Is it really? If Alice tells Bob she has diabetes and Bob tells Charlie, is Bob in violation of GDPR?
Re:Google’s GDPR Workaround
by nocturnial on Wednesday September 04, 2019 @04:18PM
(#20880999)
Are Bob and/or Charlie the name of a person or of a company?
How you're using it, it sounds like Bob or Charlie in your mind is a person. I might be wrong in interpreting it that way. If so could you give another example where Bob and Charlie are companies and the information of Alice is part of a transaction.
GP's comment paints Alice/Bob/Charlie as people:
>If Alice tells her coworker Bob that she had diabetes, it's not a HIPAA violation for Bob to tell Charlie.
I was responding to the parent comment's claim that it's not a HIPAA violation but rather a GDPR violation.
No, GDPR does not apply between 2 persons.
> Individuals can also face fines for GDPR violations if they use other parties' personal data for anything other than personal purposes.
Maybe not, but GDPR sure is.