In general, the HIPAA Rules do not apply to employers or employment records. HIPAA only applies to HIPAA covered entities – health care providers, health plans, and health care clearinghouses – and, to some extent, to their business associates. If an employer asks an employee to provide proof that they have been vaccinated, that is not a HIPAA violation, and employees may decide whether to provide that information to their employer.
In order to provide accurate information for the national COVID-19 response, you may receive a call from the US Department of Health and Human Services (HHS) Data Outreach Team’s Call Center. If you are unsure about the identity of the caller, or would like to validate the accuracy of the call, you are free to hang up and call us back at 833-908-1527. You may also send an email to Protect-ServiceDesk@hhs.gov to receive a confirmation email.