Proof of COVID–19 vaccination shall not be deemed a requirement for access to Federal property or Federal services, or for access to congressional grounds or services. (f) Exceptions (1) Deidentified or anonymized information for certain purposes The prohibition described in subsection (a) shall not apply to the aggregation and sharing of information that has been deidentified or anonymized if such information is used for purposes of Federal, State, or local public health reporting or academic studies, provided that the recipient of such information does not have the capability to reconstruct the data in any way that would allow for the determination of the vaccination status of any individual. (2) Limited use of information with respect to Federal employees The prohibition described in subsection (a) and the requirement described in subsection (b) shall not apply to the possession by a Federal department or agency of COVID–19 vaccination data or records pertaining to any employee of such department or agency where such data or records will be used solely to determine if such employee would be eligible to gain admission to a foreign country during international travel in furtherance of the employee’s official duties. 102. Vaccine status protections under HIPAA privacy regulations (a) In general The Secretary of Health and Human Services shall amend the regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note) to establish the following: (1) Reporting by covered entities to public health entities of non-anonymized protected health information related to an individual’s vaccination status is not permissible, even during public health emergencies, without express patient consent. (2) Any United States person that requests the vaccine records of a United States individual shall be deemed to be a covered entity for purposes of such request. (3) With respect to any individual who shares their vaccine status with any covered entity, the