I’ve spent a bunch of time with HIPAA. It’s a lot less protective than most people think. Practically (though it’s more nuanced), if data is truly anonymous, t

I’ve spent a bunch of time with HIPAA. It’s a lot less protective than most people think. Practically (though it’s more nuanced), if data is truly anonymous, they can use it however they want. The challenge is getting data to be truly anonymous. It’s very difficult once you want to identify geographic or regional data. Age, gender, and zip code creates plausible identity in many places.