3 ms·
Right but the hackers are not covered entities.
by theGnuMe 3y ago
Right but the hackers are not covered entities.
- deathanatos 3y agoThat's not how HIPAA works. 23andme would be, or would not be, the covered entity, and the entity bound by HIPAA.
- theGnuMe 3y agoI dunno, they offer blood tests ordered by a clinician. That probably creates a covered entity.. then the hackers get the phi data, they for sure do not have a business associates agreement with 23andme. May only matter for the blood draws.