There are a lot of accounts that have offshore restrictions yet I see so many instances where offshore resources have access to the data or help support it. There is a global client restrictions list which lists which accounts have restrictions and by which level, but I rarely see it enforced. Even with the recent post about offshore resources supporting Medicare members, my understanding was Medicare had to remain onshore. Am I off on this? I don’t understand why this isn’t a bigger issue.
6 replies (most recent on top)
Dude.... It was so bad in my department. I notified compliance. My vp denied it so I sent screenshots of the offshore user literally querying with phi 3 values hardcoded in their query
I ended up quitting and escalating. No one got in trouble but I did succeed in getting an entire department reassigned to a different project
It’s Medicaid that they can’t have offshore access to. They can have access to Medicare patients.
Oh yeah, not opening that can of worms because this company is guilty
Email your senator about offshore having access to PHI.
In a system starts with big O, all data is accessible by offshore regardless of restrictions
Those laws have been getting broken for years. Its so flagrant now they dont care about even pretending anymore