151–160 of 317 posts
That's 250k per violation fine, and leaking status positive or negative is a violation. And every person, and every time they pass that information to every "partner" is a distinct violation.
Please don't use allcaps for emphasis in HN comments. This is in the site guidelines: https://news.ycombinator.com/newsguidelines.html .
If you are using Grindr on Android, install and use NetGuard. https://play.google.com/store/apps/details?id=eu.faircode.ne... https://github.com/M66B/NetGuard NetGuard is an open source local VPN that allows you to block DNS lookups to prevent calls to 3rd parties, and it does not require root access. Calls to all of the 3rd parties mentioned are blockable. Grindr does not need many domains to be operational to work,…
A slightly off-topic related question.....does anyone know of an Android app that does not require root, that can find and kill (preferably configurable so it happens on boot) apps that run in the background? For example, AirDroid - it is very useful occasionally but I don't use it 99% of the time, but it is still there running and killing my battery life. Perhaps I can better configure it, but that's not the point -…
So vending HIV status is a straight up HIPAA violation, I'm fairly sure that's been found to be the case over and over again -- it doesn't matter what your business is, health information is covered by HIPAA. That's 250k per violation fine, and leaking status positive or negative is a violation. And every person, and every time they pass that information to every "partner" is a distinct violation.
"The Security Rule applies to health plans, health care clearinghouses, and to any health care provider who transmits health information in electronic form in connection with a transaction for which the Secretary of HHS has adopted standards under HIPAA (the “covered entities”) and to their business associates."
via https://www.hhs.gov/hipaa/for-professionals/privacy/index.ht...
"The HIPAA Privacy Rule establishes national standards to protect individuals’ medical records and other personal health information and applies to health plans, health care clearinghouses, and those health care providers that conduct certain health care transactions electronically."
in what circumstances has HIPAA been found to apply to businesses other than those?
Does anyone have any information on how Scruff handles that information? Also, does HIPAA say anything about technology companies outside of the medical field's data that may voluntarily collect HIV status?
From Scruff's privacy policy: "For example, we share your device identifier and demographic information with our advertising display and analytics partners." The whole thing seems pretty bad (privacy-wise) https://www.scruff.com/privacy/
So vending HIV status is a straight up HIPAA violation, I'm fairly sure that's been found to be the case over and over again -- it doesn't matter what your business is, health information is covered by HIPAA. That's 250k per violation fine, and leaking status positive or negative is a violation. And every person, and every time they pass that information to every "partner" is a distinct violation.
Even within its confines, Grindr's data are rich for blackmail. (Consider: images and messages sent and received within 100 feet of Capitol Hill.) It was recently acquired by an offshore billionaire [1]. [1] https://www.bloomberg.com/news/articles/2016-01-12/china-tec...
Reminds me of the relationship between the Mafia and the homosexual community of the early-mid 20th century. The Mafia didn’t particularly like gays, but they ran all of the gay bars because it gave them the opportunity to blackmail their patrons.
Source? Curious to read more about this.
So vending HIV status is a straight up HIPAA violation, I'm fairly sure that's been found to be the case over and over again -- it doesn't matter what your business is, health information is covered by HIPAA. That's 250k per violation fine, and leaking status positive or negative is a violation. And every person, and every time they pass that information to every "partner" is a distinct violation.
via https://www.hhs.gov/hipaa/for-professionals/security/laws-re... "The Security Rule applies to health plans, health care clearinghouses, and to any health care provider who transmits health information in electronic form in connection with a transaction for which the Secretary of HHS has adopted standards under HIPAA (the “covered entities”) and to their business associates." via https://www.hhs.gov/hipaa/for-prof…
If you are using Grindr on Android, install and use NetGuard. https://play.google.com/store/apps/details?id=eu.faircode.ne... https://github.com/M66B/NetGuard NetGuard is an open source local VPN that allows you to block DNS lookups to prevent calls to 3rd parties, and it does not require root access. Calls to all of the 3rd parties mentioned are blockable. Grindr does not need many domains to be operational to work,…
AFWall is a pretty user-friendly and configurable firewall. Let's you easily block apps from accessing the web. https://github.com/ukanth/afwall