"generating a health certificate or pass in the form of a QR code that can be shown to authorities without revealing sensitive information."

Knowing whether or not you have had a vaccine is sensitive health information. As others have said, It's a HIPAA violation no matter how you slice it, because it confirms or denies specific information about your medical history.

On top of that, it would also fall into general discrimination laws. You could even apply it to disability discrimination law, since if they want to say they won't service you because your susceptible to the virus, one could say that is in effect, a disability. So them not servicing you would be akin to if a business refused to build ramps for wheelchair accessibility then not service you specifically because you're "disabled".

"generating a health certificate or pass in the form of a QR code that can be shown to authorities without revealing sensitive information."

Knowing whether or not you have had a vaccine is sensitive health information. As others have said, It's a HIPAA violation no matter how you slice it, because it confirms or denies specific information about your medical history.

On top of that, it would also fall into general discrimination laws. You could even apply it to disability discrimination law, since if they want to say they won't service you because your susceptible to the virus, one could say that is in effect, a disability. So them not servicing you would be akin to if a business refused to build ramps for wheelchair accessibility.

"generating a health certificate or pass in the form of a QR code that can be shown to authorities without revealing sensitive information."

Knowing whether or not you have had a vaccine is sensitive health information. As others have said, It's a HIPAA violation no matter how you slice it. On top of that, it would also fall into general discrimination laws. You could even apply it to disability law, since if they want to say they won't service you because your susceptible to the virus, one could say that is in effect, a disability. So them not servicing you would be akin to if a business refused to build ramps for wheelchair accessibility.