Final answer:
Employee medical records should be available to authorized personnel and regulatory agencies. This ensures the privacy of employees' medical information while complying with legal requirements.
Step-by-step explanation:
Employee medical records should be available to authorized personnel and regulatory agencies. This ensures that the privacy of employees' medical information is respected while also allowing organizations to comply with legal requirements and provide necessary support to their employees. Direct supervisors, HR departments, and even CEOs may have access to these records on a need-to-know basis, but the primary responsibility lies with authorized personnel and regulatory agencies.