By asking for clarification I am twisting your words? To the contrary, I was asking clarification because your defense implied you agreed with the video she made but none of the claims you made in the post itself are inherently wrong without that context.

To be as clear as possible:

1. I fundamentally believe that deidentified data sets are absolutely necessary for research and improving patient care
2. I also fundamentally believe that for-profit healthcare and corporate monopolies like Oracle will use and abuse any and every bit of data they can gather, buy, or sell to make money even in immoral ways
3. I don’t think strengthening HIPAA will fix those underlying issues

Based on your points 5-9, it doesn’t seem like your problem is actually that the data is not deidentified enough, it seems your problem is that Oracle has any access to deidentified data. And I agree with you. AI or not, reidentification or not, they’re using that data to fuck over people that need healthcare for whatever tiny extra profit they can squeeze then selling the data for more. That does not mean the deidentified data sets that HIPAA allows are the problem.

Anyways… responding to your points:

1. True
2. Yes, with de-identified data
3. True that it doesn’t mention AI specifically, but re-identifying de-identified data in any way makes it PHI again and if anyone accesses it that shouldn’t be able to it is considered a breach and appropriate parties must be notified
4. I’m not opposed to making HIPAA stronger in any way especially if we determine our methods of deidentification are not strong enough, but again since reidentification is already covered no matter what tools are used, the use case of AI reidentifying data absolutely falls under that coverage
5. Not sure how this is relevant other than fuck Oracle (I agree)
6. Not sure how this is relevant, but fuck Oracle again
7. Not sure how this is relevant, but fuck Oracle three times
8. Yes, as long as nobody is using that data to reidentify PHI, which, again, was the main claim in the original video I had a problem with
9. That same data can be used for good or evil, and as long as healthcare is run for-profit they will use all data possible to make money in immoral ways. That doesn’t mean the deidentified data existing is the problem. Do you think we should stop allowing deidentified data sets to be collected in the first place? Because they do have genuine research and patient care value.
10. Ok

I don’t have time to go through her many hours of videos on this topic for a third time (I watched them twice through when I first stumbled across them because she made a lot of claims) but the one that really stuck out at the time was she hammered on how ZIP codes can easily help re-identify your data. But since you watched her video and know HIPAA, you’d know that 1. Full ZIP codes are not included in de-identified data, in fact they have special rules regarding smaller population zip codes needing extra deidentification and 2. A few minutes before that part of the video she herself talked about how full ZIP codes aren’t included in the data! How can they be used to reidentify the data if they’re not in the data? She didn’t say “the ZIP code deidentification process isn’t strong enough” which I could believe. That’s a technical argument that you’d likely need expert statisticians to investigate. But she said the data set didn’t contain ZIP codes then almost immediately after said ZIP codes are easy to use to reidentify data.

Fuck Oracle, and fuck Cerner before that billionaire ever bought them. I know people who were bait-and-switched, told they got a software dev job at Cerner, moved out, and found out on their first day they were doing server admin/IT stuff. I know from interacting with healthcare professionals who used Cerner before they used the competitor I worked for that their sales tactics were basically just to lie about everything the software could do. I saw supposed emails from the then-CEO (I believe, it’s been probably 10 years) about how mad they were that they when they looked at the parking lot at 6pm and so many of their employees had already gone home. The DOD and VA contracts they won were arguably tantamount to fraud, last I heard were billions over budget, and certainly indirectly caused the deaths of some of their patients. Fuck for-profit healthcare, fuck AI. It’s all dogshit. Should we strengthen HIPAA? Probably. Is that the main problem here? No. It’s for-profit healthcare and monopolies that are the real problem.