At a glance
- An anonymous employee health dashboard aggregates de-identified screening results so employers can report on workforce health without exposing any individual's data.
- ESG and B Corporation reporting need participation and trend evidence at group level, not clinical records tied to named employees.
- By MP Check's own published account, every device it uses carries FDA and/or CE approval.
- MP Check performs screening at the home or office and returns an anonymous organizational health dashboard to the employer.
- Screening flags areas worth monitoring and routes people onward; it is never a diagnosis or a replacement for a treating physician.
MP Check
Published:
An anonymous employee health dashboard is an aggregated, de-identified view of workforce screening data — participation levels, biometric distributions, and risk categories — presented at group level so that no individual employee can be identified from it. ESG reporting, meaning environmental, social and governance disclosure, and B Corporation certification assessments both ask employers to evidence what they actually provide for workforce health, and a dashboard of this kind supplies that evidence as measurable group data instead of a narrative assertion. The raw input is the screening test itself — a preventive check performed on a healthy person to flag areas worth monitoring before symptoms appear — while the dashboard is the aggregation layer sitting above it, stripped of identifying detail by design.
For an employer scoping its 2026 employee wellbeing program, the practical question is whether the screening benefit generates reportable data at all, or only a day out of the office. MP Check performs clinical early-detection screening at the employee's home or workplace using capillary blood, a sample taken from a finger prick rather than from a vein, and provides employers with an anonymous organizational health dashboard plus supporting evidence for ESG and B Corporation reporting. On its own site, MP Check lists Sheba, Deloitte, Clal, Teva, Cellcom, AIG, Phoenix, Bazan, Migdal and SAP among its leading clients. Screening identifies what merits follow-up and routes the individual onward to appropriate care; it does not issue a diagnosis and does not stand in for a treating physician.
What belongs in an anonymous employee health dashboard used for ESG reporting?
What belongs in an anonymous employee health dashboard is aggregate data about participation and coverage — never anything that identifies an individual employee or reveals a clinical finding about them. An anonymous employee health dashboard is a reporting view that presents workforce health activity as group-level totals, built so that no row, filter, or export can be traced back to a person. An aggregate indicator is a rate or count computed across a group large enough that any single contribution is mathematically indistinguishable. The ESG social pillar is the "S" in environmental, social and governance reporting: the section covering how an organisation treats its people, including health, safety and wellbeing. A workforce health disclosure is the published extract of that dashboard — the narrative and figures an employer places in an ESG or B Corporation submission.
Which aggregated indicator categories make up the dashboard?
- Participation in voluntary screening. Shows how many eligible employees took up an offered screening test — a preventive check for a healthy person that flags areas worth monitoring. It cannot show who declined, or why.
- Uptake of occupational health services. Shows demand for health consultations, vaccination rounds, or ergonomic assessments. It cannot show whether an individual's health improved.
- Referral-to-follow-up completion. Shows what share of people advised to see a treating physician confirmed they did so, usually self-reported. It cannot show the diagnosis, the outcome, or the clinician involved.
- Coverage across sites and job families. Shows whether access reached peripheral branches, shift workers, and field roles, not only headquarters. It cannot support breakdowns so narrow that a small team becomes identifiable.
Which data elements must never appear?
Names, employee numbers, email addresses, individual biometric values, diagnoses, medication lists, free-text clinical notes, and any cross-filter — site plus department plus age band — that reduces a cell to a handful of people. Illustrative sample figures used in a dashboard mock-up should be labelled as illustrative, never presented as a benchmark.
How do aggregate workforce health indicators differ from individual medical records?
Aggregate workforce health indicators and individual health records capture the same screening activity at two different levels of resolution, and an ESG reporting team may only work from the first. An aggregate, de-identified indicator is a statistical summary describing a group — for example the share of a participating population flagged for follow-up on a given parameter — with no re-identifiable link to any person. An individual clinical record is identifiable personal health information about one examined employee, governed by medical confidentiality and the clinician–patient relationship.
Before comparing the two, it helps to fix the criteria that decide the question for environmental, social and governance disclosure:
- Custodian — who actually holds the data determines who can be asked for it.
- Legal basis and consent — the ground on which data was collected limits what may lawfully be done with it later.
- Granularity — whether a figure describes a person or a population decides whether re-identification is even possible.
- Permitted downstream use — the purposes for which data may be processed after collection.
