3 ms·

Did you read the second comment on that link from Spooky23? It is legal. Also the second linked article ascribes to the practice being legal. It was a Propublic

Did you read the second comment on that link from Spooky23? It is legal. Also the second linked article ascribes to the practice being legal. It was a Propublica report.: "Yes, you are. The events surrounding what happened to my wife was very painful (an ectopic pregnancy that nearly killed her), and a thoughtless reminder was very unwelcome. I still feel violated and betrayed. In our case, I found out the marketing list from Enfamil and bought it for my zip code. _I complained to the hospitals’ privacy officer and the state regulator and found that everything was legal._ There is a lot of data on the topic... Prescriptions: https://www.theguardian.com/technology/2017/jan/10/medical-d... https://www.theguardian.com/technology/2017/jan/10/medical-d.... Linkage to lifestyle data: https://www.statnews.com/2018/07/18/health-insurers-personal... https://www.statnews.com/2018/07/18/health-insurers-personal.... In our case, the hospital pharmacy issued drugs to her indicative of a pregnancy. The pharmacy or insurer provides that information in real time to data brokers. The pharmaceutical companies assign quotas and send salespeople for certain drugs. There are other ways for data to get out that we’re not certain of. Perhaps the insurer “anonymizes” and sells subrogation information. Or the lab. In any case, they knew that my wife was admitted to an OB floor of a hospital, but didn’t know the outcome. It’s not going away. The US government uses these same techniques with companies like Google to combat extremism or terrorist conversions — they actually use factors like this to target potential recruits with counter-information via ads. "

dragonwriter 7y ago
> Did you read the second comment on that link from Spooky23? Yeah, as you can tell by the fact that I responded to the post pointing out that the two people complained to were: (1) A person whose job it is to make sure the hospital doesn't get sued, who is never going to admit wrongdoing, and (2) An official from the wrong agency (and even the wrong government) when it comes to the law in question. Also, note that the link you've copied that isn't a 404 is only tangentially related, as it is about gathering and sharing data that never comes under the protection of HIPAA, not resharing PHI as addressed in spooky23’s post, which again is a different issue than reidentification of HIPAA deidentified data that I was responding to here. There are lots of different issued around health data, and or isn't helpful to conflate them, much less to hurl abuse at people for failing to conflate the different issues.

dragonwriter 7y ago

> Did you read the second comment on that link from Spooky23? Yeah, as you can tell by the fact that I responded to the post pointing out that the two people complained to were: (1) A person whose job it is to make sure the hospital doesn't get sued, who is never going to admit wrongdoing, and (2) An official from the wrong agency (and even the wrong government) when it comes to the law in question. Also, note that the link you've copied that isn't a 404 is only tangentially related, as it is about gathering and sharing data that never comes under the protection of HIPAA, not resharing PHI as addressed in spooky23’s post, which again is a different issue than reidentification of HIPAA deidentified data that I was responding to here. There are lots of different issued around health data, and or isn't helpful to conflate them, much less to hurl abuse at people for failing to conflate the different issues.