• boatswain@infosec.pub
    link
    fedilink
    English
    arrow-up
    8
    ·
    4 days ago

    Scheduling would not be fine; under HIPAA “provision of healthcare” is considered PHI, so knowing that person x had their care at a certain time and place would be a problem.