Generally speaking, an employer who asks for medical information, such as a person’s vaccination status, should keep that information private and secure. A worker is usually also entitled to be told the reason the information is being sought. Public health directions may also mandate the disclosure of this information. In some circumstances, this information is required to be kept by the employer, other circumstances they are required to view the information and maintain their own record. Provided an employer explains the purpose for the collection of this information, and how it will be kept confidential, a policy requiring a worker to provide information about their vaccination status is likely to be a reasonable request (taking into account similar considerations as apply when considering whether a mandatory vaccination policy is reasonable).