Do I Have to Disclose My Vaccination Status to My Employer?

Under federal law, in most cases you do have to disclose your vaccination status to your employer if they ask. The Equal Employment Opportunity Commission has said that asking employees whether they are vaccinated, or asking for proof, is not a prohibited medical inquiry under the Americans with Disabilities Act.¹ What the law does give you is a set of protections around the question: limits on follow-up, exemption rights if a disability or sincere religious belief is in the way, confidentiality of your answer, and recourse if any of that is violated.

Can Your Employer Legally Ask

Yes. Employers have a duty under the Occupational Safety and Health Act to keep the workplace safe, and the EEOC treats a simple question about vaccination status as part of that duty rather than as a medical exam.¹

There is a limit. Your employer should not press you on why you haven’t been vaccinated. That kind of follow-up can force you to reveal a disability, a medical condition, or a religious belief, which pulls the conversation into ADA and Title VII territory. The permissible question is binary: vaccinated or not.

One common misunderstanding: HIPAA does not shield you here. The HIPAA Privacy Rule applies to healthcare providers, health plans, and clearinghouses, not to an employer asking its own workforce. The Department of Health and Human Services has stated directly that HIPAA does not apply when an employer asks an employee about vaccination status.² Your privacy protections come from the ADA.

When You Can Decline on Medical or Religious Grounds

Federal law recognizes two main reasons for opting out of a workplace vaccination requirement: a disability or medical condition covered by the ADA, and a sincerely held religious belief covered by Title VII of the Civil Rights Act. In either case, requesting an exemption triggers a duty on your employer to engage in a good-faith interactive process before it can penalize you.

Medical Exemptions Under the ADA

If a medical condition prevents you from being vaccinated, the ADA requires your employer to provide a reasonable accommodation unless doing so would create an undue hardship or you would pose a “direct threat” to workplace safety that no accommodation can resolve. A direct threat has to be a significant risk of substantial harm, not a theoretical one, and it has to be assessed individually based on current medical knowledge, your specific work environment, how much contact you have with others, and how serious the potential risk actually is.¹

Typical accommodations include masking on site, periodic testing, distancing, modified schedules, telework, or reassignment to a lower-risk position. Your employer doesn’t have to grant the specific accommodation you asked for. It only has to offer one that effectively addresses the safety concern. If you request full-time telework and your employer offers masking plus weekly testing instead, that can satisfy the obligation.¹

Religious Exemptions Under Title VII

Title VII requires employers to accommodate employees whose sincerely held religious beliefs prevent them from being vaccinated. The standard for turning down a religious accommodation was reset by the Supreme Court in Groff v. DeJoy in 2023, which held that an employer must show that granting the accommodation would result in “substantial increased costs in relation to the conduct of its particular business.”³ That replaced a much older reading that let employers deny accommodations over almost any cost. Your employer now has to point to a real, concrete burden before denying a religious request.

Pregnancy

If pregnancy is the reason you can’t be vaccinated, Title VII requires that you not be treated worse than other employees who are similarly limited in their ability to work. If your employer offers job modifications like schedule changes, telework, or reassignment to other employees with medical limitations, you should have access to the same options.⁴ The Pregnant Workers Fairness Act, effective June 2023, adds an independent requirement that employers provide reasonable accommodations for known limitations related to pregnancy, childbirth, or related conditions.

How Your Answer Has to Be Handled

Whatever you disclose is treated as a confidential medical record under the ADA. It cannot sit in your regular personnel file. Your employer has to store it separately, and access has to be limited to people who need the information to do their jobs, such as an HR administrator managing safety protocols or a supervisor deciding which workplace precautions apply to a team.1 If your employer publishes vaccination information broadly, stores it in a general HR file, or shares it with coworkers who have no need to know, that’s a confidentiality violation you can act on.

What Happens If You Refuse to Disclose

If your employer has a consistently applied disclosure policy and you refuse to answer without a legitimate exemption, the refusal can be treated as a failure to follow company rules. Consequences typically escalate. Your employer may first treat you as unvaccinated for safety purposes and require you to mask or test. If you refuse those measures too, or if vaccination itself is a condition of employment, refusal can lead to suspension or termination. Employers have wide discretion here, provided they apply the policy uniformly and honor legitimate accommodation requests.

Being fired for refusing to disclose doesn’t automatically disqualify you from unemployment benefits, but the answer depends heavily on your state. Most state agencies review these claims individually and look at whether the refusal counts as “misconduct.” Some states treat it as misconduct if the employer offered reasonable alternatives and you refused. Others treat employees hired before a vaccine mandate took effect more favorably. Some states will find you eligible if the employer imposed a mandate with no exemptions or alternatives at all. Filing a claim and letting the state agency evaluate the specifics is usually worth doing.

If You Work Fully Remotely

Remote work weakens the safety justification for requiring disclosure, but does not automatically eliminate it. The now-withdrawn OSHA Emergency Temporary Standard specifically exempted employees who did not report to a workplace where other people were present and employees working from home.⁵ The EEOC’s broader guidance, by contrast, does not carve out remote workers and says employers can require “all employees” to be vaccinated, subject to reasonable accommodation.¹ If you never share a physical space with coworkers, you have a strong argument that the workplace-safety rationale doesn’t apply to you and that remote work is itself the accommodation, but the specifics of your job will matter.

Filing a Complaint If Your Rights Were Violated

If your employer denied a legitimate accommodation request, retaliated against you for making one, disclosed your confidential medical information, or discriminated against you based on disability or religion, two federal agencies handle these complaints.

The EEOC

For discrimination or accommodation violations under the ADA or Title VII, you file a charge with the EEOC. The deadline is 180 calendar days from the discriminatory act, extended to 300 days if your state has its own anti-discrimination agency covering the same conduct.⁶ You can start through the EEOC’s online Public Portal, visit one of the 53 field offices in person, or call 1-800-669-4000 for initial guidance. The Public Portal offers expedited instructions if you have 60 days or fewer before the deadline.

OSHA

If you faced retaliation for raising workplace-safety or medical-privacy concerns, you can file a whistleblower complaint with OSHA under Section 11(c) of the Occupational Safety and Health Act. The deadline is much shorter, 30 days from the retaliatory action.⁷ You can file online, by phone at 1-800-321-OSHA (6742), by mail, or in person at a local OSHA office. No special form is required, and complaints can be submitted in any language.

State and Local Law May Change the Answer

Everything above is federal. Some states have passed laws restricting private employers from requiring vaccination or from asking about vaccination status at all. Others, particularly some cities during the height of the pandemic, required businesses to verify employee or customer vaccination status. Many pandemic-era mandates are winding down, but the underlying state statutes remain on the books in various forms. Check the employment laws in your state and city before assuming that the federal rules are the whole picture. They may give you more room to decline than federal law does, or they may impose additional obligations on your employer around how the question is asked and how your answer is stored.

1
U.S. Equal Employment Opportunity Commission. What You Should Know About COVID-19 and the ADA, the Rehabilitation Act, and Other EEO Laws
2
U.S. Department of Health and Human Services. HIPAA, COVID-19 Vaccination, and the Workplace
3
Supreme Court of the United States. Groff v. DeJoy, 600 U.S. 447 (2023)
4
U.S. Equal Employment Opportunity Commission. What You Should Know About COVID-19 and the ADA, the Rehabilitation Act, and Other EEO Lawsa>
5
Federal Register. COVID-19 Vaccination and Testing Emergency Temporary Standard
6
U.S. Equal Employment Opportunity Commission. How to File a Charge of Employment Discrimination
7
OSHA. Health Privacy and OSHA Whistleblower Complaints