Health-examination reports, privacy and administrative use in China

Map four records before deciding what to collect

Distinguish the institution's underlying clinical record, the clinician-reviewed general health-examination report, a controlled special-purpose certificate, and a verification or confirmation result based on an overseas record. Label the issuer, purpose, issue date, intended recipient and whether the document contains attachments. Do not call all four a medical certificate.

The applicant may need to keep several records while the recipient needs only one. A work-permit platform, school or exit-entry office should identify the exact document required. Asking for everything because the categories are unclear increases privacy, security and misinterpretation risk.

Assign clinical responsibility to the medical institution

National general health-examination provisions describe provider qualifications, item recording, laboratory and imaging material, positive or abnormal findings, a professional health description or recommendations, physician signing and designated report review. The institution must keep information truthful, accurate and complete and protect it against unauthorized disclosure.

A collection point, online marketplace, agent or recipient should not substitute itself for the responsible medical institution. Confirm the Chinese legal name and exact campus shown on the final report, who reviewed it, whether any item is pending and how an objective error or omitted attachment is corrected.

Use special-certificate controls for commissioned examinations

The 2025 National Health Commission notice describes special examinations commissioned under a department's or organization's requirements. The institution must have appropriate subjects, equipment and staff, follow the required items within its capability, verify identity and issue an objective, standardized certificate with controls for seals, numbering, retained copies and traceability.

The recipient defines the purpose and specification but should not ask an institution to issue beyond its lawful duty or capability. A provider cannot create proof for a person it did not examine, and an agent cannot repair missing clinical content. If the specified institution cannot provide the service, the recipient must identify a lawful alternative.

Keep physician proof inside professional scope

The Physicians Law requires personal examination or investigation before a physician signs corresponding medical proof and prohibits false or out-of-scope documents. A physician can record and certify matters within professional responsibility; the physician does not thereby become the immigration officer, work-permit authority, university registrar or HR decision-maker.

Recipients should avoid asking for conclusory wording such as fit for any job, guaranteed healthy or free of all disease. Ask only for the certificate defined by the lawful process. If a different professional opinion is genuinely required, identify its legal purpose, competent provider and decision standard separately.

Let the recipient decide acceptance, not clinical truth

A receiving authority can reject a document because the issuer, form, issue date, identity controls or transmission method does not satisfy its process, even when the underlying medical work was competent. That is an administrative acceptance decision, not a declaration that the clinical findings are false.

Conversely, acceptance of a work, school or residence certificate does not prove that every health condition has been assessed or that no follow-up is needed. Applicants should use the institution's clinical explanation route for findings, while recipients should confine their decision to the purpose and legal standard of the file.

Provider validity and recipient acceptance answer different questions. Neither should be presented as a complete judgment about a person's health.

Collect the minimum necessary health information

Medical and health information is sensitive personal information under the Personal Information Protection Law. Define the purpose, recipient, required fields and retention before collection. Where a certificate is sufficient, do not routinely request the full laboratory, imaging, history and treatment record. Avoid collecting information merely because a coordinator finds it interesting or potentially useful later.

Minimum necessary does not mean a recipient must accept an incomplete statutory file. It means the recipient should identify the actual lawful requirement and avoid excess around it. If attachments are required, document which ones and why. Keep passport identity and health information in controlled systems rather than general team folders.

Use the correct processing basis and notice

The Personal Information Protection Law recognizes several lawful processing bases and imposes additional rules for sensitive information. Separate consent and notice of necessity and impact can be required where consent is the applicable basis, while government duties, human-resources management under lawfully formulated rules and other statutory bases require their own analysis.

Do not present consent as the only possible basis or as a blank check. A recipient should give a clear notice covering controller identity, purpose, method, categories, retention, rights route, sharing and protection, and obtain any required consent separately. This guide cannot determine the correct basis for a specific employer, university, agent or government office.

Control sharing, agents and retention

Map every handoff from provider to applicant, employer or school coordinator, external relocation agent and government recipient. Use official portals, institutional email, controlled upload or documented in-person transfer. Limit permissions, avoid public links and personal chat accounts, and keep an audit record of what was sent and received.

An agent should have documented authority, a defined purpose, limited access and a return or deletion plan. Retention should be tied to the legal and operational need, not indefinite convenience. Preserve the applicant's own secure copy and evidence of submission, while removing duplicate working copies according to the responsible organization's policy and applicable law.

Handle correction without altering the original

If identity, date, signature, seal, attachment or other objective information is wrong or missing, contact the issuing institution and use its amendment or reissue process. Keep the original, corrected version and explanation or version history where supplied. The recipient should record which version it accepted.

Never edit a PDF, paste a stamp, rewrite a physician field, translate over the original, detach a sealed page or ask an agent to reconstruct the certificate. Document authenticity and traceability are central to special-examination controls. A recipient that needs clarification should request it from the issuer or competent center.

Separate employment fitness from administrative certificates

The foreign-employment provisions' general good-health condition and a work-permit health certificate do not create a universal job-fitness assessment. An employer should not infer that a certificate proves safe performance of every essential function or use it as a general invitation to collect diagnoses and unrelated medical history.

If law requires a specific assessment for a role, identify the exact legal basis, competent institution, decision criteria, job information and limited report. The Employment Promotion Law also constrains discrimination based merely on infectious-pathogen carrier status, subject to legally specified work restrictions and medical appraisal. Individual employment decisions need qualified legal and professional review.

Keep occupational health and prohibited screening separate

For workers exposed to occupational-disease hazards, the employer must commission and pay for the occupational-health examination, provide job and exposure information and use an appropriately filed medical institution. National health guidance expressly says an ordinary health check cannot replace that route. The foreigner administrative certificate cannot replace it either.

The joint national hepatitis B notice also limits schools and employers from requiring hepatitis B marker tests or reports or asking carrier status outside legally specified special occupations. A familiar form field or general desire to reduce risk is not a blanket authorization for testing or disclosure. Recipients should verify the current specific legal basis before adding health items.

Give applicants an explanation and escalation route

Tell the applicant which document is requested, who will receive it, where the official rule can be read, how to submit it securely, how long it is kept and whom to contact about correction, access or misuse. Distinguish the medical institution's report question from the recipient's acceptance question and direct each to the correct office.

If requirements conflict, pause unnecessary disclosure and ask the competent authority for a written answer. If an examination result raises a clinical concern, use a qualified clinician rather than HR, university staff or the application website. Urgent care must not wait for administrative clarification.