The Benefits of Participating in Your State or Local Immunization Information System (IIS)

Immunization Information Systems — also known as immunization registries — are confidential, community-wide computerized databases that record vaccines administered by participating healthcare professionals.

What is an IIS?

IISs are confidential, population-based databases that record all vaccine doses administered by participating providers in a specific geographic area. At a clinical practice level, an IIS can provide consolidated immunization histories to help providers determine appropriate client vaccinations. At the population level, an IIS provides aggregate vaccination data to guide public health action and reduce vaccine-preventable disease.

Benefits of IIS for HealthCare Providers

An IIS simplifies immunization record keeping, provides quicker access to immunization records, and helps keep track of a patient’s immunization status. IIS can also help:

FREQUENTLY ASKED QUESTIONS

Q: Why do Immunization Information Systems exist?
‍A primary use of the IIS is to make sure that all individuals have all of their immunizations and that the information regarding immunizations received and immunizations needed is available when your doctor needs it. All of the immunizations given are based on a schedule that tells providers when certain shots should be given. The immunization schedule is complex and does change. An IIS helps doctors decide which shots should be given and when.

Q: What information is in an IIS?
Information in an IIS is different in every state, but should contain the patient name, birth date, patient sex, patient birth state/country, patient address, mother’s name, the types and dates of vaccines given, the lot number for and manufacturer of the vaccine and the date the shot was given.

Q: How is my immunization record and information protected?
State or jurisdictional law requires that information in the IIS be kept confidential. Only you, your doctor, or healthcare workers can access the information. The information will not be shared with anyone else or any other agency.

Q: Who do I contact to see if my child is in an IIS or if I want a copy of my child’s immunization record?
You must contact your healthcare provider, or local or state immunization program.  

Q: What will participation in an IIS cost a provider practice?
There is no charge for providers to use an IIS, although incorporating use of the IIS into your office’s daily procedures will take an investment of time and effort.

Q: Is reporting to an IIS subject to the HIPAA Privacy Rule?
No. Reporting of immunizations to an IIS are exempt from the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule since it is considered a public health activity.

Q: How is information in the IIS kept confidential?
IIS must protect the privacy of all users, including children, families, and providers. According to standards set by CDC, all IIS are required to have a written privacy policy that clearly defines notice of inclusion in the IIS, access, to, and use and disclosure of IIS data. For more information, ask the IIS in your area for a copy of their confidentiality policy.

Q: Do IIS really help improve immunization?
Yes. For journal articles documenting IIS effectiveness, visit CDC’s IIS publications database.

Q: What do other healthcare providers think about IIS?
Policy Statements and Letters of Support or Endorsement of IIS have been written by the following organizations: American Academy of Pediatrics, American Medical Association, National Association of Pediatric Nurses, Associates and Practitioners, and the National Medical Association.

Q: Can pharmacists participate in an IIS?
Yes. Pharmacists who administer vaccines and are interested in participating in the IIS should contact the IIS in their jurisdiction.

Q: Can the IIS exchange data with Electronic Medical Records (EMR) or Electronic Health Records (EHR)?
IIS have capacity to electronically exchange data with clinical systems including electronic medical records. The capacity and direction of this exchange depends on the technical capacity of the electronic medical record system and the IIS. IIS use the industry standard Health Level 7 (HL7) protocol to exchange immunization information.

Q: What type of equipment do I need to electronically link with the IIS?
Exchanging immunization information with IIS can be done in a variety of different ways. The electronic health record (EHR) application used in the practice should have the ability to create an interface file that conforms to a standard exchange format. Depending on the type of clinical application and clinical workflow, the IIS may be accessible directly from with the clinical application. Additional software requirements may be necessary for authentication, encryption and sending the file to the IIS. IIS and clinical applications are encouraged to find solutions to reduce the burden of duplicate data entry.

Q: How is a client’s immunization record and information protected?
IIS users must be authorized to have access to data stored in an IIS. Users must sign an agreement and follow strict confidentiality and security policies. Protection of IIS data is managed through state privacy, confidentiality, and security laws and through compliance with federal privacy rules and regulations. Some important factors that have helped facilitate IIS development include: Laws specifically authorizing the Department of Health to establish and maintain an immunization information system. Some laws require reporting to the IIS; other laws allow reporting. Both types of laws may address liability concerns. Statutory provisions providing immunities from civil and/or criminal liability for providers who make good faith disclosures to immunization information systems or rely on information in immunization information systems. Other important statutory provisions include:penalties for improper disclosure of information provisions defining with whom immunization information can be shared (e.g., providers, schools, health department) provisions allowing parents to opt out or limit access to immunization registry information. While opt out and consent provisions are particularly important to some religious groups, victims of domestic violence, and others, in fact only a small percentage of people exercises these options.
More Information

A collaboration of organizations with a common goal of increasing vaccination rates:

Elevance logo
Pfizer icon
This website is informational and is not medical advice nor is it intended to replace the advice of a healthcare professional.