undefined | Better HN

0 pointstheGnuMe2y ago0 comments

Right but the hackers are not covered entities.

0 comments

That's not how HIPAA works. 23andme would be, or would not be, the covered entity, and the entity bound by HIPAA.

I dunno, they offer blood tests ordered by a clinician. That probably creates a covered entity.. then the hackers get the phi data, they for sure do not have a business associates agreement with 23andme. May only matter for the blood draws.

j / k navigate · click thread line to collapse

0 comments

deathanatos2y ago

That's not how HIPAA works. 23andme would be, or would not be, the covered entity, and the entity bound by HIPAA.

theGnuMeOP2y ago

j / k navigate · click thread line to collapse