Slashdot Mirror
Complaint Challenges Univ. of Hawaii Email Partnership Wth Google
An anonymous reader writes "A recent move by the University of Hawaii forcing all students and faculty to migrate their independent university email accounts to Google has raised serious questions, prompting one student to file a complaint with the U.S. Department of Education, with senior faculty questioning both the implementation and scope of this partnership." One of the stranger notes: a clause, defended as standard, naming Google a "school official" of the university.
HIPPA does not require that data be passed in encrypted form. It only requires that reasonable effort be made secure it. However, that can be patient data can be transmitted via internal email because it's all Exchange and therefore encrypted over the wire, then in most cases, HIPPA is satisfied.
Email Encryption still has long way to go before it's completely transparent to user.
Where I work we are a service provider for court public records, and are legally an agent of the court for exactly the same reasons. It allows any lawsuits or what have you to be directed to the court as opposed to us. If the court screws up, and makes some information public that shouldn't we do our best to correct the issue, but in the end it's the court's fault and not our own. We even have to be careful in how much help we give them in setting up what data they show, we can't direct them at all or it could make us liable for their bad choices. We can tell them what the majority of our other courts do in similar situations, but even that is a stretch.