#fda

HIPAA, FDA Class I, and what counts as medical-device data

“A brushing session by itself is product analytics. The same session tagged with a name, a birthday, and a dentist's email is protected health information. Nothing about the bytes changed — what changed is what they're now attached to, and that is the whole job.”