Amazon Clinic requires patients to waive federal medical privacy protections under the U.S. Health Insurance Portability and Accountability Act as a condition for enrollment, according to an analysis conducted by The Washington Post. Under Amazon Clinic’s privacy notice on its enrollment form, it seeks the ability for "use and disclosure of protected health information" while the company requires access to an individual's "complete patient file." The enrollment form also states patient data "may be re-disclosed" and "will no longer be protected by HIPAA."
Amazon Clinic requires patients to waive HIPAA protections in exchange for care
Related stories
Notes from the IAPP Europe: Wrapping up November with the IAPP DPC
Ireland's DPC details legitimate interest prong of its LinkedIn enforcement action
What the new European Commission could mean for digital regulation
IAPP DPC 2024: Reynders discusses GDPR enforcement harmonization, adequacy developments
US Senate subcommittee ponders accountability for AI-assisted scams