Monday, May 6, 2024

Kaiser Permanente shares user data with Google, Microsoft, and others

Well, well, well:

Millions of Kaiser Permanente patients' data was likely handed over to Google, Microsoft Bing, X/Twitter, and other third-parties, according to the American healthcare giant.

Kaiser told The Register it has started notifying 13.4 million current and former members and patients that "certain online technologies, previously installed on its websites and mobile applications, may have transmitted personal information to third-party vendors," when customers used its websites and mobile applications.

Kaiser has since removed that tech from its websites and apps, and said it is not aware of "any misuse of any member's or patient's personal information."

Yeah, I'll bet.


If you get Kaiser Permanente insurance at work, you might want to ask your HR department for an assessment of whether your data was included in this data sharing scheme.  It's hard to see how at the minimum HIPAA-adjacent data was not shared here.

 

4 comments:

HMS Defiant said...

Speaking then of HIPAA, how is it not a crime?

Fredrick said...

"Kaiser has since removed that tech from its websites and apps, and said it is not aware of "any misuse of any member's or patient's personal information.""

That's a pretty poor way of saying please don't sue us. Maybe the ambulance chasers can do more than sue and settle this time out.

Aesop said...

No word on when Allison Janey will be voicing their new ad campaign entitled "Jive".

Richard said...

Various providers I use are constantly trying to get me to use their app. Now I know why. Should I be foolish enough to load it on my phone, they would probably pirate everything else I do and sell it.

I people actually wanted to stop this, there would be a law that data cannot be shared without permission and payment on a data element by data element basis. This should be a criminal law targeting the C-suite.