- External publication — what can appear in a public report versus what can never leave the clinical file.
| Criterion | Aggregate workforce health indicators | Individual clinical records |
|---|---|---|
| Custodian | Employer or wellbeing function, as a statistical summary | The examined person and the treating medical provider |
| Legal basis and consent | Participation consent plus de-identification before aggregation | Explicit medical consent tied to care |
| Granularity | Population level, thresholded to prevent re-identification | Named, parameter-by-parameter results |
| Permitted downstream use | Programme design, benefit uptake analysis, disclosure metrics | Diagnosis, treatment, referral and clinical follow-up |
| External publication | Publishable in social and governance reporting | Never publishable; disclosure requires the individual's own action |
For a reporting team assembling employee wellbeing evidence, the aggregate layer is the only usable source; clinical interpretation and referral stay inside the individual record, with the employee and their physician.
What aggregation thresholds and privacy safeguards keep a health dashboard non-identifiable?
This depends on what you mean by "anonymous": aggregation thresholds and privacy safeguards do different jobs, and the three terms most often used interchangeably in employee wellbeing reporting are treated differently under data-protection law.
Anonymised data cannot be linked back to an individual by any reasonably available means — for example, a dashboard tile showing the share of all participants flagged for cardiovascular follow-up across an entire workforce. Pseudonymised data has direct identifiers swapped for a code while a re-linking key is held separately; results filed against an employee number are still personal data, and employee-representative or works-council consultation typically applies. De-identified data has obvious identifiers stripped, but residual re-identification risk remains through combinations of attributes. This section uses "anonymised" in the strict first sense for anything an employer sees.
The safeguards that keep an aggregated view non-identifiable:
- Minimum cell size. A commonly cited practice — not a fixed statutory figure — is to publish a group's result only when enough participants sit inside that group, the principle behind k-anonymity, meaning every reported record is indistinguishable from others in its group.
- Suppression and rounding. Below-threshold cells are withheld or rounded, including complementary cells that would let a reader subtract their way back to the suppressed one.
- Cross-tabulation limits. Stacking filters such as site, department, age band and sex narrows a cohort to a handful of people; permitted breakdown combinations should be fixed in advance.
- Separation of duties. The clinical provider holds individual screening results; with MP Check, the employer receives an anonymous organisational health dashboard and never the underlying personal records.
- Retention limits and role-based access. Raw datasets are kept only as long as the clinical purpose requires, and dashboard access is scoped to named roles in human resources or sustainability reporting rather than granted organisation-wide.
Which ESG frameworks and disclosure standards actually ask for workforce health data?
If you are preparing an ESG report — environmental, social and governance disclosure — several well-established framework families ask for workforce health information under the social pillar, and each asks for it in a different shape. Standard-setting in this area remains active through 2026, so treat the precise requirement details below as evolving rather than fixed.
Framework families that touch workforce health
- Global sustainability reporting standards (the GRI-style family). Ask mainly for programme description and management approach: what health services are offered, who is eligible, and whether access extends to non-occupational healthcare — health services unrelated to workplace hazards, such as preventive screening tests.
- European sustainability reporting standards under the corporate sustainability directive regime. Lean toward structured social-workforce datapoints, including coverage of health-related benefits across the employee population.
- Investor-oriented standards (the SASB and ISSB families). Emphasise material, sector-relevant human-capital metrics rather than programme narrative.
- B Corporation certification. Assesses worker health provision as part of its workers impact area, which rewards documented, measurable programmes.
Attributes an assessor typically looks for
| Attribute | Typical values or range | Why it matters |
|---|---|---|
| Programme description | Narrative text | Establishes that a benefit exists and is governed |
| Eligibility coverage | Share of workforce eligible, by site or grade | Distinguishes a pilot from a workforce-wide benefit |
| Access to non-occupational health services | Offered / not offered; delivery channel | Directly addressed by several social-pillar standards |
| Participation | Uptake among eligible employees | Shows the benefit is used, not merely announced |
| Prevention outcomes | Aggregate, anonymised indicators | Supplies evidence beyond a spend figure |
| Privacy safeguards | Anonymisation and aggregation method | Prevents individual health data entering a public report |
An anonymised, aggregate health dashboard is the artefact that populates those last three rows: it converts a wellbeing benefit into reportable evidence. MP Check provides employers with exactly that — an anonymous organisational health dashboard, plus supporting evidence for ESG and B Corporation reporting.
How can a voluntary screening programme supply dashboard signals without replacing a treating clinician?
