Have you received workplace training about the General Data Protection Regulations (GDPR) and your responsibilities about both personal and sensitive data ? Information about an employee’s health, particularly mental health, is sensitive data.
If you have not completed GDPR training, then you must talk to your union to support you when your contact HR as you may have inadvertently breached the GDPR, and you have approached a colleague on sick leave inappropriately. Both HR & the individual’s line managers follow guidelines (e.g. ACAS) and best practice to minimise distress to the person, invasion of their privacy and potential future liabilities.
If you have completed the GDPR training, then you are deemed to know that you have breached the guidelines.
In both cases, contact your union rep/helpline to help you approach HR. If you are not a member of a union, then contact the ACAS helpline for advice before you approach HR. You need to know where you stand before you speak with HR so you can be clear cut about what you were told (verbal gossip rather than direct access of the employee’s record) and what you actually did e.g. well meant personal message.
Both your union helpline will be available for you to ring tomorrow, whereas your union rep may not be free to speak. ACAS helpline will be open for you to ring tomorrow. Then speak with HR as soon as possible.
If your colleague has been upset or disgruntled by your well meaning message and this is fed back to HR, this matter could get serious very quickly as the GDPR is involved.
So, I spell this out NOT TO SCARE you but to get you to take sensible action to protect your best interests as worrying it/sticking your head in the sand is not going to help you or make it go away.
Also, no more messaging colleagues about this. You are digging a hole for yourself with a nice audit trail. Desist.