The Times Australia
The Times World News

.

Vaccination status – when your medical information is private and when it's not

  • Written by Megan Prictor, Senior Research Fellow in Law, The University of Melbourne
Vaccination status – when your medical information is private and when it's not

In the US, some National Basketball Association (NBA) players have recently asserted their right to privacy[1] over their COVID vaccination status. In Australia, discussion of vaccine passports has also highlighted this issue.

We value the idea that our medical information is private and subject to special protection and that our doctor can’t freely share it with others. Yet suddenly, it seems we might be asked to hand over information[2] about our vaccination status in many different situations.

It might be so we can keep doing our job, go into shops and restaurants or travel. It might make us uneasy. But can we refuse to tell others our vaccination status on privacy grounds? What does the law in Australia say about who can ask for it, and why, and what they can do with it?

Read more: 'Are you double dosed?' How to ask friends and family if they're vaccinated, and how to handle it if they say no[3]

What we already disclose

Vaccinations and medical exemptions are recorded on the Australian Immunisation Register[4] operated by the federal government.

Information from the register is used to create immunisation history statements and COVID digital certificates. This information can then flow through to check-in apps to let us prove our vaccination status when we are asked to.

It’s understandable to think our health information should be secret – kept between us and our doctor. But the law – principally the Australian Privacy Act and health records laws in many states – allows it to be collected by other people if certain conditions are met. And it’s not only the doctor’s clinic and other health services where this information is allowed to move around.

For instance the No Jab, No Play[5] legislation in Victoria, designed to increase immunisation rates in young children, means proof of their vaccination status must be given in order for the child to access kindergarten.

Adults have to disclose information about medical conditions and disabilities to organisations like VicRoads in order to obtain a driver licence[6]. We might even disclose a health condition to our employer[7] so “reasonable adjustments” can be made to help us keep working.

So there are many examples of disclosing health information well beyond the doctor’s clinic walls, and all of them are provided for by law.

Protest against vaccine passports
Protesters marched for ‘Peace, Freedom and Human Rights’ in Brisbane in August. AAP Image/Dave Hunt[8]

Read more: Health workers are among the COVID vaccine hesitant. Here's how we can support them safely[9]

Sensitive information

Our vaccination status is classified as “health information[10]” under Australia’s privacy laws.

Health information falls into a larger category of “sensitive information[11]” – information that requires the most careful handling. The Australian Privacy Principles (APPs) in our Privacy Act[12] set out the rules for how this information can be collected, used and disclosed.

The APPs say a business or employer (an APP entity[13]) can only collect sensitive information like our vaccination status under certain conditions. An example[14] is if the information is reasonably necessary for the business’s activities and we give our consent.

For this consent to be valid it must be given freely. People can’t be threatened or intimidated into disclosing their vaccination status.

Employers can mandate vaccination[15] – as some businesses are doing – if it is “lawful and reasonable”. In this situation, an employee refusing to disclose their vaccination status would likely be in breach of a lawful and reasonable direction by their employer. Any consequences[16] would be covered by the terms of their employment contract.

woman leaves vaccination centre People can keep their vaccination status private, but there will be consequences in certain settings. AAP Image/Bianca De Marchi[17]

Read more: The 9 psychological barriers that lead to COVID-19 vaccine hesitancy and refusal[18]

Public health and consequences

The collection of our vaccination status might also be allowed[19] by other Australian laws, such as public health orders and directions. The mandatory collection of vaccination status in the aged-care sector[20] is a good example.

Where proof of vaccination becomes a requirement of entering a premises or working in a particular job, we can choose to keep that information private, but not without consequences. Our privacy is not protected absolutely – the trade-off might be that we are denied entry or refused employment.

Information about a person’s vaccination status can only be collected by “lawful and fair” means[21] such as asking them directly, but not collecting it by deception or without them knowing.

Separate rules say what can then be done with the information. Generally, it can’t be used for a different purpose than it was collected for, or shared with other people or organisations, unless an exception applies.

Although private sector employers’ handling of employee records is exempt[22] from the Australian Privacy Principles, they should still store this information securely and make sure it is not used and disclosed unnecessarily.

covid vaccination proof on mobile phone Many Australians will soon be asked to show proof of vaccination to enter venues or workplaces. Shutterstock[23]

Read more: If privacy is increasing for My Health Record data, it should apply to all medical records[24]

But isn’t privacy a human right?

Privacy is recognised as a fundamental human right in the Universal Declaration of Human Rights[25] and other international human rights documents.

Australia is a signatory to the International Covenant on Civil and Political Rights[26], which states: “no-one shall be subjected to arbitrary or unlawful interference with his privacy” (Article 17.1).

But this right is not absolute and it can be limited by national measures “in time of public emergency” (Article 4.1). On the flip side, any requirement to disclose vaccination status is shaped by human rights principles[27] so that the requirement must be reasonable, proportionate and necessary.

It must also take into account the risk of discrimination. Our Human Rights Commission has outlined[28] how certain people might be at particular risk of discrimination related to sharing their vaccine status. They might have difficulty using technology or not have access to it. So, even those who have been vaccinated might find it difficult to provide proof.

The World Health Organisation[29] says people who don’t disclose their vaccination status shouldn’t be denied participation in public life.

Although health information is protected under Australian law, the law also allows this information to be collected, used and shared when reasonably necessary.

