{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2025\/code-json\/32.1-46.01.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2025\/code-text\/32.1-46.01.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2025\/code-xml\/32.1-46.01.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2025\/code-html\/32.1-46.01.html"}],"law_id":70560,"edition_id":1,"section_id":70560,"structure_id":16047,"section_number":"32.1-46.01","catch_line":"Virginia Immunization Information System","history":"2005, cc. 643, 684; 2012, c. 147; 2021, Sp. Sess. I, c. 211.","full_text":"A\n\nThe Board of Health shall establish the Virginia Immunization Information System (VIIS), a statewide immunization registry that consolidates patient immunization histories from birth to death into a complete, accurate, and definitive record that may be made available to participating health care providers throughout Virginia, to the extent funds are appropriated by the General Assembly or otherwise made available. The purposes of VIIS shall be to (i) protect the public health of all citizens of the Commonwealth, (ii) prevent under-immunization and over-immunization of children, (iii) ensure up-to-date recommendations for immunization scheduling to health care providers and the Board, (iv) generate parental reminder and recall notices and manufacturer recalls, (v) develop immunization coverage reports, (vi) identify areas of under-immunized population, and (vii) provide, in the event of a public health emergency, a mechanism for tracking the distribution and administration of immunizations, immune globulins, or other preventive medications or emergency treatments. Any health care provider, as defined in § 32.1-127.1:03, in the Commonwealth that administers immunizations shall report such patient immunization information to VIIS pursuant to this section.B\n\nThe Board of Health shall promulgate regulations to implement the VIIS that shall address:1\n\nRegistration of participants, including, but not limited to, a list of those health care entities that are authorized and required to participate and any forms and agreements necessary for compliance with the regulations concerning patient privacy promulgated by the federal Department of Health and Human Services;2\n\nProcedures for confirming, continuing, and terminating participation and disciplining any participant for unauthorized use or disclosure of any VIIS data;3\n\nProcedures, timelines, and formats for reporting of immunizations by participants;4\n\nProcedures to provide for a secure system of data entry that may include encrypted online data entry or secure delivery of data files;5\n\nProcedures for incorporating the data reported on children’s immunizations pursuant to subsection E of § 32.1-46;6\n\nThe patient identifying data to be reported, including, but not limited to, the patient’s name, date of birth, gender, telephone number, home address, birth place, and mother’s maiden name;7\n\nThe patient immunization information to be reported, including, but not necessarily limited to, the type of immunization administered (specified by current procedural terminology (CPT) code or Health Level 7 (HL7) code); date of administration; identity of administering person; lot number; and if present, any contraindications, or religious or medical exemptions;8\n\nMechanisms for entering into data-sharing agreements with other state and regional immunization registries for the exchange, on a periodic nonemergency basis and in the event of a public health emergency, of patient immunization information, after receiving, in writing, satisfactory assurances for the preservation of confidentiality, a clear description of the data requested, specific details on the intended use of the data, and the identities of the persons with whom the data will be shared;9\n\nProcedures for the use of vital statistics data, including, but not necessarily limited to, the linking of birth certificates and death certificates;10\n\nProcedures for requesting immunization records that are in compliance with the requirements for disclosing health records set forth in § 32.1-127.1:03; such procedures shall address the approved uses for the requested data, to whom the data may be disclosed, and information on the provisions for disclosure of health records pursuant to § 32.1-127.1:03;11\n\nProcedures for releasing aggregate data, from which personal identifying data has been removed or redacted, to qualified persons for purposes of research, statistical analysis, and reporting; and12\n\nProcedures for the Commissioner of Health to access and release, as necessary, the data contained in VIIS in the event of an epidemic or an outbreak of any vaccine-preventable disease or the potential epidemic or epidemic of any disease of public health importance, public health significance, or public health threat for which a treatment or vaccine exists.\n\t\t\t\tThe Board’s regulations shall also include any necessary definitions for the operation of VIIS; however, “health care entity,” “health care plan,” and “health care provider” shall be as defined in subsection B of § 32.1-127.1:03.C\n\nThe establishment and implementation of VIIS is hereby declared to be a necessary public health activity to ensure the integrity of the health care system in Virginia and to prevent serious harm and serious threats to the health and safety of individuals and the public. Pursuant to the regulations concerning patient privacy promulgated by the federal Department of Health and Human Services, covered entities may disclose protected health information to the secure system established for VIIS without obtaining consent or authorization for such disclosure. Such protected health information shall be used exclusively for the purposes established in this section.D\n\nThe Board and Commissioner of Health, any employees of the health department, any participant, and any person authorized to report or disclose immunization data hereunder shall be immune from civil liability in connection therewith unless such person acted with gross negligence or malicious intent.E\n\nThis section shall not diminish the responsibility of any physician or other person to maintain accurate patient immunization data or the responsibility of any parent, guardian, or person standing in loco parentis to cause a child to be immunized in accordance with the provisions of § 32.1-46. Further, this section shall not be construed to require the immunization of any person who objects thereto on the grounds that the administration of immunizing agents conflicts with his religious tenets or practices, or any person for whom administration of immunizing agents would be detrimental to his health.F\n\nThe Commissioner may authorize linkages between VIIS and other secure electronic databases that contain health records reported to the Department of Health, subject to all state and federal privacy laws and regulations. These health records may include newborn screening results reported pursuant to § 32.1-65, newborn hearing screening results reported pursuant to § 32.1-64.1, and blood-lead level screening results reported pursuant to § 32.1-46.1. Health care providers authorized to use VIIS may view the health records of individuals to whom the providers are providing health care services.","order_by":null,"text":{"0":{"id":254599,"text":"The Board of Health shall establish the Virginia Immunization Information System (VIIS), a statewide immunization registry that consolidates patient immunization histories from birth to death into a complete, accurate, and definitive