Yes, The name and date of birth are linked to a number of vaccinations, AND the exact vaccine, AND date it was administered, AND the country it was administered, (I also now have a good guess about you nationality) AND the disease the vaccine works against.

Do you really need to know the last four if you all you really want to know if the identified person should be granted access?

But that’s the exact information I want to pass to someone?

I’m not sure how else to give someone the information that person X has had vaccine Y, other than actually transmitting that exact information?

Yes, it’s (slightly) sensitive information. But if one decides that we want to have a system based on this exact information, and it had to be “offline capable”, what are the options?

> Do you really need to know the last four if you all you really want to know if the identified person should be granted access?

If the requirements are that verifiers must themselves be able to decide which vaccines are acceptable, number of doses or time since last dose, and which issuers are allowed, then yes.