Privacy Policy for COVID-19 Vaccination Self-Reporting

Last update: 6/10/2021


The University of Michigan (U-M) privacy statement recognizes the value of privacy for the university community and its guests.

This privacy notice provides more specific information on how the COVID-19 Vaccination Self-Report Form collects and processes your personal information.


The notice applies to our practices for gathering and disseminating information related to the COVID-19 Vaccination Self-Report Form and is meant to provide you an overview of our practices when collecting and processing personal information.

How We Collect Information

We collect personal information automatically when you authenticate using your U-M credentials and when you complete the COVID-19 Vaccination Self-Report Form.

What Type of Information We Collect

When you use the COVID-19 Vaccination Self-Report Form, we collect the following personal information from you directly:

  • User Information: name, uniqname, UMID, U-M role, date of birth, city of residence, presence on campus in last 14 days
  • Contact information: phone number
  • Vaccine information: month, date and year of vaccine doses, type of COVID-19 vaccine, vaccine lot number
  • Logging information: date and time of completing the form.

This information is retained for five years from the date of collection.

How This Information Is Used

We use identifiable information to:

  • Produce reporting for university administration
  • Waive or reduce COVID-19 testing requirements,¬†quarantine periods, face covering requirements, or other public health protocols
  • Update Occupational Health Services (OHS) and University Health Services (UHS) health records with vaccine information
  • Direct public health informed housing decisions
  • Inform social distancing requirements
  • Advise administrative planning.

We use de-identified and/or aggregated information to:

  • Monitor and analyze trends in aggregate vaccination status.

The use of this data is governed by university policy and the U-M Data Governance framework, among other methods. Data requests and use cases will only be considered if they are related to public health.

With Whom is This Data Shared?

We do not sell or rent your personal information. Individually identifiable information may be shared as required by law, with necessary University officials, public health officials, or external service providers to aid with COVID-19 response efforts.

What Choices You Can Make About Your Information

If you wish to opt out of data collection, you should not complete the COVID-19 Vaccination Self-Report Form.

How Information Is Secured

The University of Michigan recognizes the importance of maintaining the security of the information it collects and maintains, and we endeavor to protect information from unauthorized access and damage. The University of Michigan strives to ensure reasonable security measures are in place, including physical, administrative, and technical safeguards to protect your personal information.

Privacy Notice Changes

This privacy notice may be updated from time to time. We will post the date our notice was last updated at the top of this privacy notice.

Who to Contact with Questions or Concerns

If you have any concerns or questions about how your personal data is used, please contact the U-M Privacy Office at or 500 S. State Street, Ann Arbor, MI 48109.