As long as its GDPR compliant... Seriously though, "vaccination is not mandatory but we keep a registry and we share it with partners, and it will have awesome

As long as its GDPR compliant... Seriously though, "vaccination is not mandatory but we keep a registry and we share it with partners, and it will have awesome data protection" sounds problematic - even if it were true that data protection is awesome, and even if there was a legal basis - what is shared, what is the data used for? Who is going to be considered a legitimate "partner"? I doubt politicians' capacity - worldwide - to ask the right questions and find good agreements.