Link to the actual study cited in the article -
https://jamanetwork.com/journals/jamanetworkopen/fullarticle...
And at a quick glance it looks like it is mostly related to website information, not PHI or PII.
https://jamanetwork.com/journals/jamanetworkopen/fullarticle...
And at a quick glance it looks like it is mostly related to website information, not PHI or PII.
If you are looking for an oncologist or abortions or whatever else, that's PHI. We know well that the industry has profiles on Americans and probably can identify you.
From[0]:
> if an individual were looking at a hospital’s webpage listing its oncology services to seek a second opinion on treatment options for their brain tumor, the collection and transmission of the individual’s IP address, geographic location, or other identifying information showing their visit to that webpage is a disclosure of PHI to the extent that the information is both identifiable and related to the individual’s health or future health care
[0] https://www.hhs.gov/hipaa/for-professionals/privacy/guidance...