social.coop

1 post1 participant0 posts today

Todd A. Jacobs | Pragmatic Cybersecurity<a href="https://mastodon.social/@Catawu" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Catawu</a> <a href="https://infosec.exchange/@briankrebs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@briankrebs</a> I’m not really interested in their frame of reference or what they think about the people impacted. That’s not because I don’t care, but because I think it's irrelevant to the deeper underlying issues.I’m actually more interested to what extent this situation may violate <a href="https://infosec.exchange/tags/HIPAA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HIPAA</a> and other <a href="https://infosec.exchange/tags/patientprivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#patientprivacy</a> laws. Part of the functional challenge in what is currently going on at the federal level is that many privacy and <a href="https://infosec.exchange/tags/healthcare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#healthcare</a> safeguards such as HIPAA are a complex mixture of laws passed by Congress and regulations defined by the executive branch to implement those laws.I am not a lawyer, but I do deal with <a href="https://infosec.exchange/tags/privacyregulations" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacyregulations</a> and <a href="https://infosec.exchange/tags/regulatorycompliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#regulatorycompliance</a> issues professionally. To the extent that the administration is arguing that they have constitutional authority to make changes to the implementations developed and overseen by the executive branch itself, the extent of what is being done seems unprecedented but may not be illegal per se. I am not qualified to make that determination, but I think it's the foundational question that needs to be asked.On the other hand, the parts of HIPAA and other federally-enacted laws regarding <a href="https://infosec.exchange/tags/healthcare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#healthcare</a> and privacy are in fact laws established within our country’s constitutional framework. The executive branch can’t simply wish clearly-established laws into the cornfield. Unfortunately, many laws leave a great deal of the implementation details—whether unintentionally or through deliberate delegation—to the executive branch, the states, or various regulatory agencies. In turn, many of those regulators also operate to one extent or another under the executive branch, and that further complicates the picture.Many federal laws leave a great deal of wiggle room for interpretation to the executive and judicial branches whether not by design, but congressionally-enacted laws and protections provided by the Constitution itself cannot simply be ignored. While there's definitely a difference, separating a "law" from the "regulations" that implement that law isn't necessarily a simple exercise.The real challenge is that our republic was designed as a Venn diagram of overlapping roles, responsibilities, and authority that were meant to operate in a state of carefully-balanced tension. The republic's framework has never been tested this broadly within my lifetime, if ever. Even though how our three branches of government should work is material covered in any decent highschool civics class, the complexity of statutory vs. regulatory authority requires legal and Constitutional scholarship that is more than the average citizen can bring to bear on the matter. I'd like to think I understand these issues better than most—and I certainly have my own personal and professional instincts about what's right and wrong—but I wouldn't dream of claiming to understand all the nuances involved.Professionally, I am taking a deliberately apolitical approach to what is a very legitimate set of questions about constitutional authority. Likewise, my apolitical but professional experience tells me that there is entirely too much gray area around the constitutional and legal topics to determine with certainty what is legal as opposed to what is moral or ethical. In my professional experience, what is right and what is lawful aren't always the same.Unless society as a whole is willing to revisit some of the underlying assumptions collectively made over the past several hundred years about the differences between legislative laws and the administrative regulations that implement them, this problem is unlikely to go away anytime soon. In fact, it is likely to spread to other areas with similar gray areas. As an argument by analogy, the current legal mess around <a href="https://infosec.exchange/tags/copyright" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#copyright</a> and <a href="https://infosec.exchange/tags/LLM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LLM</a> training may be similar in terms of being pure sophistry where the term "fair use" is clearly being used in an intellectually dishonest way, but apparently it's far enough into the gray to pass legal muster right now. Decades or centuries of legislative layering has led to a legal framework that never envisioned modern realities. Revisiting and revising centuries of legal accretion would require a strong moral compass, a great deal of political courage, and in-depth analysis by legal and constitutional scholars (among others) in order to address the very real institutional unraveling we're observing.Sadly, in a society that frequently classifies expertise as “elitism" such a brutally honest conversation is unlikely to happen soon. A broad reconsideration of how our republic was designed to function and a hard look at how it actually functions would require high levels of both personal and political courage. It's even less likely to be rapidly prioritized without sufficiently clear political self-interest from a majority of those with the remaining authority to materially affect the outcome.What I’ve said may strike some as political opinion rather than strictly analytical observation. However, my statements are deliberately based on well-established sociological and psychological norms rather than current politics. I feel confident in asserting that the likelihood of Congress or the Supreme Court—much less the general public—addressing these things effectively in the near term is essentially zero. For any elected or appointed official acting alone, the risk of asserting constitutional prerogatives vastly exceeds both the collective will of their respective institutions and the already-ceded institutional powers required to do so effectively.

