Ever since the CDC amended its COVID-19 guidance to say that the fully vaccinated no longer need to wear masks indoors, I've read myriad variations of this tweet:
Friendly reminder that under HIPPA, your vaccination status is private.
Or this tweet:
The rule is simple, HIPAA protects EVERY American from disclosing ANY of their health records to ANYONE.Their point? That medical privacy laws protect their vaccination status, and it's illegal for any business to ask as a condition of anything.






