Data brokers are now selling your mental health status
washingtonpost.com
washingtonpost.com
Right now, expect that your health conditions are up for sale and being passed around like candy to anyone willing to pay for it. It's bad enough that lists of people who are addicts, prone to impulsive purchases, or easily confused/tricked are extremely valuable to scammers and advertisers, but that same data can cost you a job or housing and open you up to harassment as well.
The same is true for anyone calling a crisis service, such as a suicide hotline or a rape crisis center or those visiting shelters and mental health clinics. People's phone records and GPS logs have been available for sale for a very long time. The last thing someone in crisis should need to worry about are the life long consequences of dialing one of these phone numbers or walking into a clinic.
Industry will not do the right thing, and the market has failed to provide a solution to this problem, so it looks like we need laws with real teeth and sustained oversight to enforce those laws.
HIPAA only applies to covered entities. For example GoodRx isn’t one of those.
I’ve seen recently a lot of advertisements for mental health telehealth providers and I’m wondering if they are selling personal data as well.
Check out the privacy policy and where the data goes. Maybe I misunderstand how much data Google is getting by having their Analytics script running? There's no way a child is going to be able to knowingly consent to this collection. Children are the ones this service is advertised to, up to and including personal recommendations from our PM.
https://www.politico.eu/article/cybercriminal-extorts-finnis...
The only people objecting to the GDPR are scummy businesses who haven't yet understood that harvesting and/or selling personal data without consent is both not ethical and no longer a legal business model.