Defensorum📋 HIPAA clarification: Can healthcare providers mention who their patients are? ⚕️ Understanding when patient identification crosses legal boundaries <a href="https://mastodon.social/tags/HIPAA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HIPAA</a> <a href="https://mastodon.social/tags/Compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Compliance</a> <a href="https://mastodon.social/tags/healthcare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#healthcare</a> <a href="https://mastodon.social/tags/PatientPrivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PatientPrivacy</a> <a href="https://www.defensorum.com/hipaa-violation-to-say-someone-is-your-patient/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.defensorum.com/hipaa-violation-to-say-someone-is-your-patient/</a>

Bo Morgan<a href="https://mastodon.social/@JeffC1956" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@JeffC1956</a> <a href="https://mastodon.social/@lemeteore" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@lemeteore</a> Have a look at HealthURL, which is an open source project for maintaining patient privacy with medical data on the Internet:<a href="https://healthurl.com/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://healthurl.com/</a> <a href="https://kolektiva.social/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a href="https://kolektiva.social/tags/medical" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#medical</a> <a href="https://kolektiva.social/tags/medicaldata" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#medicaldata</a> <a href="https://kolektiva.social/tags/patientprivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#patientprivacy</a> <a href="https://kolektiva.social/tags/healthurl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#healthurl</a> <a href="https://kolektiva.social/tags/health" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#health</a> <a href="https://kolektiva.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://kolektiva.social/tags/foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#foss</a> <a href="https://kolektiva.social/tags/floss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#floss</a>

Bo MorganHave a look at HealthURL, which is an open source project for maintaining patient privacy with medical data on the Internet:<a href="https://healthurl.com/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://healthurl.com/</a><a href="https://kolektiva.social/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a href="https://kolektiva.social/tags/medical" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#medical</a> <a href="https://kolektiva.social/tags/medicaldata" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#medicaldata</a> <a href="https://kolektiva.social/tags/patientprivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#patientprivacy</a> <a href="https://kolektiva.social/tags/healthurl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#healthurl</a> <a href="https://kolektiva.social/tags/health" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#health</a> <a href="https://kolektiva.social/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://kolektiva.social/tags/foss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#foss</a> <a href="https://kolektiva.social/tags/floss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#floss</a>

SubtleBlade ⚔️<a href="https://mastodon.scot/tags/PatientPrivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PatientPrivacy</a> fears as <a href="https://mastodon.scot/tags/US" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#US</a> <a href="https://mastodon.scot/tags/SpyTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SpyTech</a> firm <a href="https://mastodon.scot/tags/Palantir" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Palantir</a> wins £330m <a href="https://mastodon.scot/tags/NHSEngland" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NHSEngland</a> contractAwarding of contract to create new <a href="https://mastodon.scot/tags/data" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#data</a> platform prompts immediate concerns about <a href="https://mastodon.scot/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> of <a href="https://mastodon.scot/tags/MedicalRecords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MedicalRecords</a> <a href="https://www.theguardian.com/society/2023/nov/21/patient-privacy-fears-us-spy-tech-firm-palantir-wins-nhs-contract" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.theguardian.com/society/2023/nov/21/patient-privacy-fears-us-spy-tech-firm-palantir-wins-nhs-contract</a> <a href="https://mastodon.scot/tags/ToryPoliciesInAction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ToryPoliciesInAction</a> <a href="https://mastodon.scot/tags/DataPrivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataPrivacy</a> <a href="https://mastodon.scot/tags/NHS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NHS</a>

