4 ms·
Having worked in healthcare tech for over a decade, it's extremely common for healthcare facilities to send medical records over fax. HIPAA and BAAs are for la
by infamouscow 4y ago
Having worked in healthcare tech for over a decade, it's extremely common for healthcare facilities to send medical records over fax.
HIPAA and BAAs are for lawyers to argue about after your medical records has been exposed, and if attempts to remedy the situation deteriorate.
- ealexhudson 4y agoYou're allowed to assume the phone network is not being eavesdropped, you're not allowed to assume that for Internet transmission. Whether that's true or not, that's the accepted position. If this encryption genuinely allows structural data retrieval - eg common invoice templates or medical reports - then this is absolutely a HIPAA problem, and once a facility is made aware of it they would need to respond. FWIW, this message encryption is also accepted by UK NHS, in fact it's virtually the standard. The mitigating factor is that typically the user is fully authenticated before being allowed to access the encrypted data...
- tomnipotent 4y agoExplain to me how this is a bigger risk than just physical burglary and stealing a computer with encrypted drives? The effort required to MITM and take advantage of this exploit is considerably more costly and time-consuming than just breaking into a building. AS OP mentioned, this is not about assumptions but laws and their interpretation during consideration in a court of law.