3 ms·
If it contained phone numbers and Covid status, that’s a HIPAA concern no matter the intent or source of data.
by ABeeSea 6y ago
If it contained phone numbers and Covid status, that’s a HIPAA concern no matter the intent or source of data.
- dragonwriter 6y ago> If it contained phone numbers and Covid status, that’s a HIPAA concern no matter the intent or source of data. IIRC, it technically would not, as the public health authorities to which HIPAA allows disclosure for public health purposes are not themselves HIPAA covered entities, so any improper disclosures of data they hold are not HIPAA concerns (for state public health authorities, they would generally be covered by state privacy laws, though.)