3 ms·

I would be be shocked if there aren't huge loopholes in GINA or they weren't doing this under the table. Like you sprinkle some derivatives of GI into your huge

I would be be shocked if there aren't huge loopholes in GINA or they weren't doing this under the table. Like you sprinkle some derivatives of GI into your huge model and then "our model assesses that risk XYZ is likely..." without ever mentioning GI to the customer. Our main healthcare "privacy" law in US, HIPAA, is structured to protect insurance firms' right to our private health data (while otherwise sensibly restricting access to it). It is not a given that private finance firms ought to have legally protected, virtually exclusive access to our sensitive health information, but they do in America. Facts like this make me skeptical that GINA was written and is enforced in good faith.

justrealist 3y ago
> I would be be shocked if there aren't huge loopholes in GINA or they weren't doing this under the table. Sorry but you have no idea what you are talking about. Big corporations are absolutely terrified of accidentally using health data illegally, no insurance company in the US would touch this with a 10000 foot pole.
- pphysch 3y ago
  > Big corporations are absolutely terrified of accidentally using health data illegally I am acutely aware of this, and am also aware that most "big corporations" have nothing to gain from mishandling/abusing PHI. But health insurance firms obviously do. Another notable analog is the credit reporting industry. Despite serious & repeated abuses of consumer financial privacy, these companies consistently get off with a slap on the wrist. And we're supposed to believe that their neighbors, the insurance industry, are good guys from a radically different paradigm?
  - justrealist 3y ago
    The liability difference between intentionally using health data illegally and being susceptible to a cyperbreach is not comparable. Can you find an example of a credit reporting company lying about what data went into their credit scores? That's the comparable violation.
    - pphysch 3y ago
      Credit scores, unlike healthcare plans, are not for consumers, they are for creditors. Consumer loans are the real analogy you are looking for. The domain of private financial & life info they have direct legal access to is pretty absurd. Many creditors will additionally ensure a background check of their customer prior to finalizing a loan. What "private" data remains sacred at this point? Why do we have regulations like ECOA in the first place? Because of many such abuses.

justrealist 3y ago

> I would be be shocked if there aren't huge loopholes in GINA or they weren't doing this under the table. Sorry but you have no idea what you are talking about. Big corporations are absolutely terrified of accidentally using health data illegally, no insurance company in the US would touch this with a 10000 foot pole.

pphysch 3y ago
> Big corporations are absolutely terrified of accidentally using health data illegally I am acutely aware of this, and am also aware that most "big corporations" have nothing to gain from mishandling/abusing PHI. But health insurance firms obviously do. Another notable analog is the credit reporting industry. Despite serious & repeated abuses of consumer financial privacy, these companies consistently get off with a slap on the wrist. And we're supposed to believe that their neighbors, the insurance industry, are good guys from a radically different paradigm?
- justrealist 3y ago
  The liability difference between intentionally using health data illegally and being susceptible to a cyperbreach is not comparable. Can you find an example of a credit reporting company lying about what data went into their credit scores? That's the comparable violation.
  - pphysch 3y ago
    Credit scores, unlike healthcare plans, are not for consumers, they are for creditors. Consumer loans are the real analogy you are looking for. The domain of private financial & life info they have direct legal access to is pretty absurd. Many creditors will additionally ensure a background check of their customer prior to finalizing a loan. What "private" data remains sacred at this point? Why do we have regulations like ECOA in the first place? Because of many such abuses.