3 ms·
That's not how HIPAA works. 23andme would be, or would not be, the covered entity, and the entity bound by HIPAA.
by deathanatos 3y ago
That's not how HIPAA works. 23andme would be, or would not be, the covered entity, and the entity bound by HIPAA.
- theGnuMe 3y agoI dunno, they offer blood tests ordered by a clinician. That probably creates a covered entity.. then the hackers get the phi data, they for sure do not have a business associates agreement with 23andme. May only matter for the blood draws.