I use a program that monitors all the
scripts that try to run in my browser (Firefox. Don't get me started
on Microsoft! ;) It automatically blocks all scripts unless I give
permission for them to run, which can be sent as a permanent or
temporary permission. Recently, I've had some minor health concerns,
and I had blood work done. The lab gave me information to set up a
private account into their portal so I could see the results of my
bloodwork and the doctors who have viewed it, including their notes
to me. The first thing you want to look for when logging into a site
that involves private information (medical or financial, for
instance) is whether the web address begins with http or https.
Https:// is what you want to see preceding the www address that you
type. The “s” stands for secure, which means that your data is
being encrypted by Transport Layer Security. It's not hacker-proof,
but it's a layer of security that should be there. Imagine my
surprise, as I was loading up my personal medical information on the
https website, when my script blocker notified me that google
analytics was trying to run! Why should Google be anywhere near my
private medical data? I don't know what kind of information google
analytics was set to analyze on that site, but in my opinion, that's
possibly a HIPAA violation.
No comments:
Post a Comment