[garciasn]

They said it. From the BattlePenguin site (I’m not going to link as it may get shadowbanned):

“In the United States, health privacy is one of the many things covered under legislation know as HIPPA. However, all the rules seem to have changed in the reaction to COVID-19. Now, people are not only proclaiming their medical information to everyone, but venues and employers are requiring disclosures of experimental medication in order to enter their premises. Whether you believe this is a justified request or not is irrelevant. It’s the end of medical privacy as we know it, and opens up an entirely new class of discrimination based on an individual’s choice to take a medication.”

[dekhn]

Basically, this author is clueless. It's HIPAA not HIPPA, and it only applies to a very limited number of orgs, not a typical employer. HIPAA doesn't even really give you medical privacy- it's a law literally written to make it easier to move data around (the "portability" part) and hold covered entities (like health care orgs) liable if they disclose certain types of data, or business associates, if they signed a particular type of agreement.

That said, nearly everybody gets the law wrong, I've had to explain to lawyers why the law didn't apply to my startup (a biotech that was neither a covered entity, nor a business associate).