5 ms·
> HIPAA only keeps healthcare providers from sharing your information. It's not an omnibus shield for your health information. Maybe not, but GDPR sure is.
by hnarn 7y ago
> HIPAA only keeps healthcare providers from sharing your information. It's not an omnibus shield for your health information.
Maybe not, but GDPR sure is.
- korzun 7y agoCertainly not the case with GDPR either.
- drusepth 7y agoIs it really? If Alice tells Bob she has diabetes and Bob tells Charlie, is Bob in violation of GDPR?
- nudded 7y agoNo, GDPR does not apply between 2 persons.
- hnarn 7y ago> Individuals can also face fines for GDPR violations if they use other parties' personal data for anything other than personal purposes. https://www.coredna.com/blogs/gdpr-fines https://www.coredna.com/blogs/gdpr-fines
- nocturnial 7y agoAre Bob and/or Charlie the name of a person or of a company? How you're using it, it sounds like Bob or Charlie in your mind is a person. I might be wrong in interpreting it that way. If so could you give another example where Bob and Charlie are companies and the information of Alice is part of a transaction.
- drusepth 7y agoGP's comment paints Alice/Bob/Charlie as people: >If Alice tells her coworker Bob that she had diabetes, it's not a HIPAA violation for Bob to tell Charlie. I was responding to the parent comment's claim that it's not a HIPAA violation but rather a GDPR violation.