46 articles · Data & AI · page 3 of 3
Articles
Week of 31 August 2020
Blackbaud’s breach exposed patient data that fundraising never needed
The Blackbaud ransomware attack reached hospitals through their fundraising foundations. It revealed donor databases holding more patient information, for longer, than fundraising needed, and showed why keeping less data is the one safeguard that still works after the others fail.
Week of 6 July 2020
Why hospital COVID reporting turned out to be infrastructure
In July 2020, HHS told hospitals to stop sending COVID-19 capacity data to the CDC and use a new HHS route instead. The switch revealed reporting as real infrastructure, and hospitals still counting by hand paid for every change.
Week of 8 June 2020
When vendors set facial recognition policy before agencies did
Within days in June 2020, IBM, Amazon and Microsoft stepped back from selling facial recognition to police. Agencies discovered their suppliers were setting AI policy for them, because few had their own inventory, use rules or contract terms.
Week of 18 May 2020
Small-dollar loans, alternative data and the governance attached
In May 2020, four federal regulators invited banks and credit unions back into small loans and welcomed new data and technology for deciding who qualifies. Using bank-account data well took consented data access, careful model oversight and fair lending controls for automated decisions.
Week of 13 April 2020
Why exposure notification apps rose or fell on the back office
Apple and Google settled the privacy design of exposure notification for health agencies. Whether an app helped came down to what agencies controlled: how fast positive tests produced codes, what alerts told people to do, and getting residents to switch it on.
Week of 9 March 2020
Interoperability rules sent patient data beyond HIPAA’s reach
Two federal rules issued on March 9, 2020, banned information blocking and required standard data connections for patients. Together they let patients send their records into apps HIPAA does not cover, leaving health systems to govern data flows they could no longer refuse.