Post #2422918
2026-03-18 01:31 UTC
@marz@caw.corbode.com @jhwgh1968@chaos.social @twistylittlepassages@weirder.earth
The government can definitely demand PHI from any company or healthcare entity they want under HIPAA like you specified, though the default for any sort of research would be de-identified data, at least if it's leaving its home institution. (1/3)
Replies (1)
-
@petrosophia@caw.corbode.com 2026-03-18 01:31
@marz@caw.corbode.com @jhwgh1968@chaos.social @twistylittlepassages@weirder.earth Even the N3C (https://ncats.nih.gov/research/research-activities/n3c/overview) deals exclusively in de-identified data and has a method for tracking a given individual across multiple health systems without actually ingesting any PHI to tie them together. And any given entity is generally loathe to allow any PHI outside of their institution if they can help it, since they can suffer consequences (to their finances, reputation, etc.) if there's a breach.