4 ms·

I’ve never worked anywhere it wasn’t taken extremely seriously either, but I think this is the big news story that HHS is responding to: https://themarkup.org/p

by wswope 4y ago

I’ve never worked anywhere it wasn’t taken extremely seriously either, but I think this is the big news story that HHS is responding to: https://themarkup.org/privacy/2022/12/13/out-of-control-dozens-of-telehealth-startups-sent-sensitive-health-information-to-big-tech-companies https://themarkup.org/privacy/2022/12/13/out-of-control-doze.... Classic tale of VC-backed “startups” going the Uber/Airbnb route and deciding the established rules aren’t worth following.

Nextgrid 4y ago
> Classic tale of VC-backed “startups” going the Uber/Airbnb route and deciding the established rules aren’t worth following. As long as penalties are lower than the profits (and no execs go to jail), the rules aren't actually worth following. Maybe the real innovation of the tech sector in the last decade is figuring out that established laws aren't actually enforced anywhere well enough so you may as well break them.
malisper 4y ago
It's not just start ups here. Lots of hospitals and hospital groups have trackers like Google Analytics installed on their website. From the HHS[0] in many cases this is considered sharing health information with Google: > For example, tracking technologies could collect an individual’s email address and/or IP address when the individual visits a regulated entity’s webpage to search for available appointments with a health care provider. In this example, the regulated entity is disclosing PHI to the tracking technology vendor, and thus the HIPAA Rules apply.