3 ms·
If Google is getting Protected Health Information (names, addresses, dates, etc.) from providers then they have to sign a Business Associate Agreement, which ef
by noelsusman 7y ago
If Google is getting Protected Health Information (names, addresses, dates, etc.) from providers then they have to sign a Business Associate Agreement, which effectively makes them a covered entity under HIPAA. They would be criminally liable for any misuse of the data, which would include using it to inform their advertising.
Using the data to create a model for use at the providers would be a clearly proper use of the data. That's standard practice across the industry.
- throwGuardian 7y agoWhat about Google employees looking for damaging data on adversaries? Or stalkers, looking for information on particular individuals without consent. Why does Google get PII?
- dimator 7y agoTo take your argument to its conclusion, what if someone at Ascension wanted damaging information on one of its patients? They'd be legally liable. Same as those they sign BAA with.
- noelsusman 7y agoThose are both illegal as well, and the employees who did that would be held personally liable.