As local government organizations begin to lift lockdowns and other restrictive measures, businesses are finalizing plans to reopen workspaces. For many leaders, this means collecting, processing, and storing large amounts of employee medical information to help them make better decisions, while at the same time, privacy and ethical risks connected to these practices are exploding. In this report, we highlight the most relevant privacy and ethical risks to help security, risk, and privacy professionals create a privacy-by-design approach for their return-to-work strategy.