When HHS first drafted the HIPAA regulations, it may have made sense to disregard collection limitations. HHS was setting ground rules for how a defined set of entities within the health care system could handle data. But this model of notice and consent is widely recognized by privacy scholars as being inadequate on its own […]
