3 ms·

This seems like a five alarm fire for HIPPA, is there something I’m missing?

• loeg 1y ago
  It's HIPAA.
  • adzm 1y ago
    The HIPAA hippo certainly encourages this confusion
  • ivewonyoung 1y ago
    It's HIPPA now for all intensive purposes.
    • FergusArgyll 1y ago
      For all intents and purposes
      • deleted 1y ago
        [deleted]
• Spooky23 1y ago
  It’s a bug. He reported it, they fixed it. It is not a five alarm fire for HIPAA. HIPAA doesn’t require that all file access be logged at all. HIPAA also doesn’t require that a CVE be created for each defect in a product. End of the day, it’s a hand-wavy, “look at me” security blog. Don’t get too crazy.
  • waffleiron 1y ago
    I am more on the privacy side of things like HIPAA, but I would like to link the following. https://www.hhs.gov/sites/default/files/january-2017-cyber-newsletter.pdf https://www.hhs.gov/sites/default/files/january-2017-cyber-n...
    • Spooky23 1y ago
      There’s discretion in reasonable and appropriate. Biggest thing is to have plan and policy. I’d agree in general that more audit is better.