this post was submitted on 15 Aug 2026
94 points (98.0% liked)
Technology
87267 readers
3498 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Data should not be sold or used outside its 1 purpose. It should not be available to the original company at all to look at or have access to. Accessing data should only be allowed through court issued warrants and only on the devices in the proximity and time of the incident. As someone who is an admin to systems that deal with patient data information I can tell you without a doubt we dont even have access to this data, just the setup of everything else around it. It also has a full audit log of everyone who even views the data. This isnt anything new, they just decided to change the rules to see how far they can get away with doing whatever they want for personal gain.
You can ringfence it all you like and keep your MBAs entertained working out separation of responsibilities. But anyone with root can bypass any audit log. And someone always has root.
Despite its many flaws, the US needs GDPR-like regulations.
When GDPR was becoming big we adopted the standard over a year of figuring out what was needed to be done and implementing it. We wanted to be on top of it because we thought it would become the standard. So we are compliant and a US based company.