Hacker News new | ask | show | jobs
by CabSauce 1209 days ago
It's trivial to de-identify someone from shockingly limited data. Just by submission to an outside service, they know a date, location, and whatever information was submitted. That's plenty, especially assuming they referenced a procedure or comorbidities.
1 comments

A date of what? The request to ChatGPT to generate an imaginary appeal?

So you know the individual was rejected prior to that. Probably. Maybe.

And maybe roughly where the individual is located, because ChatGPT sees an IP off of… something.

So somewhere, someone asked ChatGPT about a rejected treatment or procedure appeal.

Now if the doctor provides a poorly written appeal and asks for it to be fixed, that is another case entirely, especially if they left in patient info. But there is a very large gap between these two situations, and the first one isn’t nearly as much as you suggest.