related_tweet: @drpatesblog @cdhidaho i've been wondering something quite a bit-is demanding people's vaccination status a violation of hipaa privacy? a school sent me a cdh school letter stating "schools should have a protocol in place to verify vaccination status." doesn't seem private/legal?