OK. It’s not HIPAA. It’s still intrusive and I don’t have to answer.
There may be consequences, in some instances, to not answering. But as a general rule, telling people to go jump in a lake is consequence-free.
If someone asks “are you vaccinated?”, your response can be “have you been treated for STDs?”