@roncoleman the question is this:


































is it a hipaa violation if your company collects your personal health information (vaccination status) and then shares it external to the company (say, to the government or a government contractor)?