Privacy Notice for Vaccination Reporting

Last update: 1/24/2025

Overview

The University of Michigan (U-M) privacy statement recognizes the value of privacy for the university community and its guests.

This privacy notice provides more specific information on how the University of Michigan collects and processes your vaccination information.

Scope

Specifically, the notice applies to our practices for gathering and disseminating information related to student vaccination.

How We Collect Information

We collect vaccination information when you provide it directly to us by submitting your vaccination records.
We also collect some personal information automatically when you authenticate using your U-M credentials to submit your vaccination records.

What Type of Information We Collect

When you submit your vaccination records, we collect the following personal information from you:

  • User Information: name, uniqname, UMID, U-M role, date of birth
  • Vaccine information: location where the vaccine was received, month, date and year of vaccine doses, type of vaccine, vaccine lot number, images of your vaccination record
  • Logging information: date and time of completing the form.

This information is retained in compliance with applicable state or federal laws or university policy.

How This Information Is Used

We use identifiable vaccination information to:

  • Produce reporting for university administration
  • Implement, waive or reduce testing requirements, quarantine periods, face covering requirements, or other public health protocols
  • Update Occupational Health Services (OHS) and University Health and Counseling (UHC) health records with vaccine information
  • Update the Michigan Care Improvement Registry (MCIR) with your vaccine information
  • Direct public-health-informed decisions related to living, learning, and working at U-M
  • Advise administrative planning.

We use de-identified and/or aggregated vaccination information to:

  • Monitor and analyze trends.

The use of this data is governed by university policy and the U-M Data Governance framework, among other methods.

With Whom This Data Is Shared

We do not sell or rent your personal information. Individually identifiable information may be shared as required by law, and as appropriate with university officials, government public health agencies, and external service providers to aid vaccine verification and support disease response efforts. In cases where the information is shared with service providers, we have contractual agreements to require such service providers to keep your personal information secure and confidential, and do not allow them to use or share personal information for any purpose other than providing services on the university’s behalf.

How Information Is Secured

The University of Michigan recognizes the importance of maintaining the security of the information it collects and maintains, and we endeavor to protect information from unauthorized access and damage. The University of Michigan strives to ensure reasonable security measures are in place, including physical, administrative, and technical safeguards to protect your personal information.

Privacy Notice Changes

This privacy notice may be updated from time to time. We will post the date our notice was last updated at the top of this privacy notice.

Who to Contact with Questions or Concerns

If you have any concerns or questions about how your vaccination data is used, please contact the Health Response Call Center at [email protected] or 734-936-7000. Call center hours are 9 a.m. to 6 p.m., Monday through Friday.