[kingj]

Proper anonymization of that kind of detailed data is a hard problem. There are PhDs and Post-docs and Professors working in that field, and it's non-trivial. Just removing PII won't get you very far, as is obvious by the contents of the reviews.

I don't know how concerned PF really is by all of this, but if they did care about patient privacy, then one would think that they should've done this all from the start with privacy in mind -- or, now, that they would start hiring a privacy red team to shake things up.

Unfortunately, given how non-existent privacy laws and norms are here in the states, I would be surprised if much changed.

[gohrt]

HIPAA exists in the States.