10 ms·
> The HIPPA rules on health data are fairly strict Depends on how you define "strict". They're pretty onerous to comply with, but they don't really provide pat
by chimeracoder 2y ago
> The HIPPA rules on health data are fairly strict
Depends on how you define "strict". They're pretty onerous to comply with, but they don't really provide patients with anywhere near the level of protection that most people think. It's better than nothing, but in reality, your data is being legally shared with an arbitrary number of entities, without your consent, and without any way for you to even know who has access to that data.
If that data is breached in any way, in theory the reports are supposed to trickle up the chain eventually. In practice? If it's more than one or two subcontractors deep, you'll probably never find out (unless the breached data is posted publicly and you stumble upon it that way).
Also, the cap on penalties is shockingly low: $2 million for all violations of a given provision per calendar year. And that's for willful neglect. If the cause of the violation is determined to be lower than willful neglect, the maximum violation is even lower.
For a very large and well-capitalized company, that might as well be a cost of business.
- peteradio 2y ago> your data is being legally shared with an arbitrary number of entities And ILLEGALLY shared via non-conformance with federal laws and data breaches. Just look at the Boeing fiasco and the serious normalization of deviance. You think that doesn't happen when you outsource your entire IT operations offshore to a populace that literally has zero skin in the game.
- benmanns 2y agoAnd what is your recourse? There's no private cause of action for HIPAA violations.
- adzm 2y agoFinally someone uses the correct acronym
- tiahura 2y agoBingo. As a new ambulance chaser, I was having some real difficulty getting the medical records for a client - no response for weeks and weeks and weeks. Aha! I thought. HIPAA gives them 30 days(sortof). We'll sue, and surely there's an attorney fee provision in there. Easy money. GOOGLE Wait what? No private cause of action! All I can do is file a complaint with HHS! That said, depending on your state, you may be able to make some sort of colorable common-law claim.
- randomdata 2y ago> GOOGLE Maybe ChatGPT would have given you a more favourable answer?
- forgetfreeman 2y agoSeems unlikely since at it's absolute best it's merely synthesizing a mashup of the same information that feeds Google search, and that's assuming it doesn't start seeing shit. Better to go directly to the source so you can at least make an attempt at vetting the credentials/expertise level that went into the information you're viewing instead of guessing how many mommy blogs, spam mills, and reddit comments got sucked into the intake in the process of producing whatever ChatGPT just coughed up.
- randomdata 2y agoGoing directly to the source did not provide a favourable answer. Did you somehow miss reading the thread before you replied?
- forgetfreeman 2y agoK so given a situation where no credible information is available on the net a system that synthesizes information taken from the net is going to produce credible information through what mechanism exactly?
- randomdata 2y agoWhy not just read the thread before replying?
- deleted 2y ago[deleted]
- tiahura 2y agoPerhaps, but this was pre-transformers.