WASHINGTON - The U.S. Department of Health and Human Services' Office for Civil Rights (OCR) said on Thursday that the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule does not apply to employers or employment records.
That means companies are not infringing upon their employees’ legal privacy by asking them to reveal their COVID-19 vaccination status.
The OCR guidance aims to help "common workplace scenarios and answers questions about whether and how the HIPAA Privacy Rule applies.