Impact of the HIPAA Privacy Rule on COVID-19 Vaccine Inquiries

From OMA Connections Partner One Source Advisors: On Sept. 30, 2021, the Department of Health and Human Services issued an FAQ on the application of the Health Insurance Privacy and Accountability Act (HIPAA) Privacy Rule on COVID-19 vaccination and the workplace.

The FAQ provides that the HIPAA Privacy Rule does not prohibit any person (or an entity, such as a business) from asking whether an individual has received a COVID-19 vaccine. Rather, the Privacy Rule regulates how and when a covered entity or its business associate may use or disclose protected health information, including information about an individual’s vaccination status. 11/1/2021