3 ms·
> I increasingly think we need personal criminal liability for everyone in the management chain before this will end. I work in healthtech and it is fascinatin
by Swizec 3y ago
> I increasingly think we need personal criminal liability for everyone in the management chain before this will end.
I work in healthtech and it is fascinating how seriously everyone takes HIPAA because it includes provisions for personal liability. Every instance of exposed data costs you personally $1000 or so.
All other regulations seem to be seen as “Ehhhh how close can we push it to reasonably claim we did the things?”. But with hipaa it’s different. The conversation is always “How much extra can we do to make sure nothing could possibly leak?”
Makes me wish GDPR and friends had the same teeth. Turns out even small teeth work great when they’re personal.
- jiggawatts 3y agoHere in Australia they updated the Privacy Act with personal liability for directors. I discovered that every one of my client organisations is exempt, because of course they are. Powerful people don’t go to jail, that’s for the common people. Exemptions were put in place for all government agencies, and charities. Turns out they many health-related business are actually technically non-profits. So your health data can leak and they just shrug their shoulders and move on as if nothing had happened.