Live data from Hacker News

Pharmacies share medical data with police without a warrant, inquiry finds

washingtonpost.com

1–10 of 47 posts

Re: Pharmacies share medical data with police without a warrant, inquiry finds

#2
If you get a prescription filled using insurance, that medication goes on a report. * Collects prescription drug purchase history for quantifying the relative mortality risk of life insurance applicants and provides risk scores for underwriting decisions.*

https://www.consumerfinance.gov/consumer-tools/credit-report...

Even if you don’t use insurance, it may still be possible to wind up on this list.

Re: Pharmacies share medical data with police without a warrant, inquiry finds

#4

If you get a prescription filled using insurance, that medication goes on a report. * Collects prescription drug purchase history for quantifying the relative mortality risk of life insurance applicants and provides risk scores for underwriting decisions.* https://www.consumerfinance.gov/consumer-tools/credit-report... Even if you don’t use insurance, it may still be possible to wind up on this list.

Wouldn’t this be a massive HIPAA violation??

Re: Pharmacies share medical data with police without a warrant, inquiry finds

#5

If you get a prescription filled using insurance, that medication goes on a report. * Collects prescription drug purchase history for quantifying the relative mortality risk of life insurance applicants and provides risk scores for underwriting decisions.* https://www.consumerfinance.gov/consumer-tools/credit-report... Even if you don’t use insurance, it may still be possible to wind up on this list.

This is actually a pretty good use of the data if its done by a university for a study or the NIH in a nonprofit capacity. Using prescription data on insurance to see outcomes at a societial level for prescriptions since it's all in one place.

Of course life insurance companies will instead use the data to decide someone's premiums or whether to give them life insurance at all if a prescription shows up on that persons history when they try to sign up.

Re: Pharmacies share medical data with police without a warrant, inquiry finds

#6

If you get a prescription filled using insurance, that medication goes on a report. * Collects prescription drug purchase history for quantifying the relative mortality risk of life insurance applicants and provides risk scores for underwriting decisions.* https://www.consumerfinance.gov/consumer-tools/credit-report... Even if you don’t use insurance, it may still be possible to wind up on this list.

Wouldn’t this be a massive HIPAA violation??

The article covers this:

The Health Insurance Portability and Accountability Act, or HIPAA, regulates how health information is used and exchanged among “covered entities” such as hospitals and doctor’s offices. But the law gives pharmacies leeway as to what legal standard they require before disclosing medical records to law enforcement.

Re: Pharmacies share medical data with police without a warrant, inquiry finds

#7

Earlier quoted context omitted.

Wouldn’t this be a massive HIPAA violation??

The article covers this: The Health Insurance Portability and Accountability Act, or HIPAA, regulates how health information is used and exchanged among “covered entities” such as hospitals and doctor’s offices. But the law gives pharmacies leeway as to what legal standard they require before disclosing medical records to law enforcement.

Wow, that's a gaping privacy loophole.

Re: Pharmacies share medical data with police without a warrant, inquiry finds

#8

If you get a prescription filled using insurance, that medication goes on a report. * Collects prescription drug purchase history for quantifying the relative mortality risk of life insurance applicants and provides risk scores for underwriting decisions.* https://www.consumerfinance.gov/consumer-tools/credit-report... Even if you don’t use insurance, it may still be possible to wind up on this list.

Wouldn’t this be a massive HIPAA violation??

I look forward to the lawsuits since HIPAA is Federal and abortion laws are state.

Re: Pharmacies share medical data with police without a warrant, inquiry finds

#9

Earlier quoted context omitted.

The article covers this: The Health Insurance Portability and Accountability Act, or HIPAA, regulates how health information is used and exchanged among “covered entities” such as hospitals and doctor’s offices. But the law gives pharmacies leeway as to what legal standard they require before disclosing medical records to law enforcement.

Wow, that's a gaping privacy loophole.

HIPAA was never a law about privacy of medical data. It's a law that governs the management of medical data, with very limited protections for privacy. I think most people misunderstand that law, its purpose, and its implications.

Re: Pharmacies share medical data with police without a warrant, inquiry finds

#10

If you get a prescription filled using insurance, that medication goes on a report. * Collects prescription drug purchase history for quantifying the relative mortality risk of life insurance applicants and provides risk scores for underwriting decisions.* https://www.consumerfinance.gov/consumer-tools/credit-report... Even if you don’t use insurance, it may still be possible to wind up on this list.

Wouldn’t this be a massive HIPAA violation??

I'm in Canada so HIPAA doesn't apply for me but when I was going into my second year of university the student union signed a contract with a health insurance company that provided some piddly policy for students that was mandatory unless you could provide proof of insurance with another company.

Not only was there no way to refuse this but you were automatically enrolled unless you could provide that proof by a certain date.

I got into an argument with the student president about this because I considered it a massive overreach for the school to give my information to the student union who then turns around and gives it to a third party, and that this is just some how a part of completing post secondary education. He was adamant that it was both legal and ethical, and that there was no privacy violation that occurred.

I ended up opting out in time but a few months later I received an email from the insurance company stating that they had been hacked and they weren't quite sure what information had been leaked.

I've never found out what information was transmitted from the student union to the health insurance company, if the company managed to get access to my health records, or if that company has sold those records, or been acquired by a large company that has added those records to their collection, or what the hackers manged to steal.

I guess this is all legal because some student union that gets less than 9% of the student body to vote for them said so?

Post reply on HN