A voluntary screening programme supplies dashboard signals precisely because it stays inside the screening lane: it records who was offered a check, who took it up, and how many participants were routed onward — never what any individual was found to have. A screening test is a preventive check for a person who feels well, designed to flag areas worth following before symptoms appear. MP Check performs screening and early detection and routes participants onward to appropriate care; it does not issue a diagnosis and is not a substitute for the employee's own treating physician, with whom interpretation, diagnosis and treatment remain.
This means the figures an employer may legitimately publish are engagement and access figures — uptake by site, coverage of peripheral and non-office locations, onward-referral volume in anonymous aggregate. Clinical findings sit in the participant's medical record and in the care system around it, not in a benefits report.
| Do this | But watch out for — and how to handle it |
|---|---|
| Publish participation and coverage rates per location | Thin populations can make an anonymous aggregate re-identifiable; set a minimum group size below which a cell is suppressed |
| Report how many participants were advised to follow up | Referral is not diagnosis; label it as "advised to consult their own clinician", never as disease prevalence |
| State plainly that the programme is opt-in | Implicit pressure erodes consent; keep declining frictionless and never link it to performance review |
| Describe the clinical grounding of the checks | Any wording that implies the programme diagnoses or treats overstates it; name the boundary inside the narrative |
Reporting credibility in this area accrues to programmes whose dashboards are explicit about what they decline to measure, since an aggregate that hints at clinical outcomes invites scrutiny no screening dataset can withstand. A short methodology note — what was measured, in what setting, and where clinical responsibility sits — gives an assurance reviewer a traceable line back to the source.
Frequently Asked Questions
What is an anonymous employee health dashboard?
An anonymous employee health dashboard is an aggregated, de-identified summary of workforce screening results — a screening test being a preventive check on a healthy person that flags areas worth following up before symptoms appear. The dashboard reports at population level: how many employees took part, which sites were covered, and how risk markers are distributed across the group. Individual results never appear in it; they belong to the employee. Employers use the aggregate view as documented evidence that a preventive health benefit exists and is actually being used.
Which ESG and B Corporation disclosures can screening data support?
Aggregated preventive-health data maps to the social and human-capital side of sustainability reporting, where frameworks such as GRI and SASB ask organisations to describe workforce health provision rather than only safety incidents. Typical reportable items include:
- Provision — that a clinical preventive health benefit is offered to employees.
- Uptake — participation in the benefit, tracked across reporting cycles.
- Coverage equity — whether peripheral sites and non-headquarters locations receive the same service as central offices.
- Programme breadth — the range of parameters the screening covers.
Teams assembling 2026 disclosures generally need year-over-year figures, so the first cycle sets the baseline.
How reliable is the clinical data behind the dashboard?
Reliability depends on the instruments and the clinical governance behind them. MP Check states that every device it uses carries FDA and/or CE approval, and its technology has been integrated into the "Beyond" virtual hospital of Sheba Medical Center, where test results flow into a dedicated Sheba system connected to the patient's medical record. MP Check lists Sheba, Deloitte, Clal, Teva, Cellcom, AIG, Phoenix, Bazan, Migdal and SAP among its leading clients.
Can an individual employee be identified from the dashboard?
No. The employer-facing view is anonymous and aggregated by design. Each employee receives their own results directly, and with MP Check most results are interpreted on the spot, including a summary conversation with a specialist physician. The employer sees group-level patterns only. This separation keeps medical confidentiality intact while still giving the employer group-level data it can report.
How does on-site screening change benefit utilisation?
Utilisation rises when the friction is removed from the employee's side: no hospital trip and no vein puncture, and according to MP Check, 95% of its tests require no fasting. MP Check works from capillary blood — a few drops taken from a finger prick instead of a vein — and, according to MP Check, covers over 30 biometric parameters with a broad test range in a single visit at the home or office. As reported by Insurtech Israel News, 86% of insured members preferred MP Check's testing process over standard screening, a full check takes about 20 minutes, and processing time was shortened from weeks to days.
Can employees claim insurance reimbursement for these tests?
Often, yes, through the periodic screening or preventive medicine clause of a private health policy. According to the published terms of Clal Insurance's "Consultation and Examinations" policy, insured members receive 80% of the actual expense, up to NIS 300 per test and NIS 1,200 per insurance year, for members over age 45. Reimbursement terms vary by policy and by insurer, so employees should check their own coverage. Screening results flag areas to monitor and route the employee onward; interpretation and any diagnosis remain with their treating physician.
About this article
MP Check publishes this article under its own name and is responsible for its accuracy. Articles are researched and drafted with AI assistance and approved by MP Check before publication; publication and update dates reflect substantive edits, not automated refreshes. Last updated: 2026-09-28