3 ms·
You are correct, but despite the article's misunderstanding of HIPAA they are covered by it. The incident is being investigated by HHS, as opposed to the FTC wh
by lmkg 4y ago
You are correct, but despite the article's misunderstanding of HIPAA they are covered by it. The incident is being investigated by HHS, as opposed to the FTC who dealt with the (non-HIPAA-covered) GoodRx incident from like yesterday.
According to HHS incident listing[1], the are a Business Associate. This means they handle patient data because they are contracted to do so by a HIPAA-covered entity. I've never heard of Cerebral before (and hopefully I won't again), but that likely means that their customers are the hospitals.
[1] https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
- jonathankoren 4y ago> I've never heard of Cerebral before (and hopefully I won't again), but that likely means that their customers are the hospitals. Cerebral is a mental health therapy app, but unlike most apps, they also prescribed medicine until very recently. They stopped after the FDA started investigating them for being a pill mill for schedule II controlled substances like adderall (ie amphetamine salts) https://www.theverge.com/2022/5/9/23063356/cerebral-telehealth-prescriptions-investigation-adhd-adderall-doj-dea https://www.theverge.com/2022/5/9/23063356/cerebral-teleheal...
- matheusmoreira 4y agoA corporation prescribing amphetamines? No doctors involved at all? How is that possible?
- prepend 4y agoDoctors were involved all right, thus the “pill mill” part.