The United States has no general data privacy laws. However, we do have some sector-specific regulations, including HIPAA for health data. But there are many misconceptions about HIPAA. For example, the "P" in HIPAA does not stand for Privacy - it stands for Portability. So, what information does HIPAA cover? Which healthcare and related service providers are governed by HIPAA? And most importantly, what can you do to protect your medical and health data? Today we'll dive deep into this subject with Kate Black, a data, privacy & health lawyer and a strategic advisor in the health data field.

Interview Notes

Kate Black: https://www.linkedin.com/in/kate-black-sfo/ 

Washington’s My Health, My Data law: https://hintzelaw.com/blog/2023/4/9/wa-my-health-my-data-act-pt1-overview 

HIPAA rights: https://www.hhs.gov/hipaa/for-individuals/guidance-materials-for-consumers/index.html 

STAT medical news: https://www.statnews.com/ 

Further Info

Check out my dragon challenge coins! https://fdsd.me/coin2

Send me your questions! https://fdsd.me/qna 

Check out my book, Firewalls Don’t Stop Dragons: https://fdsd.me/book 

Subscribe to the newsletter: https://fdsd.me/newsletter 

Become a patron! https://www.patreon.com/FirewallsDontStopDragons 

Get your Firewalls Don’t Stop Dragons Merch! https://fdsd.me/merch 

Give the gift of privacy and security: https://fdsd.me/coupons 

Support our mission! https://fdsd.me/support 

Generate secure passphrases! https://d20key.com/#/ 

Table of Contents

Use these timestamps to jump to a particular section of the show.

0:03:29: What is covered by HIPAA? What isn't covered?

0:06:51: Can I sign away my HIPAA rights?

0:08:08: Who in my medical provider's office can access my data?

0:10:23: How audits HIPAA compliance?

0:11:47: How is my health data shared between providers?

0:14:49: Are certain types of health data treated differently?

0:15:23: How does health privacy work for minors?

0:16:53: Outside of health providers, who else can access my data?

0:20:56: How does HIPAA compare to other sector-specific privacy laws?

0:22:20: Do secondary providers share back with my primary care physician?

0:24:42: Who stores and protects my digital medical records?

0:27:46: How are third party providers audited for privacy and security?

0:29:56: Are HIPAA security requirements keeping up with the times?

0:33:13: Do I have full access to my complete medical record?

0:36:52: How do marketers get my health data?

0:39:51: What laws govern inferred health information?

0:45:48: Do pharmacies sell health data to marketers?

0:48:57: How private are online medical portals and checkin services?

0:53:35: How concerned should we be about using DNA analysis services?

0:59:17: How can we improve our health privacy laws?

1:00:30: What are your personal tips for protecting health data?

1:02:37: If I think someone has abused my data, what can I do?

1:04:13: Interview wrap-up

1:06:49: Looking ahead