The United States has no general data privacy laws. However, we do have some sector-specific regulations, including HIPAA for health data. But there are many misconceptions about HIPAA. For example, the “P” in HIPAA does not stand for Privacy – it stands for Portability. So, what information does HIPAA cover? Which healthcare and related service providers are governed by HIPAA? And most importantly, what can you do to protect your medical and health data? Today we’ll dive deep into this subject with Kate Black, a data, privacy & health lawyer and a strategic advisor in the health data field. Interview Notes * Kate Black: https://www.linkedin.com/in/kate-black-sfo/ * Washington’s My Health, My Data law: https://hintzelaw.com/blog/2023/4/9/wa-my-health-my-data-act-pt1-overview * HIPAA rights: https://www.hhs.gov/hipaa/for-individuals/guidance-materials-for-consumers/index.html * STAT medical news: https://www.statnews.com/ Further Info * Check out my dragon challenge coins! https://fdsd.me/coin2 * Send me your questions! https://fdsd.me/qna * Check out my book, Firewalls Don’t Stop Dragons: https://fdsd.me/book * Subscribe to the newsletter: https://fdsd.me/newsletter * Become a patron! https://www.patreon.com/FirewallsDontStopDragons * Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch * Give the gift of privacy and security: https://fdsd.me/coupons * Support our mission! https://fdsd.me/support * Generate secure passphrases! https://d20key.com/#/ Table of Contents Use these timestamps to jump to a particular section of the show. * 0:03:29: What is covered by HIPAA? What isn’t covered? * 0:06:51: Can I sign away my HIPAA rights? * 0:08:08: Who in my medical provider’s office can access my data? * 0:10:23: How audits HIPAA compliance? * 0:11:47: How is my health data shared between providers? * 0:14:49: Are certain types of health data treated differently? * 0:15:23: How does health privacy work for minors? * 0:16:53: Outside of health providers, who else can access my data? * 0:20:56: How does HIPAA compare to other sector-specific privacy laws? * 0:22:20: Do secondary providers share back with my primary care physician? * 0:24:42: Who stores and protects my digital medical records? * 0:27:46: How are third party providers audited for privacy and security? * 0:29:56: Are HIPAA security requirements keeping up with the times? * 0:33:13: Do I have full access to my complete medical record? * 0:36:52: How do marketers get my health data? * 0:39:51: What laws govern inferred health information? * 0:45:48: Do pharmacies sell health data to marketers? * 0:48:57: How private are online medical portals and checkin services? * 0:53:35: How concerned should we be about using DNA analysis services? * 0:59:17: How can we improve our health privacy laws? * 1:00:30: What are your personal tips for protecting health data? * 1:02:37: If I think someone has abused my data, what can I do? * 1:04:13: Interview wrap-up * 1:06:49: Looking ahead