5 ms·
I disagree. You need to have a definition of health information that falls under HIPAA. That definition is PHI because it’s literally Protected by HIPAA. Call
by ryanSrich 6y ago
I disagree.
You need to have a definition of health information that falls under HIPAA. That definition is PHI because it’s literally Protected by HIPAA.
Calling any health information “PHI” bakes in bad assumptions by both parties.
The data my phone gathers on me is the same data my doctor might. It’s PHI when my doctor generates and stores that data. It’s not when I do it. This is a good distinction.
- PeterisP 6y agoThe way I see it, while the distinction you describe is correct, there's a reasonable desire that this distinction should not exist and if some app on your phone collects private health data then that data should get the same protections as if your doctor collected it; and if the app developer wants to store and process that data then they'd better be able to comply with HIPAA-like requirements or stop handling sensitive data. It's not like it currently is, but we can try and get there.