News for hackers. Stuff that matters.

A comment on Google's harvest of medical data includes names and full details of millions. Parent comment

Re:Google's harvest of medical data includes names and full ... by OnlineGladiator on Tuesday November 12, 2019 @01:16PM (#21516500)
When there's an obvious breach, hopefully. How would we even know if Google were abusing this data though? Does anyone have access to it besides Google? Are we literally asking Google to regulate itself with this data?

EDIT: I guess I don't understand. Once we give Google the sensitive information, how do we have any way of knowing what they do with it? I'm guessing an audit on all of Google's data is out of the question.

[ Parent | on HN ]
Re:Google's harvest of medical data includes names and full ... by mattmanser on Tuesday November 12, 2019 @02:36PM (#21517300)
The point of this article is that a whistleblower is saying "they're not controlling access properly".

While the Grauniad is trying to spin it to sound worse, the whole point is Google are providing data processing services to a valid HIPAA processor via Google Cloud, not that they nefariously bought the data to integrate it with the search results.

Much like health data stored on AWS with a dedicated internal project team could be accessed by "Amazon" staff. It's kinda the point, the google staff have been brought in to help manage the data.

[ Parent | on HN ]
Re:Google's harvest of medical data includes names and full ... by JohnFen on Tuesday November 12, 2019 @06:04PM (#21519221)
> not that they nefariously bought the data to integrate it with the search results.

I don't think that anyone is claiming they are intending to do this.

[ Parent | on HN ]