How do you prove that people have been vaccinated without putting their privacy at risk? The technology and best practices to make it happen exist. It’s far from clear, however, if they’re being used.