Privacy is not absolute. The COVID emergency limits some privacy protections in favour of public health goals. We need to be alert to the trade-offs and potential discrimination – particularly when access to jobs and services depends on the disclosure of vaccine status.

References

  1. ^ right to privacy (www.skysports.com)
  2. ^ hand over information (theconversation.com)
  3. ^ 'Are you double dosed?' How to ask friends and family if they're vaccinated, and how to handle it if they say no (theconversation.com)
  4. ^ Australian Immunisation Register (www.servicesaustralia.gov.au)
  5. ^ No Jab, No Play (www2.health.vic.gov.au)
  6. ^ obtain a driver licence (www.vicroads.vic.gov.au)
  7. ^ disclose a health condition to our employer (www.healthdirect.gov.au)
  8. ^ AAP Image/Dave Hunt (photos-cdn.aap.com.au)
  9. ^ Health workers are among the COVID vaccine hesitant. Here's how we can support them safely (theconversation.com)
  10. ^ health information (www.oaic.gov.au)
  11. ^ sensitive information (www.oaic.gov.au)
  12. ^ Privacy Act (www.legislation.gov.au)
  13. ^ APP entity (www.oaic.gov.au)
  14. ^ example (www.oaic.gov.au)
  15. ^ Employers can mandate vaccination (coronavirus.fairwork.gov.au)
  16. ^ consequences (coronavirus.fairwork.gov.au)
  17. ^ AAP Image/Bianca De Marchi (photos-cdn.aap.com.au)
  18. ^ The 9 psychological barriers that lead to COVID-19 vaccine hesitancy and refusal (theconversation.com)
  19. ^ allowed (www.oaic.gov.au)
  20. ^ aged-care sector (www.health.gov.au)
  21. ^ means (www.oaic.gov.au)
  22. ^ is exempt (www.oaic.gov.au)
  23. ^ Shutterstock (image.shutterstock.com)
  24. ^ If privacy is increasing for My Health Record data, it should apply to all medical records (theconversation.com)
  25. ^ Universal Declaration of Human Rights (www.un.org)
  26. ^ International Covenant on Civil and Political Rights (www.ohchr.org)
  27. ^ human rights principles (humanrights.gov.au)
  28. ^ outlined (humanrights.gov.au)
  29. ^ World Health Organisation (www.who.int)

Read more https://theconversation.com/vaccination-status-when-your-medical-information-is-private-and-when-its-not-168846

Times Magazine

Headless CMS in Digital Twins and 3D Product Experiences

Image by freepik As the metaverse becomes more advanced and accessible, it's clear that multiple sectors will use digital twins and 3D product experiences to visualize, connect, and streamline efforts better. A digital twin is a virtual replica of ...

The Decline of Hyper-Casual: How Mid-Core Mobile Games Took Over in 2025

In recent years, the mobile gaming landscape has undergone a significant transformation, with mid-core mobile games emerging as the dominant force in app stores by 2025. This shift is underpinned by changing user habits and evolving monetization tr...

Understanding ITIL 4 and PRINCE2 Project Management Synergy

Key Highlights ITIL 4 focuses on IT service management, emphasising continual improvement and value creation through modern digital transformation approaches. PRINCE2 project management supports systematic planning and execution of projects wit...

What AI Adoption Means for the Future of Workplace Risk Management

Image by freepik As industrial operations become more complex and fast-paced, the risks faced by workers and employers alike continue to grow. Traditional safety models—reliant on manual oversight, reactive investigations, and standardised checklist...

From Beach Bops to Alpine Anthems: Your Sonos Survival Guide for a Long Weekend Escape

Alright, fellow adventurers and relaxation enthusiasts! So, you've packed your bags, charged your devices, and mentally prepared for that glorious King's Birthday long weekend. But hold on, are you really ready? Because a true long weekend warrior kn...

Effective Commercial Pest Control Solutions for a Safer Workplace

Keeping a workplace clean, safe, and free from pests is essential for maintaining productivity, protecting employee health, and upholding a company's reputation. Pests pose health risks, can cause structural damage, and can lead to serious legal an...

The Times Features

Exploring the Curriculum at a Modern Junior School in Melbourne

Key Highlights The curriculum at junior schools emphasises whole-person development, catering to children’s physical, emotional, and intellectual needs. It ensures early year...

Distressed by all the bad news? Here’s how to stay informed but still look after yourself

If you’re feeling like the news is particularly bad at the moment, you’re not alone. But many of us can’t look away – and don’t want to. Engaging with news can help us make ...

The Role of Your GP in Creating a Chronic Disease Management Plan That Works

Living with a long-term condition, whether that is diabetes, asthma, arthritis or heart disease, means making hundreds of small decisions every day. You plan your diet against m...

Troubleshooting Flickering Lights: A Comprehensive Guide for Homeowners

Image by rawpixel.com on Freepik Effectively addressing flickering lights in your home is more than just a matter of convenience; it's a pivotal aspect of both home safety and en...

My shins hurt after running. Could it be shin splints?

If you’ve started running for the first time, started again after a break, or your workout is more intense, you might have felt it. A dull, nagging ache down your shins after...

Metal Roof Replacement Cost Per Square Metre in 2025: A Comprehensive Guide for Australian Homeowners

In recent years, the trend of installing metal roofs has surged across Australia. With their reputation for being both robust and visually appealing, it's easy to understand thei...