The moment a lawyer saves their medical records in a way that unintentionally and without their consent uploads them to OneDrive, they have a pretty solid case to charge Microsoft for a HIPAA violation.

[–] biscuitswalrus@aussie.zone 8 points 4 months ago (1 children)

https://www.hipaajournal.com/onedrive-hipaa-compliant/#

Totally feasible to use onedrive.

However I've got no sympathy for even a small business to use IT without someone configuring their system in a way that controls this. A lawyer of all people know that knowledge is worth something.

[–] Katana314@lemmy.world 5 points 4 months ago (1 children)

It is feasible to CHOOSE to use OneDrive and take all the proper precautions. We're talking about home users getting OneDrive data uploaded without their consent through their "push assumed default", and "giant popup, tiny cancel" setups.

The article you link only says it's okay when using a OneDrive business plan together with a signed agreement.

[–] biscuitswalrus@aussie.zone 0 points 4 months ago (1 children)

You should be, if you're in a work computer with privileged documents, controlling it with an appropriate level of care. No matter Linux or Windows. If you're using home and defaults, you've failed no matter what.

[–] Katana314@lemmy.world 3 points 4 months ago* (last edited 4 months ago) (2 children)

We’re not talking about work computers. We’re talking about patients - end users who have downloaded documents from their doctor.

These people should not be blamed for using defaults, or for insecure actions happening from their inaction.

I said home computers multiple times and you again replied about work environments. You need to start paying attention.

[–] biscuitswalrus@aussie.zone 2 points 4 months ago

Ah you're thinking I'm reading your other comments to other people.

BTW HIPAA is for providers for their patients information handling. Once it's in the person's hands, it's no longer under HIPPA and it no longer applies. If you decide to put your private medical information on a commercial advertisement board on a highway, and it's not breaking laws to do with acceptable adcertisement (eg gore or smut) you'll be able to do that to.

Basically theres no expectation for a individual person to adhere to HIPPA for their own personal information storage and it doesn't apply.

My assumption with your lawyer comment, is this was a insurance or otherwise medical malpractice lawyer who might collect this information for their client cases, since without having client/patient requirements, HIPPA is irrelevant.

[–] biscuitswalrus@aussie.zone 1 points 4 months ago (1 children)

The moment a lawyer saves their medical records in a way that unintentionally and without their consent uploads them to OneDrive, they have a pretty solid case to charge Microsoft for a HIPAA violation

Are we talking about the same comment?

[–] Katana314@lemmy.world 2 points 4 months ago

Lawyers, once they take off the suit and go home to their kids, are end users, not businesses. It would simply be easier for someone to initiate the lawsuit if they have a background in law.

load more comments (13 replies)