Federal, state, and local vaccination mandates to demonstrate that workers are fully vaccinated or testing weekly represent a new, complex, and extremely short-notice compliance regime. With this PHI on workers being shared and stored—not to mention retrieved in reports—organizations can face expensive noncompliance HIPAA and PIPEDA fines and expose their workers to a risk of a leak of protected information.

While the federal mandate requiring businesses with over 100 employees in the U.S. to demonstrate that their workers are fully vaccinated or are testing weekly is currently paused, a growing number of businesses, states, and local governments are instituting various forms of vaccine mandates. Plus, even though the federal mandate is paused now, some form of it may still go into effect.