related_tweet: @mcvulvasteen @laceltris @rich_137 @politicalmath it is self disclosure. "businesses" asking you for your vaccination status, they're not asking a covered entity. if no covered entity is involved, then hipaa can't be violated. hhs ocr, the people who wrote the law, and enforce it have said this is not a violation.