3 ms·
IIUC, this is also an industry standard practice as long as it's covered by their BAA. The question would be whether the actual content in the BAA makes sense o
by summerlight 7y ago
IIUC, this is also an industry standard practice as long as it's covered by their BAA. The question would be whether the actual content in the BAA makes sense or not, but I think the requirement for a BAA is pretty specific.
https://www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html https://www.hhs.gov/hipaa/for-professionals/covered-entities...
- JohnFen 7y agoTo the best of my knowledge, the BAA has not been published, so we have no idea what it says. But what seems clear is that a ton of complete medical data, including names and other identifying data, has been handed to Google for its use in what sounds like training an ML system. That we don't know what restrictions are in place (if any) is a large part of why this is so alarming.
- deleted 7y ago[deleted]