While both the European Union and China are committed to moving ahead with "vaccine passports," a government-mandated system for citizens to prove they’ve been inoculated against COVID-19 could be complicated to carry out in the U.S. because of privacy, equality, and practical concerns.

This week, European Commission president Ursula von der Leyen said the EU would propose a “digital green pass” for EU citizens. China’s government said it intended to develop a certification program for citizens to show proof of vaccination or negative test results. And in February, Israel initiated its “Green Badge” system to exclude non-vaccinated individuals from certain activities.

While some experts say there's a chance the U.S. government could pull off a successful and legal certification scheme, data privacy and anti-discrimination hurdles, as well as technical ones, could make a federal vaccine passport system tough to impose on Americans.

“It would be extraordinarily difficult in the U.S.,” Georgetown Law professor Lawrence O. Gostin said about the government adopting a certification system aimed at restraining Americans’ liberties absent proof of COVID-19 vaccination.

“How can we assure this information is held private, and it won’t be given out to police, employers, immigration, or other places?” Gostin asked.

And with a vaccine passport system, he added, enormous privileges automatically extend to privileged populations that often have greater access to vaccines, opening the door to potential discrimination claims.

“Do we really want to give already very privileged people more privilege, while the poor and racial minorities are left behind? Racial minorities have been vaccinated at much lower rates, and they're also distrustful of vaccines, and so it puts them at a disadvantage,” Gostin said.

Experts who Yahoo Finance spoke with agree that one of the most robust U.S. laws protecting health information, the Health Insurance Portability and Accountability Act, known as HIPAA, would unlikely come into play under a government mandated vaccine credentialing program.

"The reason HIPAA's not relevant is because it applies to doctors, hospitals, health insurers, basically," Kirk J. Nahra, a data privacy lawyer and partner with WilmerHale, said. "And for an employer, the only way to be relevant is if they learned that somebody had tested positive because they submitted an insurance claim to the employee health benefits program."

'They could easily wipe away any federal challenges to privacy'

Technically, there may be no legal barrier preventing federal and local governments from adopting a vaccine passport requirement, Harvard Law School professor and health law policy expert Glenn Cohen told Yahoo Finance.

“It’s hard to think that would violate any existing law,” Cohen said. Even so, he explained, Congress could use its vaccine certification legislation to supersede potentially contravening federal laws, including HIPAA, the Americans with Disabilities Act (ADA), or the Genetic Information Nondiscrimination Act (GINA).

“As long as Congress was clear enough about it, they could easily wipe away any federal challenges to privacy,” Cohen said. “And that’s true with other laws.”

The government has a lot of flexibility when enacting laws to protect the public health, Nahra said. Privacy concerns would most likely arise based on how the government uses the health data it collects, how it stores and transmits the information, and who can access it, he said.

As for discrimination concerns, he said, governments would need a strong enough justification concerning the public health condition to back up excluding unvaccinated Americans from particular places or activities. If a court were ruling on whether exclusions were legal, he said, it would likely turn on the extent of the exclusion.

“Okay, you don't have [the vaccine]? Therefore what?” Nahra asked to illustrate the point. “If the answer is you can't leave your house, there's going to be various constitutional challenges. If you can't go on public transportation, maybe that's more legitimate.”

New York Governor Andrew Cuomo has already rolled out a pilot certification program developed in partnership with IBM (IBM) called the “Excelsior Pass," which allows people to upload recent COVID-19 negative test results or vaccine status and in exchange receive a mobile or printable QR code. While the state has not mandated the pass, it could test legal boundaries.

According to Cuomo, the pass is intended to help major stadium venues comply with a mandate to ensure that staff and spectators receive a negative COVID-19 PCR test within 72 hours of an event. The system has been tested at Barclays Center and Madison Square Garden.

'It's not just between me and the airline'

Private entities, on the other hand, may have broader flexibility to refuse service to the unvaccinated.

Already, employers and businesses are requiring workers and customers to submit to temperature checks and health questionnaires, and offering workers perks in exchange for getting vaccinated. Some businesses are now mulling whether to require that employees become vaccinated before returning to work.

Still, the experts said, laws and guidance covering employer-employee relationships do little to sort out the duties that private businesses — such as retail stores, airlines, hotels, sports and concert venues — owe to the broader public.

“What we're learning with COVID, is that it’s not just between me and the airline,” Nahra said. “There are a whole bunch of other people that have an interest in my information, as well, right? All the other passengers."

A more likely potential roadblock, absent Congress' override, Cohen said, is the ADA, which requires employers to accommodate workers who can't get vaccines due to health concerns, and Title VII of the Civil Rights Act that protects employees who refuse vaccines over religious objections. The ADA also prohibits certain businesses generally open to the public — such as restaurants, movie theaters, schools, day cares, recreation facilities, and doctors' offices — from discriminating based on disability.

So how do private businesses weigh the risk of shutting their doors and services to those who either can't or won't get vaccinated? And how much information about a customer's vaccination or COVID-19 test history can they share with other customers?

"Our laws don’t deal with that...There’s a gap in the law,” Nahra said.

Alexis Keenan is a legal reporter for Yahoo Finance and former litigation attorney.

Follow Alexis Keenan on Twitter @alexiskweed.

Read more:

Coronavirus scams are on the rise — here's how to spot them

The digital divide is blocking people from getting vaccines

Employer perks for COVID-19 vaccinated workers could draw legal challenges