4 ms·
Surely this would be a violation of HIPAA, Privacy and any number of state laws. You can't just give out confidential employee records to third parties.
by threeseed 2y ago
Surely this would be a violation of HIPAA, Privacy and any number of state laws.
You can't just give out confidential employee records to third parties.
- ceejayoz 2y agoNone of these parties are subject to HIPAA.
- threeseed 2y agoEmployee health records are often stored in third party systems that are subject to HIPAA. Point is that Automattic would have full access to this as well.
- ceejayoz 2y agoThose providers may be subject to it. Attempts to go fishing in such records would be pretty unlikely to succeed; it'd be an uneforcable request contrary to public policy, with no relevance to such an audit. It would be correctly and easily fought.