Hacker News Reader

Assuming Google has access to patient PII would this data be covered by the CCPA (https://en.wikipedia.org/wiki/California_Consumer_Privacy_Ac...)? I couldn't find a Health Data option at https://takeout.google.com.

View on HN

De-anonymzed (health) data likely isn't covered by HIPAA, and with a few still generic data points likely associated with the health data, such as health, gender, age, and location -- you could work backwards to reach an identity. There's likely a loophole for whole security of health data thing.

Did you mean de-identified instead of de-anonymzed?

I meant anonymized can easily become de-anonymized.

ASFAIK, CCPA doesn’t cover data that comes under HIPAA Regulations.

Check 1798.145. Section 3 https://hq.services/blog/ccpa-full-text-with-amendments/

Reply on news.ycombinator.com