Guidelines on the data protection aspects related to the collection of employees’ COVID-19 vaccination status