[mattmanser]

The point of this article is that a whistleblower is saying "they're not controlling access properly".

While the Grauniad is trying to spin it to sound worse, the whole point is Google are providing data processing services to a valid HIPAA processor via Google Cloud, not that they nefariously bought the data to integrate it with the search results.

Much like health data stored on AWS with a dedicated internal project team could be accessed by "Amazon" staff. It's kinda the point, the google staff have been brought in to help manage the data.

[JohnFen]

> not that they nefariously bought the data to integrate it with the search results.

I don't think that anyone is claiming they are intending to do this.