record that may be made available to participating health care providers throughout Virginia, to the extent funds are appropriated by the General Assembly or otherwise made available. The purposes of VIIS shall be to (i) protect the public health of all citizens of the Commonwealth, (ii) prevent under-immunization and over-immunization of children, (iii) ensure up-to-date recommendations for immunization scheduling to health care providers and the Board, (iv) generate parental reminder and recall notices and manufacturer recalls, (v) develop immunization coverage reports, (vi) identify areas of under-immunized population, and (vii) provide, in the event of a public health emergency, a mechanism for tracking the distribution and administration of immunizations, immune globulins, or other preventive medications or emergency treatments. Any health care provider, as defined in § 32.1-127.1:03, in the Commonwealth that administers immunizations shall report such patient immunization information to VIIS pursuant to this section.","type":"section","prefixes":["A"],"prefix":"A","entire_prefix":"A","prefix_anchor":"A","level":1,"next_prefix":"B"},"1":{"id":254600,"text":"The Board of Health shall promulgate regulations to implement the VIIS that shall address:","type":"section","prefixes":["B"],"prefix":"B","entire_prefix":"B","prefix_anchor":"B","level":1,"prior_prefix":"A","next_prefix":"B1"},"2":{"id":254601,"text":"Registration of participants, including, but not limited to, a list of those health care entities that are authorized and required to participate and any forms and agreements necessary for compliance with the regulations concerning patient privacy promulgated by the federal Department of Health and Human Services;","type":"section","prefixes":["B","1"],"prefix":"1","entire_prefix":"B1","prefix_anchor":"B1","level":2,"prior_prefix":"B","next_prefix":"B2"},"3":{"id":254602,"text":"Procedures for confirming, continuing, and terminating participation and disciplining any participant for unauthorized use or disclosure of any VIIS data;","type":"section","prefixes":["B","2"],"prefix":"2","entire_prefix":"B2","prefix_anchor":"B2","level":2,"prior_prefix":"B1","next_prefix":"B3"},"4":{"id":254603,"text":"Procedures, timelines, and formats for reporting of immunizations by participants;","type":"section","prefixes":["B","3"],"prefix":"3","entire_prefix":"B3","prefix_anchor":"B3","level":2,"prior_prefix":"B2","next_prefix":"B4"},"5":{"id":254604,"text":"Procedures to provide for a secure system of data entry that may include encrypted online data entry or secure delivery of data files;","type":"section","prefixes":["B","4"],"prefix":"4","entire_prefix":"B4","prefix_anchor":"B4","level":2,"prior_prefix":"B3","next_prefix":"B5"},"6":{"id":254605,"text":"Procedures for incorporating the data reported on children’s immunizations pursuant to subsection E of § 32.1-46;","type":"section","prefixes":["B","5"],"prefix":"5","entire_prefix":"B5","prefix_anchor":"B5","level":2,"prior_prefix":"B4","next_prefix":"B6"},"7":{"id":254606,"text":"The patient identifying data to be reported, including, but not limited to, the patient’s name, date of birth, gender, telephone number, home address, birth place, and mother’s maiden name;","type":"section","prefixes":["B","6"],"prefix":"6","entire_prefix":"B6","prefix_anchor":"B6","level":2,"prior_prefix":"B5","next_prefix":"B7"},"8":{"id":254607,"text":"The patient immunization information to be reported, including, but not necessarily limited to, the type of immunization administered (specified by current procedural terminology (CPT) code or Health Level 7 (HL7) code); date of administration; identity of administering person; lot number; and if present, any contraindications, or religious or medical exemptions;","type":"section","prefixes":["B","7"],"prefix":"7","entire_prefix":"B7","prefix_anchor":"B7","level":2,"prior_prefix":"B6","next_prefix":"B8"},"9":{"id":254608,"text":"Mechanisms for entering into data-sharing agreements with other state and regional immunization registries for the exchange, on a periodic nonemergency basis and in the event of a public health emergency, of patient immunization information, after receiving, in writing, satisfactory assurances for the preservation of confidentiality, a clear description of the data requested, specific details on the intended use of the data, and the identities of the persons with whom the data will be shared;","type":"section","prefixes":["B","8"],"prefix":"8","entire_prefix":"B8","prefix_anchor":"B8","level":2,"prior_prefix":"B7","next_prefix":"B9"},"10":{"id":254609,"text":"Procedures for the use of vital statistics data, including, but not necessarily limited to, the linking of birth certificates and death certificates;","type":"section","prefixes":["B","9"],"prefix":"9","entire_prefix":"B9","prefix_anchor":"B9","level":2,"prior_prefix":"B8","next_prefix":"B10"},"11":{"id":254610,"text":"Procedures for requesting immunization records that are in compliance with the requirements for disclosing health records set forth in § 32.1-127.1:03; such procedures shall address the approved uses for the requested data, to whom the data may be disclosed, and information on the provisions for disclosure of health records pursuant to § 32.1-127.1:03;","type":"section","prefixes":["B","10"],"prefix":"10","entire_prefix":"B10","prefix_anchor":"B10","level":2,"prior_prefix":"B9","next_prefix":"B11"},"12":{"id":254611,"text":"Procedures for releasing aggregate data, from which personal identifying data has been removed or redacted, to qualified persons for purposes of research, statistical analysis, and reporting; and","type":"section","prefixes":["B","11"],"prefix":"11","entire_prefix":"B11","prefix_anchor":"B11","level":2,"prior_prefix":"B10","next_prefix":"B12"},"13":{"id":254612,"text":"Procedures for the Commissioner of Health to access and release, as necessary, the data contained in VIIS in the event of an epidemic or an outbreak of any vaccine-preventable disease or the potential epidemic or epidemic of any disease of public health importance, public health significance, or public health threat for which a treatment or vaccine exists.\n\t\t\t\tThe Board’s regulations shall also include any necessary definitions for the operation of VIIS; however, “health care entity,” “health care plan,” and “health care provider” shall be as defined in subsection B of § 32.1-127.1:03.","type":"section","prefixes":["B","12"],"prefix":"12","entire_prefix":"B12","prefix_anchor":"B12","level":2,"prior_prefix":"B11","next_prefix":"C"},"14":{"id":254613,"text":"The establishment and implementation of VIIS is hereby declared to be a necessary public health activity to ensure the integrity of the health care system in Virginia and to prevent serious harm and serious threats to the health and safety of individuals and the public. Pursuant to the regulations concerning patient privacy promulgated by the federal Department of Health and Human Services, covered entities may disclose protected health information to the secure system established for VIIS without obtaining consent or authorization for such disclosure. Such protected health information shall be used exclusively for the purposes established in this section.","type":"section","prefixes":["C"],"prefix":"C","entire_prefix":"C","prefix_anchor":"C","level":1,"prior_prefix":"B12","next_prefix":"D"},"15":{"id":254614,"text":"The Board and Commissioner of Health, any employees of the health department, any participant, and any person authorized to report or disclose immunization