@daviscollin @danwiederer has it?  hipaa privacy rules prohibit the release of protected health information, known as phi, by others without your consent and they have nothing to do with whether you (the individual) can or should answer questions about your vaccination status, or any other health issue.