Post #2422919
2026-03-18 01:31 UTC
@marz@caw.corbode.com @jhwgh1968@chaos.social @twistylittlepassages@weirder.earth
Even the N3C (https://ncats.nih.gov/research/research-activities/n3c/overview) deals exclusively in de-identified data and has a method for tracking a given individual across multiple health systems without actually ingesting any PHI to tie them together. And any given entity is generally loathe to allow any PHI outside of their institution if they can help it, since they can suffer consequences (to their finances, reputation, etc.) if there's a breach.
Replies (1)
-
@petrosophia@caw.corbode.com 2026-03-18 01:31
@marz@caw.corbode.com @jhwgh1968@chaos.social @twistylittlepassages@weirder.earth That said, the current administration would (IMO) absolutely make up a reason to demand PHI for stuff like this, and unless the institution takes the government to court over it, the government will get what they asked for. As far as FDA and adverse event reporting, my understanding is that it's often done in aggregate and not with PHI, but I'm not usually on that side of the fence (I do more clinical/claims stuff).