3 ms·

NHS trusts shared patient data with Facebook without consent

• seanhunter 3y ago
  The data includes granular details of pages viewed, buttons clicked and keywords searched. It is matched to the user’s IP address ... and in many cases details of their Facebook account. The ICO (UK data protection regulator) is investigating and it seems the data shared includes "special category" health data which cannot be legally shared with any third parties without explicit consent.
• lostlogin 3y ago
  Do companies like Facebook have any process for deleting data which is obviously private and should not have been shared?
  • seanhunter 3y ago
    Under California law (ccpa) and eu laws (gdpr) they should have (I believe). The question is how diligent and proactive they are or do they wait for a deletion request. I suspect they wait.