data hereunder shall be immune from civil liability in connection therewith unless such person acted with gross negligence or malicious intent.","type":"section","prefixes":["D"],"prefix":"D","entire_prefix":"D","prefix_anchor":"D","level":1,"prior_prefix":"C","next_prefix":"E"},"16":{"id":254615,"text":"This section shall not diminish the responsibility of any physician or other person to maintain accurate patient immunization data or the responsibility of any parent, guardian, or person standing in loco parentis to cause a child to be immunized in accordance with the provisions of § 32.1-46. Further, this section shall not be construed to require the immunization of any person who objects thereto on the grounds that the administration of immunizing agents conflicts with his religious tenets or practices, or any person for whom administration of immunizing agents would be detrimental to his health.","type":"section","prefixes":["E"],"prefix":"E","entire_prefix":"E","prefix_anchor":"E","level":1,"prior_prefix":"D","next_prefix":"F"},"17":{"id":254616,"text":"The Commissioner may authorize linkages between VIIS and other secure electronic databases that contain health records reported to the Department of Health, subject to all state and federal privacy laws and regulations. These health records may include newborn screening results reported pursuant to § 32.1-65, newborn hearing screening results reported pursuant to § 32.1-64.1, and blood-lead level screening results reported pursuant to § 32.1-46.1. Health care providers authorized to use VIIS may view the health records of individuals to whom the providers are providing health care services.","type":"section","prefixes":["F"],"prefix":"F","entire_prefix":"F","prefix_anchor":"F","level":1,"prior_prefix":"E"}},"ancestry":[{"id":16047,"edition_id":1,"name":"Disease Control Measures","identifier":"3","label":"article","depth":3,"order_by":1,"parent_id":13607,"metadata":{},"date_created":"2026-06-26 04:04:37","date_modified":"2026-06-26 04:04:37","permalink":{"id":201951,"object_type":"structure","relational_id":16047,"identifier":"3","token":"32.1\/2\/3","url":"\/32.1\/2\/3\/","edition_id":1,"permalink":0,"preferred":1}},{"id":13607,"edition_id":1,"name":"Disease Prevention and Control","identifier":"2","label":"chapter","depth":2,"order_by":1,"parent_id":12727,"metadata":{},"date_created":"2026-06-26 03:45:22","date_modified":"2026-06-26 03:45:22","permalink":{"id":201743,"object_type":"structure","relational_id":13607,"identifier":"2","token":"32.1\/2","url":"\/32.1\/2\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12727,"edition_id":1,"name":"Health","identifier":"32.1","label":"title","depth":1,"order_by":1,"parent_id":null,"metadata":{},"date_created":"2026-06-26 03:43:50","date_modified":"2026-06-26 03:43:50","permalink":{"id":201099,"object_type":"structure","relational_id":12727,"identifier":"32.1","token":"32.1","url":"\/32.1\/","edition_id":1,"permalink":0,"preferred":1}}],"structure_contents":[{"id":76165,"structure_id":16047,"section_number":"32.1-42","catch_line":"Emergency rules and regulations","url":"\/32.1-42\/","token":"32.1\/2\/3\/32.1-42","metadata":false},{"id":66908,"structure_id":16047,"section_number":"32.1-42.1","catch_line":"Administration and dispensing of necessary drugs, devices and vaccines during a declared disaster or emergency","url":"\/32.1-42.1\/","token":"32.1\/2\/3\/32.1-42.1","metadata":false},{"id":78441,"structure_id":16047,"section_number":"32.1-42.2","catch_line":"Declared emergency; priority for personal protective equipment and immunization; funeral service licensees and funeral service establishment employees","url":"\/32.1-42.2\/","token":"32.1\/2\/3\/32.1-42.2","metadata":false},{"id":65793,"structure_id":16047,"section_number":"32.1-43","catch_line":"Authority of State Health Commissioner to require quarantine, etc","url":"\/32.1-43\/","token":"32.1\/2\/3\/32.1-43","metadata":false},{"id":62960,"structure_id":16047,"section_number":"32.1-44","catch_line":"Isolated or quarantined persons","url":"\/32.1-44\/","token":"32.1\/2\/3\/32.1-44","metadata":false},{"id":73376,"structure_id":16047,"section_number":"32.1-45","catch_line":"Expense of treatment","url":"\/32.1-45\/","token":"32.1\/2\/3\/32.1-45","metadata":false},{"id":71237,"structure_id":16047,"section_number":"32.1-45.1","catch_line":"Deemed consent to testing and release of test results related to infection with human immunodeficiency virus or hepatitis B or C viruses","url":"\/32.1-45.1\/","token":"32.1\/2\/3\/32.1-45.1","metadata":false},{"id":68561,"structure_id":16047,"section_number":"32.1-45.2","catch_line":"Public safety employees; testing for blood-borne pathogens; procedure available for certain citizens; definitions","url":"\/32.1-45.2\/","token":"32.1\/2\/3\/32.1-45.2","metadata":false},{"id":83229,"structure_id":16047,"section_number":"32.1-45.3","catch_line":"Repealed","url":"\/32.1-45.3\/","token":"32.1\/2\/3\/32.1-45.3","metadata":false},{"id":73569,"structure_id":16047,"section_number":"32.1-45.4","catch_line":"Comprehensive harm reduction programs","url":"\/32.1-45.4\/","token":"32.1\/2\/3\/32.1-45.4","metadata":false},{"id":80398,"structure_id":16047,"section_number":"32.1-46","catch_line":"Immunization of patients against certain diseases","url":"\/32.1-46\/","token":"32.1\/2\/3\/32.1-46","metadata":false},{"id":70560,"structure_id":16047,"section_number":"32.1-46.01","catch_line":"Virginia Immunization Information System","url":"\/32.1-46.01\/","token":"32.1\/2\/3\/32.1-46.01","metadata":false},{"id":73649,"structure_id":16047,"section_number":"32.1-46.02","catch_line":"Administration of influenza vaccine to minors","url":"\/32.1-46.02\/","token":"32.1\/2\/3\/32.1-46.02","metadata":false},{"id":75856,"structure_id":16047,"section_number":"32.1-46.1","catch_line":"Board to establish protocol for identification of children with elevated blood-lead levels","url":"\/32.1-46.1\/","token":"32.1\/2\/3\/32.1-46.1","metadata":false},{"id":74454,"structure_id":16047,"section_number":"32.1-46.2","catch_line":"Certain testing or determination of low risk for elevated blood-lead levels required","url":"\/32.1-46.2\/","token":"32.1\/2\/3\/32.1-46.2","metadata":false},{"id":78372,"structure_id":16047,"section_number":"32.1-47","catch_line":"Exclusion from school of children not immunized","url":"\/32.1-47\/","token":"32.1\/2\/3\/32.1-47","metadata":false},{"id":73049,"structure_id":16047,"section_number":"32.1-47.1","catch_line":"Vaccination of children; plan enhancements","url":"\/32.1-47.1\/","token":"32.1\/2\/3\/32.1-47.1","metadata":false},{"id":69455,"structure_id":16047,"section_number":"32.1-48","catch_line":"Powers of Commissioner in epidemic","url":"\/32.1-48\/","token":"32.1\/2\/3\/32.1-48","metadata":false},{"id":78035,"structure_id":16047,"section_number":"32.1-48.001","catch_line":"(For contingent effective date, see Acts 2021, Sp. Sess. I, c. 472, cl. 2) Real-time information sharing for emergency medical services agencies","url":"\/32.1-48.001\/","token":"32.1\/2\/3\/32.1-48.001","metadata":false}],"previous_section":{"id":80398,"structure_id":16047,"section_number":"32.1-46","catch_line":"Immunization of patients against certain diseases","url":"\/32.1-46\/","token":"32.1\/2\/3\/32.1-46","metadata":false},"next_section":{"id":73649,"structure_id":16047,"section_number":"32.1-46.02","catch_line":"Administration of influenza vaccine to minors","url":"\/32.1-46.02\/","token":"32.1\/2\/3\/32.1-46.02","metadata":false},"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/32.1-46.01\/","history_text":"

