When I got the PCR COVID test administered when I had a suspected case, I was required to fill out a form stating my name, DOB, email, phone, physical address, full social security number, and student ID (I'm a college student). Since these are all attributes bound to identity, I'm sure it's not too difficult to make a database of test results.