Hacker News Reader

Comment by tsuru | Hacker News Reader

What happens when small-firm doctors, therapists, dentists, etc. are suddenly having your (their patients') medical information backed-up to OneDrive? Microsoft only provide HIPAA compliance if a certain paid tier is purchased. If they automatically turn OneDrive on how will this not be a privacy nightmare?

View on HN

From what I've gleaned from my social worker/therapist house mate is that you're not supposed to be storing any of that data on a non-compliant device to begin with. They can't keep anything local, and use some portal to a company that specializes in HIPAA storage.

I agree in general though, there are plenty of documents that really shouldn't be suddenly dumped to the cloud

The point here is that you might have a system that is compliant, but then MS pushes this and suddenly it’s uploading data that you thought was safe.

This is light on details, but according to the article, this only happens during the initial Windows 11 set-up, and not for existing users: "Quietly and without any announcement, the company changed Windows 11's initial setup so that it could turn on the automatic folder backup without asking for it."

Surely this has happened with this latest change? It got turned on for my work machine a few months ago and tried to upload some very large modelling files to the cloud. I have to keep that stuff in the root dir now, but most PC users don't even know what the root dir is.

Reply on news.ycombinator.com