HIPPA is not that difficult actually, It was put in place to protect patients from having their medical information exposed by health care workers to people that have no need for that information. You, as the individual, have the ability to release that information to whomever you wish - or not to. The people requesting said information (employer, school, the stupid Karen at Walmart that sees you without a mask and thinks it's her right to ask your vax status. etc.) do not have a right to that information but they do have the ability to choose not to associate with you based on that information or on your refusal to provide it. If you don't like their refusal of service/association, you can try to sue them for damages if that can be proven and they will not allow an accommodation. However, the various C-19 "vaccines" cannot be forced on anyone as a condition of employment because they are under the rules of Emergency Use Authorization and there are legal protections outlined for those that suffer damages as a result of not getting the C-19 vaccine and I could assume the same applies to not divulging whether you've taken the C-19 vax or not as well.