priv_con

This is a good answer, thank you. Fundamentally, it feels wrong that they are storing my medical data without my voluntary consent. Based on your answer, it doesn't seem like the law supports my instinct.

I have not interacted with the chatbot, but I have read the code (it's open source). The health data they are collecting relates to: Fever, Breathing, Coughing, Sore Throat, Body Aches, Smell.

We were not given details on who has access to the data, including any DBAs. Yes, this University owns a Medical Center, and the data is being collected on the Medical Center website. The code was produced by the University's Tech Transfer team. We do not know who manages the data, if it's the same as the people who manage patient data. I do not know if the legal team has reviewed the chat bot usage.

I've started off with some simple questions: Who has access to the data, where is the data saved, and how long will the data persist. Thank you for your additional questions, as I will use them to go forward.