262 karma · joined May 7, 2021
The issue with Gmail is sending to the wrong email, sending to a broad email list, having people download it to their local machines. And the amount of PHI being transmitted in these files is larger than this s3 bucket.
>With persons or organizations (e.g., janitorial service or electrician) whose functions or services do not involve the use or disclosure of protected health information, and where any access to protected health information by such persons would be incidental, if at all.
Based on the context from the article of the PHI uploaded being incidental, it would probably fall under this exception. It sounds like ESHYFT isn't meant to be storing any PHI based on the privacy policy above.
0:https://www.hhs.gov/hipaa/for-professionals/privacy/guidance...
> I also saw what appeared to be medical documents uploaded to the app. These files were potentially uploaded as proof for why individual nurses missed shifts or took sick leave. These medical documents included medical reports containing information of diagnosis, prescriptions, or treatments that could potentially fall under the ambit of HIPAA regulations.
It looks like providers accidentally uploaded some PHI.
IANAL so may be wrong, but I worked for a healthcare company. Whether HIPAA applies to them depends on if they are considered a covered entity or a business associate [0].
IMO they aren't bound to HIPAA requirements as a covered entity.
Business associate is a little tricky to determine. But business associates have to sign a BAA (Business Associate Agreement). And I doubt they would have signed one if they have that in their privacy policy.
Also just as a side note, HIPAA is not a ideal standard to begin with for security. Many large companies exchange bulk PHI via gmail since it is HIPAA compliant..
0: https://www.hhs.gov/hipaa/for-professionals/covered-entities...
It kind of depends on the person. I've seen people go from Amazon to Google and they want to go back to Amazon because they are bored. Some people just thrive in high pressure environments. Also everything is pretty team dependent at FAANGs, you could end up at a bad team at any of them.
This is literally what they are doing lol.
It leaves out:
- communicating
- teaching
- dealing with ambiguity
- navigating politics
- working cross-functionally
Most high level individual contributors at large tech companies don't even code.
An uber driver that can drive 24/7. Also there are a lot of cars that sit in parking lots 95% of the day that can be used.
Man this is really key. relationships is a skill. I don't believe in soul mates, but rather a healthy relationship is developed when two people have honed the skill enough to be able to handle conflict without causing irreparable harm, and enjoy each other out of conflict.