Which is precisely my point - if I were so motivated, I could suss that out. Or do a partial/fragmentary OCR match on valid addresses in Ohio that align with possible zip code matches and narrow it down to a relatively small potential target set of addresses and individuals.
It’s not about motivation. It’s about “is it feasibly possible to actually identify a person from this partially-obscured PHI”. But also, who the fuck knows if they’re going to care about enforcing PHI and HIPAA laws now 🫠
Which is precisely my point - if I were so motivated, I could suss that out. Or do a partial/fragmentary OCR match on valid addresses in Ohio that align with possible zip code matches and narrow it down to a relatively small potential target set of addresses and individuals.
To target some random dude that received a silly prescription? Why go through all the effort when you could just pick a random residential address?
It’s not about motivation. It’s about “is it feasibly possible to actually identify a person from this partially-obscured PHI”. But also, who the fuck knows if they’re going to care about enforcing PHI and HIPAA laws now 🫠
my medical records were intentionally leaked a few times. HHS did jack fucking shit.