This law was first created in 2005. The record of its establishment is cataloged in chapters 643<\/a> and 684<\/a> of that year\u2019s edition of \u201cActs of Assembly,\u201d the annual state publication listing all changes made to the Code of Virginia in that year. It has been modified 1 time. Those modifications are cataloged by \u201cThe Acts of Assembly,\u201d a state publication, by year and chapter. Those modifications that can be read on the General Assembly\u2019s website will be linked accordingly. That modification is as follows: in 2012, chapter 147<\/a>.<\/p>","references":[{"id":75856,"section_number":"32.1-46.1","catch_line":"Board to establish protocol for identification of children with elevated blood-lead levels","order_by":null,"url":"\/32.1-46.1\/"},{"id":80178,"section_number":"32.1-64.2","catch_line":"Confidentiality of records; publication; Commissioner required to contact parents, physicians, and relevant local early intervention program","order_by":null,"url":"\/32.1-64.2\/"},{"id":69668,"section_number":"32.1-67.1","catch_line":"Confidentiality of records; prohibition of discrimination","order_by":null,"url":"\/32.1-67.1\/"}],"refers_to":[{"id":58930,"section_number":"32.1-127.1:03","catch_line":"Health records privacy","order_by":null,"url":"\/32.1-127.1_03\/"},{"id":80398,"section_number":"32.1-46","catch_line":"Immunization of patients against certain diseases","order_by":null,"url":"\/32.1-46\/"},{"id":75856,"section_number":"32.1-46.1","catch_line":"Board to establish protocol for identification of children with elevated blood-lead levels","order_by":null,"url":"\/32.1-46.1\/"},{"id":62100,"section_number":"32.1-64.1","catch_line":"Virginia Hearing Loss Identification and Monitoring System","order_by":null,"url":"\/32.1-64.1\/"},{"id":79113,"section_number":"32.1-65","catch_line":"Certain newborn screening required","order_by":null,"url":"\/32.1-65\/"}],"permalink":{"id":201997,"object_type":"law","relational_id":70560,"identifier":"32.1-46.01","token":"32.1\/2\/3\/32.1-46.01","url":"\/32.1-46.01\/","edition_id":1,"permalink":0,"preferred":1},"url":"\/32.1-46.01\/","token":"32.1\/2\/3\/32.1-46.01","dublin_core":{"Title":"Virginia Immunization Information System","Type":"Text","Format":"text\/html","Identifier":"\u00a7 32.1-46.01","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t

