PogoWasRight.org

Menu
  • About
  • Privacy
Menu

De-identified data exception in HIPAA poses a litigation risk

Posted on April 17, 2020 by pogowasright.org

Patricia S. Calhoun is a health care attorney with an interest in privacy issues with Carlton Fields, P.A., where Patricia M. Carreiro is a data privacy and cybersecurity litigation attorney. They have an opinion piece on Stat News this week. They write:

As money pours into health care startups built around artificial intelligence — more than 350 deals totaling $4 billion in 2019 — the field is generally overlooking the potential litigation risk surrounding the de-identified data exception in HIPAA.

The writers then focus on the  “de-identitifed” exception in HIPAA and suggest that given how much big data already exists, the idea that data really can’t be re-identified may be more of a pipe dream than anything else. So if data doesn’t fall under the “de-identified” exception to HIPAA, those developing new apps for tracking contacts, for example, need to consider whether they can be sued for failing to get patient authorization to disclose data.

Read more on Stat News.

 

 

Category: BreachesBusinessHealthcare

Post navigation

← Making COVID-19 Apps Data Protection Compliant
Penn State employee loses bid to revive email privacy lawsuit at 3rd Circuit →

Now more than ever

Search

Contact Me

Email: [email protected]

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

Categories

Recent Posts

  • Data Categories and Surveillance Pricing: Ferguson’s Nuanced Approach to Privacy Innovation
  • Anne Wojcicki Wins Bidding for 23andMe
  • Would you — or wouldn’t you?
  • New York passes a bill to prevent AI-fueled disasters
  • Synthetic Data and the Illusion of Privacy: Legal Risks of Using De-Identified AI Training Sets
  • States sue to block the sale of genetic data collected by DNA testing company 23andMe
  • AI tools collect and store data about you from all your devices – here’s how to be aware of what you’re revealing

RSS Recent Posts on DataBreaches.net

  • Resource: State Data Breach Notification Laws – June 2025
  • WestJet investigates cyberattack disrupting internal systems
  • Plastic surgeons often store nude photos of patients with their identity information. When would we call that “negligent?”
  • India: Servers of two city hospitals hacked; police register FIR
  • Ph: Coop Hospital confirms probe into reported cyberattack
©2025 PogoWasRight.org. All rights reserved.