2 ms·
> I see HIPAA violations at doctor’s offices all the time.. It’s very likely your aren’t seeing actual violations. These “violations” are likely considered inc
by briandear 7y ago
> I see HIPAA violations at doctor’s offices all the time..
It’s very likely your aren’t seeing actual violations. These “violations” are likely considered incidental uses and disclosures. https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/incidental-uses-and-disclosures/index.html https://www.hhs.gov/hipaa/for-professionals/privacy/guidance...
- specialist 7y agoThe biggest exemption was for us working on the systems. The idea that whispering in the waiting room was an important attack vector while whitelisting us IT people is hilarious. (For lack of a better adjective.) For a middle ground example: My SO did clinical trials at the local research hospital. She went to ANOTHER hospital for some surgery, because she knows her coworkers look up people's records, and she didn't want them knowing about her troubles. Like the systems I created, of course there were access logs. But like our systems, no one ever reviewed or audited them. Hopefully things have gotten better.