Re:Germany planning to ‘massively′ limit privacy rights
by datenwolf on Saturday November 26, 2016 @06:30AM
(#13042996)
> … how do you prove the citizen has agreed to you storing their information?
By having participated in an actual business transaction, which usually leaves an (electronic) paper trail.
Take note that simply visiting a website can not be interpreted as a business transaction. If anything this is accounted for as browsing the displays of a street vendor.
Re:Germany planning to ‘massively′ limit privacy rights
by normaljoe on Saturday November 26, 2016 @10:58AM
(#13044230)
> and we're back at square one.
I was going to mention this but add the HIPAA includes other worth while regulations around reporting of breach in security etc.
I'm not 100% sure but I think the repeated signing of HIPPA is less the law and more the Doctor's office covering themselves legally. That is to say legally I think once is enough, but it's easier to just have the front office staff always ask instead of track who has signed one.
I doubt that it's possible. Law is a bit complicated for a reason: it tries to be as specific, and as general, as possible. It abhors ambiguity, or unintended consequences.
Example:
> "Information about a citizen shall not be collected and stored against the will of the citizen."
Sounds great – and it's pretty much the law in Germany. But – as a business – how do you prove the citizen has agreed to you storing their information? Yeah: a form, or a EU cookie banner -> and we're back at square one.