USA Today | May 19, 2021
Georgetown University law professor Lawrence Gostin agreed, saying, “Non-health care businesses are not subject to HIPAA.”
While businesses and individuals maintain the right to ask others for vaccination status, that does not mean anyone has to provide that information.
According to Gostin, when a business asks an employee or customer for their vaccination status, that “individual then has a choice whether to provide proof of vaccination. If the person does not, then he or she can be excluded from entering the premises.”