Findings · 8 of 16
The HIPAA perimeter is small
What it is
An enormous volume of health-grade data is held by entities that are not HIPAA covered entities, so the protection consumers assume applies simply does not.
Why it matters
Whether your health information is legally protected depends on WHO is holding it, not on how sensitive it is. The same fact can be protected health information in your doctor's file and ordinary business data on the app that scheduled the appointment.
The perimeter by tab
Inside the HIPAA perimeter
- EHR & Health Data Systems · 26 records
- F500 Healthcare Providers · 12 records
- Life-Health-Dental Insurance · 16 records
- Pharmacy Benefit Managers · 3 records
Outside it
- Wellness & Meditation Apps · 19 records
- Fertility, Genetic & Wearables · 8 records
- Health, Fitness & Misc Services · 18 records
- F500 Pharma & Biotech · 21 records
- F500 Consumer Brands · 11 records
Companies and rows it touches
IQVIA (prescription/claims/EHR aggregation handled as de-identified). Wellness and meditation apps (Mozilla: 28 of 32 flagged; 'worse than any other product category'). Whoop (continuous physiology, no clinical relationship). Pet retail and pet insurance (health data by proxy). Kimberly-Clark and P&G life-stage loyalty programmes.
Where to look
F500 Pharma & Biotech (IQVIA); Wellness & Meditation Apps; Health Fitness & Misc Services (MyChart, ZocDoc); F500 Consumer Brands