"Businesses do have special considerations around discrimination outlined in the Americans With Disabilities Act and the Civil Rights Act, but these would not preclude a company from asking a customer or employee about vaccination status."
This needs to be changed either businesses can get all private health information or they can get none.
Our private information is not a candy in the candy shop so anybody can pick whatever he likes at the moment and "consume" it.
In Europe GDPR prevents private businesses to seek and gather any private health information from employees because there are many faces of discrimination not only vaccine one.