3 ms·

I got an automated message from my local states's department of health services. It simply said they're "trying to contact me and the interview will only take 5

I got an automated message from my local states's department of health services. It simply said they're "trying to contact me and the interview will only take 5 minutes." However, having not scheduled any interviews with the government I had no idea what they were talking about, so I chalked it up to spam or polling attempts and ignored several similar calls. I'm now wondering if it was an attempt at contact tracing. Had they simply stated what they wanted in the message I would have been pretty likely to call them back myself or answer a later call. I have no idea where they got my cell phone number from, but the whole thing seems poorly handled at best. Anyone with legitimate business will state the nature of that business and allow for a return call. There's just so many solutions to this problem but nearly zero aligned with incentives.

csense 6y ago
Privacy regulations (HIPAA) may forbid them from saying "Hey we think you might have COVID" on your voicemail, unless you've already filled out paperwork saying "It's okay to leave a message on my voicemail with detailed health information." Your doctor's office can do it because you probably have an existing patient relationship, and you already filled out that paperwork on your first visit. But in the situation of a cold-calling contact tracer, you haven't signed anything at all, so all they can say is "This is the health department and we want to talk to you."
reaperducer 6y ago
It simply said they're "trying to contact me and the interview will only take 5 minutes." Yep. That was probably about COVID. Health privacy laws prohibit even the vague mention of a condition. The caller has no way of knowing if they have the right phone number, and the last thing you want is "Attention, Rando McUltrarunner at 42 Crustacean Crest Drive, Cleveland, Ohio! You have been infected with COVID! Run, don't walk to your nearest testing facility!" on some stranger's voicemail. Or worse, "We are following up to see if you're doing well after your abortion" ending up on the voicemail or texting app of a 15-year-old girl whose parents might have access to her phone. Source: Recently completed my company's mandatory annual HIPAA training.
- seb314 6y ago
  how would authentication work when you/someone does pick up the phone?
  - reaperducer 6y ago
    Sadly, it breaks down. You ask someone if they are who they are, and that's about all you can do. Someone can lie. Has it ever happened? Probably, but I've never heard of it, and my legal department is pretty good about keeping up on these things. But the way the law is written, asking the question absolves the caller of legal liability. It's not IT-grade authentication, but for wetware it works.

csense 6y ago

Privacy regulations (HIPAA) may forbid them from saying "Hey we think you might have COVID" on your voicemail, unless you've already filled out paperwork saying "It's okay to leave a message on my voicemail with detailed health information." Your doctor's office can do it because you probably have an existing patient relationship, and you already filled out that paperwork on your first visit. But in the situation of a cold-calling contact tracer, you haven't signed anything at all, so all they can say is "This is the health department and we want to talk to you."

reaperducer 6y ago

It simply said they're "trying to contact me and the interview will only take 5 minutes." Yep. That was probably about COVID. Health privacy laws prohibit even the vague mention of a condition. The caller has no way of knowing if they have the right phone number, and the last thing you want is "Attention, Rando McUltrarunner at 42 Crustacean Crest Drive, Cleveland, Ohio! You have been infected with COVID! Run, don't walk to your nearest testing facility!" on some stranger's voicemail. Or worse, "We are following up to see if you're doing well after your abortion" ending up on the voicemail or texting app of a 15-year-old girl whose parents might have access to her phone. Source: Recently completed my company's mandatory annual HIPAA training.

seb314 6y ago
how would authentication work when you/someone does pick up the phone?
- reaperducer 6y ago
  Sadly, it breaks down. You ask someone if they are who they are, and that's about all you can do. Someone can lie. Has it ever happened? Probably, but I've never heard of it, and my legal department is pretty good about keeping up on these things. But the way the law is written, asking the question absolves the caller of legal liability. It's not IT-grade authentication, but for wetware it works.