Michael Reeder LCPCPrivate, vetted email list for mental health professionals: <a href="https://www.clinicians-exchange.org" rel="nofollow noopener noreferrer" target="_blank">https://www.clinicians-exchange.org</a> Open LEMMY instance for all mental health workers: <a href="https://lem.clinicians-exchange.org" rel="nofollow noopener noreferrer" target="_blank">https://lem.clinicians-exchange.org</a> .TITLE: Good Therapy Credit Card Info and Security / 3rd Party TrackingYes, I actually do ask myself why I bother anymore, in case you are wondering.This stuff is so ubiquitous now as to be all but unavoidable.That said, perhaps multiple letters from their customers (such as the one below) might sway thinking?~~~~~~~~~~~~~~~~~~www.goodtherapy.orgDear Good Therapy Support: support@goodtherapy.orgI just updated my payment information with a new credit card.In order to do this, I had to turn off "Brave Shields" -- basically a web browser feature that blocks 3rd party tracking (cookies, web beacons, sending data out to outside URLs).  The web page would not display with shields up.*In payment transactions on multiple other websites I have NEVER had to turn off my 3rd party tracking blockers.** * This is disconcerting -- makes me wonder how secure your website is.Please consider changing this.~~~~~~~~~~~~~~~~~~~Also -- although I will never use your Good Therapy Verified Seal widget -- its abilities to collect data for tracking, analysis, and advertising from mental health websites is in very poor judgement.  This stops only just slightly short of a HIPAA violation as anyone looking at a therapist's website is certainly considering mental health help.  Data from multiple such widgets and trackers across websites is used all the time by 3rd party aggregators to discover the full name and identity of visitors.This is disappointing behavior that has lowered my trust in your organization.Thanks, Michael Reeder~~~~~~~ <a href="https://mastodon.clinicians-exchange.org/tags/psychology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#psychology</a> <a href="https://mastodon.clinicians-exchange.org/tags/counseling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#counseling</a> <a href="https://mastodon.clinicians-exchange.org/tags/socialwork" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#socialwork</a> <a href="https://mastodon.clinicians-exchange.org/tags/psychotherapy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#psychotherapy</a> <a href="https://mastodon.clinicians-exchange.org/tags/legal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#legal</a> <a href="https://a.gup.pe/u/psychotherapist" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@psychotherapist</a> <a href="https://a.gup.pe/u/psychotherapists" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@psychotherapists</a> <a href="https://a.gup.pe/u/psychology" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@psychology</a> <a href="https://a.gup.pe/u/socialpsych" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@socialpsych</a> <a href="https://a.gup.pe/u/socialwork" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@socialwork</a> <a href="https://a.gup.pe/u/psychiatry" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@psychiatry</a> <a href="https://mastodon.clinicians-exchange.org/tags/mentalhealth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mentalhealth</a> <a href="https://mastodon.clinicians-exchange.org/tags/technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#technology</a> <a href="https://mastodon.clinicians-exchange.org/tags/psychiatry" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#psychiatry</a> <a href="https://mastodon.clinicians-exchange.org/tags/healthcare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#healthcare</a> <a href="https://mastodon.clinicians-exchange.org/tags/HIPAA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HIPAA</a> <a href="https://mastodon.clinicians-exchange.org/tags/dataprotection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dataprotection</a> <a href="https://mastodon.clinicians-exchange.org/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://a.gup.pe/u/infosec" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@infosec</a> <a href="https://mastodon.clinicians-exchange.org/tags/doctors" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#doctors</a> <a href="https://mastodon.clinicians-exchange.org/tags/hospitals" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hospitals</a> <a href="https://mastodon.clinicians-exchange.org/tags/BAA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BAA</a> <a href="https://mastodon.clinicians-exchange.org/tags/businessassociateagreement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#businessassociateagreement</a> <a href="https://mastodon.clinicians-exchange.org/tags/patientprivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#patientprivacy</a> <a href="https://mastodon.clinicians-exchange.org/tags/goodtherapy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#goodtherapy</a> . . NYU Information for Practice puts out 400-500 good quality health-related research posts per week but its too much for many people, so that bot is limited to just subscribers. You can subscribe at <a href="https://mastodon.clinicians-exchange.org/@PsychResearchBot" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@PsychResearchBot</a>

Steve Dustcircle 🌹<a href="https://masto.ai/tags/Biden" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Biden</a> administration proposes to strengthen <a href="https://masto.ai/tags/patientprivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#patientprivacy</a> for those seeking <a href="https://masto.ai/tags/abortions" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#abortions</a> <a href="https://ohiocapitaljournal.com/2023/04/13/biden-administration-proposes-to-strengthen-patient-privacy-for-those-seeking-abortions/?eType=EmailBlastContent&eId=1bebe564-7230-4e54-b5ea-bdbda2003179" rel="nofollow noopener noreferrer" target="_blank">https://ohiocapitaljournal.com/2023/04/13/biden-administration-proposes-to-strengthen-patient-privacy-for-those-seeking-abortions/?eType=EmailBlastContent&eId=1bebe564-7230-4e54-b5ea-bdbda2003179</a>

Wanda WhitneyHmmm. Guess I should've known. "Every hospital in America promises to protect the privacy of its patients and the details of their medical care. And almost every one of them uses sophisticated data tools to track and share the personal information of visitors as soon as they start clicking on their websites." Article from Stat News: <a href="https://www.statnews.com/2023/04/03/hospitals-hipaa-health-data-pixel-tracker/" rel="nofollow noopener noreferrer" target="_blank">https://www.statnews.com/2023/04/03/hospitals-hipaa-health-data-pixel-tracker/</a><a href="https://blacktwitter.io/tags/Hospital" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hospital</a> <a href="https://blacktwitter.io/tags/Data" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Data</a> <a href="https://blacktwitter.io/tags/Tracker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tracker</a> <a href="https://blacktwitter.io/tags/PatientPrivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PatientPrivacy</a> <a href="https://blacktwitter.io/tags/DataSharing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataSharing</a> <a href="https://blacktwitter.io/tags/TargetedAds" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TargetedAds</a>

Recent searches

Search options

Administered by:

Server stats:

#patientprivacy