A.<\/span> The Board<\/span> of Health shall establish the Virginia Immunization Information System (VIIS), a statewide immunization registry that consolidates patient immunization histories from birth to death into a complete, accurate, and definitive record that may be made available to participating health care providers throughout Virginia, to the extent funds are appropriated by the General Assembly or otherwise made available. The purposes of VIIS shall be to (i) protect the public health of all citizens of the Commonwealth, (ii) prevent under-immunization and over-immunization of children, (iii) ensure up-to-date recommendations for immunization scheduling to health care providers and the Board<\/span>, (iv) generate parental reminder and recall notices and manufacturer recalls, (v) develop immunization coverage reports, (vi) identify areas of under-immunized population, and (vii) provide, in the event of a public health emergency, a mechanism for tracking the distribution and administration of immunizations, immune globulins, or other preventive medications or emergency treatments. Any health care provider, as defined in § 32.1-127.1:03<\/a>, in the Commonwealth that administers immunizations shall report such patient immunization information to VIIS pursuant to this section. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

B.<\/span> The Board<\/span> of Health shall promulgate regulations to implement the VIIS that shall address: <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

1.<\/span> Registration of participants, including, but not limited to, a list of those health care entities that are authorized and required to participate and any forms and agreements necessary for compliance with the regulations concerning patient privacy promulgated by the federal Department<\/span> of Health and Human Services; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

