Of course it does. It states a company policy whereby one’s private medical records are revealed publicly by compulsion (wearing mask = not vaccinated).
Nope. It only prevents health care workers and a few of their contracted services from releasing your health information. It has nothing to do with what employers do and do not require. There is about as much knowledge of HIPAA around here as there is of the vaccine itself