◆The HHS Office for Civil Rights on Sept. 30 released guidance on “HIPAA, COVID-19 Vaccination, and the Workplace.”^[1] Among other things, the guidance explains that the HIPAA privacy rule doesn’t prohibit “a covered entity or business associate from requiring its workforce members to disclose to their employers or other parties whether the workforce members have received a COVID-19 vaccine.” The reason: “The Privacy Rule does not apply to employment records, including employment records held by covered entities and business associates acting in their capacity as employers.”