mojo pixy
○-<{[°_°]}>-○
It can be collected. There is no requirement to collect. There is no reason to share it with a third party.
All I have said is that patients have no right to such information.
I've edited my earlier post to say that collection of this data is allowed, not required.
However, the data can almost certainly be shared with third parties if there is a compelling reason to do so - and certainly in terms of agency staff, or service user requests, inoculation status as recorded can be used by a manager to select appropriate staff. No disclosures would be required btw, for this to happen.