health information as a condition of providing paid sick leave under this part 4. (2) Any health or safety information possessed by an employer regarding an employee or employee’s family member must: (a) Be maintained on a separate form and in a separate file from other personnel information; (b) Be treated as confidential medical records; and (c) Not be disclosed except to the affected employee or with the express permission of the affected employee. (3) As used in this section, “affected employee” means the employee: (a) About whom the health information pertains or who is the victim of the domestic abuse, sexual assault, or harassment; or (b) Whose family member is the subject of the health information or is the victim of the domestic abuse, sexual assault, or harassment.