HIPAA means your provider and insurer can’t disclose without your permission. It doesn’t mean some other service provider can’t demand. Really it’s no different than your MMR. Can’t go to most schools without being current.
Not just MMR, I returned as an adult to get a second master’s and a PhD years after my MMR and meningitis vaccines expired. The University required proof of both in the last ten years to even set foot on campus as a student or faculty member of which I was both. Being a lecturer and a student at the same time. I pulled my military vax records which had my meningitis and had to get at the sstudent health Center a booster for MMR , I also got the TDAP the same day along with quad valiant flu. Stackem and packem. That’s still nothing compared to walking the line in MCRD San Diego with corpsmen on both sides with CO2 guns hitting you with at least 20 vaccines in about 5 minutes I remember being falling out sick on the evening run and my arms and body was so stiff the next day during PT I could barely do push ups. But we drove on like men who were eventually have the privilege to be known as Marine’s and didn’t whine like little brats about shots.