4 ms·
IP address, telephone number, city and other identifying information is ALL considered PII. I work with (adjacent industry) HIPAA protected data, which is cons
by spitfire 7y ago
IP address, telephone number, city and other identifying information is ALL considered PII.
I work with (adjacent industry) HIPAA protected data, which is considered PII by virtue of knowing Bob Smith is in the system. If they're under a BAA and sending that information to Facebook they're in violation.
If one of my sub-processors did this my lawyer would be livid. But hey, it's Silicon Valley, don't harsh their buzz man.
- sizzle 7y agoHow do you even report something this technical to non technical folks who oversee HIPAA? Would you have to do a case study style write up?