Healthy Davis Together (HDT) learned Thursday (Oct. 14) that people accessing their own COVID-19 vaccination records through the HDT Online Portal were able to see their own full immunization record from the California Immunization Registry (CAIR2). The confidentiality of HDT records was maintained at all times and the non-COVID-19 information was not shared publicly or privately with other organizations or individuals.
The HDT portal unintentionally received information about immunizations other than COVID-19 vaccinations that were contained in the state’s CAIR2 database. The issue has been resolved by removing from our immunization database all non-COVID-related information. This immunization information was only available to an individual (or parent or guardian in the case of children) registered in the HDT system and to HDT’s medical team, which includes its medical director, its nurse practitioner and its nurses, and was accessed by the HDT team only in the limited circumstances described below.
HDT requested COVID-19 vaccine information from the CAIR2 database to allow our clinicians to confirm each person’s COVID vaccine status before administering a vaccination, allow individuals to have digital access to their own COVID vaccination record and to report vaccine breakthrough COVID infections to the county public health officer. While we received the additional information inadvertently, we understand how important the confidentiality of medical records is and apologize for any worry this may have caused our community.
