HIPAA Privacy Rule Guidance Issued Regarding COVID-19 Vaccines

Hodgson Russ LLP

A list of frequently asked questions (FAQs) recently published by the Department of Health and Human Services addresses the application of HIPAA’s privacy rule to workplace COVID-19 disclosures.  HIPAA’s privacy rule generally prohibits a covered entity (i.e., health plans, health care clearinghouses, and health care providers) or business associate from disclosing protected health information without proper authorization.  Although a healthcare provider is generally prohibited from disclosing an individual’s vaccination status to an employer without proper authorization, the FAQs identify a number of situations where HIPAA’s privacy rule does not prohibit disclosure about an individual’s COVID-19 vaccination status.  For example, HIPAA’s privacy rule does not prohibit:

  • A business from asking customers if they have been vaccinated.
  • An employer from requiring its employees to disclose if they have been vaccinated.
  • An individual asking a company whether its workforce has been vaccinated.
  • An individual from disclosing their vaccination status to an employer or business.

HIPAA is often cited as a reason why health information such as an individual’s COVID-19 vaccination status may not be shared.  However, as illustrated in these FAQs, HIPAA’s privacy rules are generally limited to certain types of disclosures by certain types of entities.  (FAQs HIPAA, COVID-19 Vaccination, and the Workplace (September 30, 2012)

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Hodgson Russ LLP | Attorney Advertising

Written by:

Hodgson Russ LLP

Hodgson Russ LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.