2.<\/span> Procedures for confirming, continuing, and terminating participation and disciplining any participant for unauthorized use or disclosure of any VIIS data; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

3.<\/span> Procedures, timelines, and formats for reporting of immunizations by participants; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

4.<\/span> Procedures to provide for a secure system of data entry that may include encrypted online data entry or secure delivery of data files; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

5.<\/span> Procedures for incorporating the data reported on children’s immunizations pursuant to subsection E of § 32.1-46<\/a>; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

6.<\/span> The patient identifying data to be reported, including, but not limited to, the patient’s name, date of birth, gender, telephone number, home address, birth place, and mother’s maiden name; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

7.<\/span> The patient immunization information to be reported, including, but not necessarily limited to, the type of immunization administered (specified by current procedural terminology (CPT) code or Health Level 7 (HL7) code); date of administration; identity of administering person<\/span>; lot number; and if present, any contraindications, or religious or medical exemptions; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

8.<\/span> Mechanisms for entering into data-sharing agreements with other state and regional immunization registries for the exchange, on a periodic nonemergency basis and in the event of a public health emergency, of patient immunization information, after receiving, in writing, satisfactory assurances for the preservation of confidentiality, a clear description of the data requested, specific details on the intended use of the data, and the identities of the persons<\/span> with whom the data will be shared; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

9.<\/span> Procedures for the use of vital statistics data, including, but not necessarily limited to, the linking of birth certificates and death certificates; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

10.<\/span> Procedures for requesting immunization records that are in compliance with the requirements for disclosing health records set forth in § 32.1-127.1:03<\/a>; such procedures shall address the approved uses for the requested data, to whom the data may be disclosed, and information on the provisions for disclosure of health records pursuant to § 32.1-127.1:03<\/a>; <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

