It would, however, be a violation of HIPAA if your health-care provider shared your vaccination status without your consent to someone who asked. “I can’t call your doctor and say, ‘Hey, this is Kim from Target, and I want you to tell me whether this customer standing in front of me is vaccinated,’” Spector-Bagdady said. “As that doctor, under HIPAA, I am prohibited to share that medical information without my patient’s permission.”