5 ms·

If they have evidence that it’s true (not saying they do), then it doesn’t matter what the original warrant says. Replace government with Apple or Microsoft or

If they have evidence that it’s true (not saying they do), then it doesn’t matter what the original warrant says. Replace government with Apple or Microsoft or Amazon customer data. How fast would you be arrested and sued if you left those companies with a spreadsheet of customer data on a personal device? Edit: Especially as a data scientist. You are given access to some these companies most secret data. If she actually did this, I wouldn’t hire her.

shakna 6y ago
> How fast would you be arrested and sued if you left those companies with a spreadsheet of customer data on a personal device? Plenty of companies, and especially government bodies, fail to clean devices correctly when employees leave. This could be nothing more than an undeleted email that was part of her work. Or something mistakingly sent to the wrong employee that she failed to delete.
- ABeeSea 6y ago
  If it contained phone numbers and Covid status, that’s a HIPAA concern no matter the intent or source of data.
  - dragonwriter 6y ago
    > If it contained phone numbers and Covid status, that’s a HIPAA concern no matter the intent or source of data. IIRC, it technically would not, as the public health authorities to which HIPAA allows disclosure for public health purposes are not themselves HIPAA covered entities, so any improper disclosures of data they hold are not HIPAA concerns (for state public health authorities, they would generally be covered by state privacy laws, though.)
tw04 6y ago
She was fired in May of 2020. They claim she downloaded it in November. So either the accusation was she hacked into their systems (which they conveniently aren't claiming), the doc was publicly accessible (in which case I'd question what the crime is), or they planted it and the claim she obtained it illegally is completely fabricated. Why do I get the feeling as more information comes out, we're going to find out this "600-700 sheets of paper" is an excel spreadsheet with COVID infection information that someone at the state forgot to sanitize before posting for public consumption? And we'll find out she did absolutely nothing wrong, and they're just grasping at straws to make her look bad in the public, hoping she'll go away.
- ABeeSea 6y ago
  Or government IT never revoked her credentials to some FTP or someone else sent her the file so she could keep working on her data project, etc. If the file was on a public website, then I hope the government smacks the prosecutor down hard. If the file contained citizen PII related to covid, I would hope it’s not on a public website. And if it did contain specific Covid infections for citizens, that’s a HIPAA violation for both her and the government agency if it was on a public website.
  - staticautomatic 6y ago
    There’s PII all over certain kinds of government websites.
- dragonwriter 6y ago
  > So either the accusation was she hacked into their systems (which they conveniently aren't claiming), the doc was publicly accessible (in which case I'd question what the crime is), or they planted it and the claim she obtained it illegally is completely fabricated. Or she was fired but her access wasn't terminated because their IT practices are crap, so it was accesses both knowingly without authority and without hacking, just like if physical access controls like keys and let adds weren't updated and she walked in and took confidential documents that she would previously have had lawful access to.

shakna 6y ago

> How fast would you be arrested and sued if you left those companies with a spreadsheet of customer data on a personal device? Plenty of companies, and especially government bodies, fail to clean devices correctly when employees leave. This could be nothing more than an undeleted email that was part of her work. Or something mistakingly sent to the wrong employee that she failed to delete.

ABeeSea 6y ago
If it contained phone numbers and Covid status, that’s a HIPAA concern no matter the intent or source of data.
- dragonwriter 6y ago
  > If it contained phone numbers and Covid status, that’s a HIPAA concern no matter the intent or source of data. IIRC, it technically would not, as the public health authorities to which HIPAA allows disclosure for public health purposes are not themselves HIPAA covered entities, so any improper disclosures of data they hold are not HIPAA concerns (for state public health authorities, they would generally be covered by state privacy laws, though.)

tw04 6y ago

She was fired in May of 2020. They claim she downloaded it in November. So either the accusation was she hacked into their systems (which they conveniently aren't claiming), the doc was publicly accessible (in which case I'd question what the crime is), or they planted it and the claim she obtained it illegally is completely fabricated. Why do I get the feeling as more information comes out, we're going to find out this "600-700 sheets of paper" is an excel spreadsheet with COVID infection information that someone at the state forgot to sanitize before posting for public consumption? And we'll find out she did absolutely nothing wrong, and they're just grasping at straws to make her look bad in the public, hoping she'll go away.

ABeeSea 6y ago
Or government IT never revoked her credentials to some FTP or someone else sent her the file so she could keep working on her data project, etc. If the file was on a public website, then I hope the government smacks the prosecutor down hard. If the file contained citizen PII related to covid, I would hope it’s not on a public website. And if it did contain specific Covid infections for citizens, that’s a HIPAA violation for both her and the government agency if it was on a public website.
- staticautomatic 6y ago
  There’s PII all over certain kinds of government websites.
dragonwriter 6y ago
> So either the accusation was she hacked into their systems (which they conveniently aren't claiming), the doc was publicly accessible (in which case I'd question what the crime is), or they planted it and the claim she obtained it illegally is completely fabricated. Or she was fired but her access wasn't terminated because their IT practices are crap, so it was accesses both knowingly without authority and without hacking, just like if physical access controls like keys and let adds weren't updated and she walked in and took confidential documents that she would previously have had lawful access to.