Re:Backblaze submitting names and sizes of files in B2 bucke...
by November-Echo on Monday March 22, 2021 @02:02AM
(#26537304)
I don’t understand how those services always claim to be „HIPAA compliant“ and yet they do this kind of stuff. Can anybody enlighten me?
[ Parent
| on HN ]
Re:Backblaze submitting names and sizes of files in B2 bucke...
by dylan604 on Monday March 22, 2021 @02:54AM
(#26537595)
Not all of the various silos within evilCorp structure knows what the others are doing, if even the groups within the same silos know what is going on.
Re:Backblaze submitting names and sizes of files in B2 bucke...
by foepys on Monday March 22, 2021 @03:36AM
(#26537807)
It's inexcusable, honestly. These are the kind of decisions that not only need department head approval but also CTO approval. If the CTO didn't see it coming, they failed.
HIPAA isn't some random cert you have to satisfy a single big customer. It needs to be a priority and all business decisions have to be made around it. GDPR is another one.