11.<\/span> Procedures for releasing aggregate data, from which personal identifying data has been removed or redacted, to qualified persons<\/span> for purposes of research, statistical analysis, and reporting; and <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

12.<\/span> Procedures for the Commissioner<\/span> of Health to access and release, as necessary, the data contained in VIIS in the event of an epidemic or an outbreak of any vaccine-preventable disease or the potential epidemic or epidemic of any disease of public health importance, public health significance, or public health threat for which a treatment or vaccine exists.\n\t\t\t\tThe Board<\/span>’s regulations shall also include any necessary definitions for the operation of VIIS; however, “health care entity,” “health care plan,” and “health care provider” shall be as defined in subsection B of § 32.1-127.1:03<\/a>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

C.<\/span> The establishment and implementation of VIIS is hereby declared to be a necessary public health activity to ensure the integrity of the health care system in Virginia and to prevent serious harm and serious threats to the health and safety of individuals and the public. Pursuant to the regulations concerning patient privacy promulgated by the federal Department<\/span> of Health and Human Services, covered entities may disclose protected health information to the secure system established for VIIS without obtaining consent or authorization for such disclosure. Such protected health information shall be used exclusively for the purposes established in this section. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

D.<\/span> The Board<\/span> and Commissioner<\/span> of Health, any employees of the health department<\/span>, any participant, and any person<\/span> authorized to report or disclose immunization data hereunder shall be immune from civil liability in connection therewith unless such person<\/span> acted with gross negligence<\/span> or malicious<\/span> intent<\/span>. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

E.<\/span> This section shall not diminish the responsibility of any physician or other person<\/span> to maintain accurate patient immunization data or the responsibility of any parent, guardian, or person<\/span> standing in loco parentis to cause a child to be immunized in accordance with the provisions of § 32.1-46<\/a>. Further, this section shall not be construed to require the immunization of any person<\/span> who objects<\/span> thereto on the grounds that the administration of immunizing agents conflicts with his religious tenets or practices, or any person<\/span> for whom administration of immunizing agents would be detrimental to his health. <\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t

