5 ms·

I always wonder if it is legal for doktors to use microsoft software: In my country, the medical secret is absolute, which means giving or taking medical data t

I always wonder if it is legal for doktors to use microsoft software: In my country, the medical secret is absolute, which means giving or taking medical data to anybody not strictly needing it is a crime. So if a medical program crashes and telemetry picks up medical data in a dump, the doktor commits a crime, as does any microsoft employee reading that dump. I guess the only reason the court doesn't do anything, is thete is no smoking gun. So one day, someone will notice and then it all comes crashing down.

mcny 7y ago
I don't know. I've long argued possession of data should never be a crime, even if the data contains evidence of crimes including crimes committed on human children. To say a Microsoft employee who sees medical data is committing a crime would probably make me a hypocrite. I think there should be some accountability but that should be at the top of an organization, not (just) the foot soldiers.
- jplayer01 7y ago
  I'd say one of the problems is that often, the heads of an organization are almost never held to account. This is particularly the case when it comes to American companies, as we've seen in the case of Zuckerberg. Maybe if the front line felt the pain in some way, there'd be more pressure to change the internal culture. I don't see any easy solutions here, unfortunately, while companies make insane amounts of money off of violating our privacy and our right to control our own data.
zelphirkalt 7y ago
I really hope that it will one day all break down as you describe, because without any big event people will not wake up or get educated about this stuff. There need to be some examples made by the arm of the law. In the verdict it should say, that some people traded medical secrets for their own comfort. Not the people who use the system unknowingly, but the people, who carelessly put it in place, should be prosecuted.
corin_ 7y ago
> as does any microsoft employee reading that dump. Is it illegal to accidentally receive medical data, if there's no evidence that Microsoft (or whomever) hasn't asked for it or specifically marketed themselves as being compliant with medical data laws (not that I know whether or not they have made that claim in various jurisdictions)?

mcny 7y ago

I don't know. I've long argued possession of data should never be a crime, even if the data contains evidence of crimes including crimes committed on human children. To say a Microsoft employee who sees medical data is committing a crime would probably make me a hypocrite. I think there should be some accountability but that should be at the top of an organization, not (just) the foot soldiers.

jplayer01 7y ago
I'd say one of the problems is that often, the heads of an organization are almost never held to account. This is particularly the case when it comes to American companies, as we've seen in the case of Zuckerberg. Maybe if the front line felt the pain in some way, there'd be more pressure to change the internal culture. I don't see any easy solutions here, unfortunately, while companies make insane amounts of money off of violating our privacy and our right to control our own data.

zelphirkalt 7y ago

I really hope that it will one day all break down as you describe, because without any big event people will not wake up or get educated about this stuff. There need to be some examples made by the arm of the law. In the verdict it should say, that some people traded medical secrets for their own comfort. Not the people who use the system unknowingly, but the people, who carelessly put it in place, should be prosecuted.

corin_ 7y ago

> as does any microsoft employee reading that dump. Is it illegal to accidentally receive medical data, if there's no evidence that Microsoft (or whomever) hasn't asked for it or specifically marketed themselves as being compliant with medical data laws (not that I know whether or not they have made that claim in various jurisdictions)?