@geoffreyfowler looks at software that thousands of clinics and hospitals across the United States use to check people into appointments ... which harvests the information people provide and uses it to target ads.
How can they do that? There's a paragraph authorizing this in the consent form people sign when they're checking in. Most people don't bother to read it, so consent to sharing without even thinking about it.
It's a great example of the limitations of "notice and consent".
#ADPPA, the draft bipartisan federal privacy bill, allows sharing of sensitive health care data as long as there's "affirmative express consent."
Does that mean it still allows for this kind of data abuse? Good question!
Earlier, @dmehro and @grace_c_oldham had reported on Facebook using the same technique to collecting sensitive data about visitors of crisis pregnancy center websites - full names, phone numbers, and even whether they schedule abortion consultations.
@CCDHate reports that Google frequently directs users searching for abortion information to these fake "pregancy crisis centers" -- who then use Facebook's tracking to harvest those users information.
There's more detail, and links to a few more stories, in today's newsletter. Check it out -- and, if you're interested in privacy, you can sign up for regular updates.
Here's our post from yesterday with an update on where things are with #ADPPA -- and some perspectives from our experiences from legislative battles over privacy here in Washington state
Time for some hot #privacy action! The House Subcommittee on Consumer Protection and Commerce hearing on the American Data Privacy and Protection Act (#ADPPA) starts at 10:30 am Eastern!