Prescott told reporters it wasn’t “exactly important” whether he was. Then he said, “I think that’s HIPAA.”

HIPAA is short for the Health Insurance Portability and Accountability Act, a federal statute. Within the act are protections for patients against health care providers disclosing personal information without their knowledge or consent. From the U.S. Department of Health and Human Services website:

Prescott invoking HIPAA to evade a yes-or-no question about the vaccine is far from a correct application. 

MORE: New rules have big implications for teams with lowest, highest vaccination rates

His answer sure couldn’t protect him from the Twitter jokes that followed:

There were serious tweets, too, as people took the non-answer to mean that Prescott is unvaccinated. There was also support for Prescott declining to disclose personal information.

Vaccines are a hot-button topic in the NFL on the eve of training camps starting. The league told teams Thursday that if a game is postponed because a team has a COVID-19 outbreak among unvaccinated players and cannot be rescheduled, then the team with the outbreak will lose the game by forfeit and that players on both teams will not be paid for the game.

Cardinals wide receiver DeAndre Hopkins then said on social media that he didn’t want the vaccine, before saying he had “about 9 more years in me,” in a reference to his football career.