Hacker News new | ask | show | jobs
by stackskipton 902 days ago
>Basically, an investigator can ask a health care provider a bunch of yes/no questions - "did the patient receive care between $DATE1 and $DATE2?" "yes" "was the patient treated for $THING_RELEVANT_BUT_UNRELATED_TO_CLAIM?" "yes" "okay, thank you, that's all we needed." No "PHI" requested, none provided, but a picture still painted... and HIPAA allows for it.

How is that not PHI? You asked for treatment information and it was provided. Asking it roundabout way doesn't sidestep HIPAA.