23andMe is on the brink. What happens to all its DNA data?

[Jirel]

10. Let's debunk something about HIPAA.

HIPAA protection only applies for “covered entities.” There are many types of medical data collectors that do not fall under this definition.
* Wearable tech providers.
* Health app creators.
* Healthcare providers that do not deal with electronic data.
* Research groups, with consent or several other carve-outs.
* School-based health programs, unless providing care to the general public.
* Public health investigations, disease tracking, and a variety of emergency situations.
* Workers comp claims.
* Life insurance companies.
* Employers.
* Schools in general, with regard to the student health data they collect.
* Medical facilities that only take cash (free clinics, or those that don’t accept insurance) may not be covered (some other factors apply)
* State agencies, like Child Protective Services.
* Law enforcement agencies.

There are more than these, but you can see that in general, people believe their health data is much, MUCH more protected by HIPAA than it really is.