F.<\/span> The Commissioner<\/span> may authorize linkages between VIIS and other secure electronic databases that contain health records reported to the Department<\/span> of Health, subject to all state and federal privacy laws<\/span> and regulations. These health records may include newborn screening results reported pursuant to § 32.1-65<\/a>, newborn hearing<\/span> screening results reported pursuant to § 32.1-64.1<\/a>, and blood-lead level screening results reported pursuant to § 32.1-46.1<\/a>. Health care providers authorized to use VIIS may view the health records of individuals to whom the providers are providing health care services. <\/i><\/a><\/p><\/section>","plain_text":" CODE OF VIRGINIA\n\nVIRGINIA IMMUNIZATION INFORMATION SYSTEM (\u00a7 32.1-46.01)\n\nA. The Board of Health shall establish the Virginia Immunization Information\nSystem (VIIS), a statewide immunization registry that consolidates patient\nimmunization histories from birth to death into a complete, accurate, and\ndefinitive record that may be made available to participating health care\nproviders throughout Virginia, to the extent funds are appropriated by the\nGeneral Assembly or otherwise made available. The purposes of VIIS shall be to\n(i) protect the public health of all citizens of the Commonwealth, (ii) prevent\nunder-immunization and over-immunization of children, (iii) ensure up-to-date\nrecommendations for immunization scheduling to health care providers and the\nBoard, (iv) generate parental reminder and recall notices and manufacturer\nrecalls, (v) develop immunization coverage reports, (vi) identify areas of\nunder-immunized population, and (vii) provide, in the event of a public health\nemergency, a mechanism for tracking the distribution and administration of\nimmunizations, immune globulins, or other preventive medications or emergency\ntreatments. Any health care provider, as defined in § 32.1-127.1:03, in the\nCommonwealth that administers immunizations shall report such patient\nimmunization information to VIIS pursuant to this section.\n\nB. The Board of Health shall promulgate regulations to implement the VIIS that\nshall address:\n\n 1. Registration of participants, including, but not limited to, a list of\n those health care entities that are authorized and required to participate and\n any forms and agreements necessary for compliance with the regulations\n concerning patient privacy promulgated by the federal Department of Health and\n Human Services;\n\n 2. Procedures for confirming, continuing, and terminating participation and\n disciplining any participant for unauthorized use or disclosure of any VIIS\n data;\n\n 3. Procedures, timelines, and formats for reporting of immunizations by\n participants;\n\n 4. Procedures to provide for a secure system of data entry that may include\n encrypted online data entry or secure delivery of data files;\n\n 5. Procedures for incorporating the data reported on children’s\n immunizations pursuant to subsection E of § 32.1-46;\n\n 6. The patient identifying data to be reported, including, but not limited to,\n the patient’s name, date of birth, gender, telephone number, home\n address, birth place, and mother’s maiden name;\n\n 7. The patient immunization information to be reported, including, but not\n necessarily limited to, the type of immunization administered (specified by\n current procedural terminology (CPT) code or Health Level 7 (HL7) code); date\n of administration; identity of administering person; lot number; and if\n present, any contraindications, or religious or medical exemptions;\n\n 8. Mechanisms for entering into data-sharing agreements with other state and\n regional immunization registries for the exchange, on a periodic nonemergency\n basis and in the event of a public health emergency, of patient immunization\n information, after receiving, in writing, satisfactory assurances for the\n preservation of confidentiality, a clear description of the data requested,\n specific details on the intended use of the data, and the identities of the\n persons with whom the data will be shared;\n\n 9. Procedures for the use of vital statistics data, including, but not\n necessarily limited to, the linking of birth certificates and death\n certificates;\n\n 10. Procedures for requesting immunization records that are in compliance with\n the requirements for disclosing health records set forth in §\n 32.1-127.1:03; such procedures shall address the approved uses for the\n requested data, to whom the data may be disclosed, and information on the\n provisions for disclosure of health records pursuant to § 32.1-127.1:03;\n\n 11. Procedures for releasing aggregate data, from which personal identifying\n data has been removed or redacted, to qualified persons for purposes of\n research, statistical analysis, and reporting; and\n\n 12. Procedures for the Commissioner of Health to access and release, as\n necessary, the data contained in VIIS in the event of an epidemic or an\n outbreak of any vaccine-preventable disease or the potential epidemic or\n epidemic of any disease of public health importance, public health\n significance, or public health threat for which a treatment or vaccine exists.\n \t\t\t\tThe Board’s regulations shall also include any necessary definitions\n for the operation of VIIS; however, “health care entity,”\n “health care plan,” and “health care provider” shall\n be as defined in subsection B of § 32.1-127.1:03.\n\nC. The establishment and implementation of VIIS is hereby declared to be a\nnecessary public health activity to ensure the integrity of the health care\nsystem in Virginia and to prevent serious harm and serious threats to the health\nand safety of individuals and the public. Pursuant to the regulations concerning\npatient privacy promulgated by the federal Department of Health and Human\nServices, covered entities may disclose protected health information to the\nsecure system established for VIIS without obtaining consent or authorization\nfor such disclosure. Such protected health information shall be used exclusively\nfor the purposes established in this section.\n\nD. The Board and Commissioner of Health, any employees of the health department,\nany participant, and any person authorized to report or disclose immunization\ndata hereunder shall be immune from civil liability in connection therewith\nunless such person acted with gross negligence or malicious intent.\n\nE. This section shall not diminish the responsibility of any physician or other\nperson to maintain accurate patient immunization data or the responsibility of\nany parent, guardian, or person standing in loco parentis to cause a child to be\nimmunized in accordance with the provisions of § 32.1-46. Further, this\nsection shall not be construed to require the immunization of any person who\nobjects thereto on the grounds that the administration of immunizing agents\nconflicts with his religious tenets or practices, or any person for whom\nadministration of immunizing agents would be detrimental to his health.\n\nF. The Commissioner may authorize linkages between VIIS and other secure\nelectronic databases that contain health records reported to the Department of\nHealth, subject to all state and federal privacy laws and regulations. These\nhealth records may include newborn screening results reported pursuant to §\n32.1-65, newborn hearing screening results reported pursuant to §\n32.1-64.1, and blood-lead level screening results reported pursuant to §\n32.1-46.1. Health care providers authorized to use VIIS may view the health\nrecords of individuals to whom the providers are providing health care services.\n\nHISTORY: 2005, cc. 643, 684; 2012, c. 147; 2021, Sp. Sess. I, c. 211.","edition":{"id":1,"name":"2025","slug":"2025","date_created":"2026-06-21 22:39:22","date_modified":"2026-06-21 22:39:22","current":1,"order_by":1,"last_import":null}}