Posted by ZeidJ 5 days ago
Okay. That's not much of a signal, is it? This is "metadata" level of detail.
It's just by default nobody really wants to give up disk space so you can do better ad tracking so the banner is necessary to convince them to.
Also, I believe (but am not certain) that if there was any criminal case, it would be leadership (C*O) not individual software engineers who would be charged. This is speculation on my part, if anybody has clear facts I'm happy to hear them.
https://www.hhs.gov/hipaa/for-professionals/privacy/laws-reg...
You have to explicitly grant permission for your data to be sold. What's very likely is that either the healthcare provider or insurance company included a request for authorization to sell that data, and the authorization was signed without paying much attention to it.
Honestly, we're better off with it than without it, speaking as someone with exposure to that industry's internals. That act drives a lot of good security practice within the organizations (mostly liability shifting, but still good). Specifically, the fear it instills of ruinous penalties from regulators drives good practice adoption, IME.
Further, multiple crappy patient portals across providers is a crummy experience, but it's an improvement over the world where providers held the data hostage and had zero interest in accommodating your requests for it, or even the idea that you owned it.
(I work in healthcare-adjacent and have met with many lawyers and had to explain them all about "HIPAA compliance"; my comment was not made from ignorance, but practical experience based on learning about how the law is used. There is a privacy rule in it, but that was not the real intent of the law. The intent was to make it easy to keep your health care when you moved between jobs.)
I highlighted SirFatty's text, looked up on google and first result show it near verbatim on cdc.gov.
https://www.cdc.gov/phlp/php/resources/health-insurance-port...
To amend the Internal Revenue Code of 1986 to improve portability and continuity of health insurance coverage in the group and individual markets, to combat waste, fraud, and abuse in health insurance and health care delivery, to promote the use of medical savings accounts, to improve access to long-term care services and coverage, to simplify the administration of health insurance, and for other purposes.
2 relevant attributes as it turns out.
Why those questions, but no Danish vs non Danish, and so on?
2. even if they could, it would be pretty illegal, I think/hope, to then be like "Oh, well your sickle cell anemia is going to be paid for differently, because everyone knows black people statistically have more of that.
Why?