The U.S. Department for Health and Human Services published guidance to affirm the Health Information Privacy and Accountability Act Privacy Rule does not prohibit or regulate requests of information from individuals, covered entities and non-covered entities, including vaccination status. The guidance, "HIPAA, COVID-19 Vaccination, and the Workplace" states the HIPAA Privacy Rule only regulates how a covered entity may use or share an individual's protected health care data. Editor's note: IAPP Staff Writer Jennifer Bryant wrote about workplace vaccine mandates for the Privacy Advisor.
Full Story