Arkansas Immunization Registry: Access, Opt-Out, and Penalties

The Arkansas immunization registry, known as WebIZ, is a confidential statewide database run by the Arkansas Department of Health that consolidates your vaccination records from different providers into a single file you can use for school, daycare, or work. You and your children are enrolled automatically unless you opt out, and access is limited to authorized people under state rules and federal privacy law.1Arkansas Department of Health. About WebIZ – Arkansas Immunization Information System

What WebIZ Is and What It Does

The Arkansas Department of Health operates the registry under Arkansas Code 20-15-1202, which directs the department to maintain a statewide immunization registry and to define the data elements that go into it.2Justia. Arkansas Code 20-15-1202 – Statewide Immunization Registry WebIZ is how that mandate works in practice. It pulls vaccination data from healthcare providers across the state and merges it into one record per person.

Providers use it to check what you’ve already received before giving another dose, its clinical decision tools flag when immunizations are due, and parents can pull official documentation of a child’s vaccination history.1Arkansas Department of Health. About WebIZ – Arkansas Immunization Information System Any healthcare professional who administers vaccines, including physicians, pharmacists, and school nurses, must report doses given to anyone under twenty-two within two weeks of administration.3Arkansas Department of Health. Rules and Regulations Pertaining to Immunization Reporting That reporting duty is what keeps your record current without you having to do anything.

How to Get Your Shot Records

The most direct route is contacting the Department of Health’s Immunizations Registry and submitting a Shot Record Request Form by mail, fax, or email.4Arkansas Department of Health. Immunizations

  • Phone: 501-280-4080
  • Email: Immunization.HelpDeskRegistry@arkansas.gov
  • Fax: 501-671-1756
  • Mail: 4815 W. Markham, Slot 48, Little Rock, AR 72205

You can also ask your healthcare provider to pull your file from WebIZ directly. If you saw several providers over the years, the registry’s real advantage is that it should already have combined those visits into one history. If a provider has since closed, the registry may still hold whatever they reported before they shut down. For doses that were never reported, you may have to find paper records or get titer testing to confirm immunity.

Automatic Enrollment and Your Right to Opt Out

Arkansas follows what the CDC calls an implicit consent with opt-out model. Children’s vaccination data is entered into WebIZ automatically unless a parent or guardian opts out, and adults are included the same way unless they opt out themselves.5Centers for Disease Control and Prevention. IIS Policies: Arkansas Most Arkansans have a record whether they’ve thought about it or not.

The opt-out process is governed by the State Board of Health’s Rules and Regulations Pertaining to Immunization Reporting.5Centers for Disease Control and Prevention. IIS Policies: Arkansas Weigh the trade-off before you do it. Once you opt out, your provider can’t pull a consolidated record for you, which usually means more paperwork when you enroll a child in school or need to prove vaccination status for a job.

Who Else Can See Your Record

WebIZ discloses information only to authorized persons, and the State Board of Health’s rules set who qualifies.1Arkansas Department of Health. About WebIZ – Arkansas Immunization Information System The general categories:

  • Parents and guardians can access a child’s record and use it as official documentation for school or daycare.
  • Adults can request their own history.
  • Healthcare providers can look up your history before giving another vaccine, which helps avoid duplicate doses.
  • Schools and childcare facilities can verify compliance. Arkansas law bars admitting a child to a public or private school or childcare facility without age-appropriate immunizations documented by a physician’s certificate or a public health department record.6Justia. Arkansas Code 6-18-702 – Immunization

The school enrollment statute also builds in tracking for children with exemptions so the state can act during an outbreak.6Justia. Arkansas Code 6-18-702 – Immunization

Privacy Rules and Penalties for Misuse

WebIZ is confidential by design. The State Board of Health sets the rules on storage, access, and sharing, and disclosures are logged.1Arkansas Department of Health. About WebIZ – Arkansas Immunization Information System On top of that, immunization records are protected health information under HIPAA, so hospitals, clinics, pharmacies, and insurers must follow federal privacy rules when they handle registry data.

One important carve-out makes the whole system possible. HIPAA lets providers share vaccination data with the registry without your individual authorization, because state immunization registries qualify as public health authorities collecting information to prevent and control disease.7eCFR. 45 CFR 164.512 – Uses and Disclosures for Which an Authorization or Opportunity to Agree or Object Is Not Required That is why your doctor doesn’t have to ask you before reporting a shot.8Centers for Disease Control and Prevention. HIPAA Overview and Vaccine Administration

Schools sit under FERPA, which generally requires parental consent before releasing personally identifiable student information. During an actual or imminent health emergency such as a disease outbreak, administrators may share student information with appropriate parties without consent, but only for the duration of the emergency.9U.S. Department of Education. When Is It Permissible to Utilize FERPA’s Health or Safety Emergency Exception for Disclosures

Unauthorized access or disclosure of immunization data carries federal criminal penalties that scale with intent:

  • Knowing violation: up to $50,000, up to one year in prison, or both.
  • Violation under false pretenses: up to $100,000, up to five years in prison, or both.
  • Violation with intent to sell, transfer, or use the information for commercial advantage, personal gain, or malicious harm: up to $250,000, up to ten years in prison, or both.10Office of the Law Revision Counsel. 42 USC 1320d-6 – Wrongful Disclosure of Individually Identifiable Health Information

Separate civil penalties also apply to HIPAA-covered entities that fail to safeguard protected health information, and those fines scale with whether the violation stemmed from ignorance, reasonable cause, or willful neglect.

Moving To or From Arkansas

The Department of Health participates in data-sharing arrangements with other state, federal, and local health authorities, and the CDC’s Immunization Information Systems framework helps coordinate across borders.11Centers for Disease Control and Prevention. IIS Policy and Legislation Practically, though, records don’t jump between states on their own. If you moved to Arkansas from elsewhere, your prior vaccinations may not appear in WebIZ until you provide documentation that an Arkansas provider can enter. If you’re leaving the state, request a copy of your WebIZ record before you go, because there’s no guarantee the next state can pull it electronically.