Posted by ert on January 20, 2019, at 6:40:03
In reply to Re: Hipaa privacy rule vs gdpr and others, posted by ert on January 19, 2019, at 17:20:23
In case of normal data the bar would be 1000$ for a criminal case, but here also is phi data (health data) involved that Hsiung steals (won't revoke their permissions), uploads and makes money with it. As far as I understand when phi data is sold or money is generated with third parties without authorization (such as a written authorization), there would be no bar to reach the limit to be a criminal case.
poster:ert
thread:1102664
URL: http://www.dr-bob.org/babble/admin/20151112/msgs/1102878.html