this post was submitted on 20 May 2024
215 points (100.0% liked)
Technology
37801 readers
239 users here now
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
Subcommunities on Beehaw:
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I'm curious whether the increasingly invasive telemetry of modern Windows will have legal implications surrounding patient privacy here in the US. I work IT in the healthcare field, and one of our key missions is HIPAA compliance. What, then, will be the impact if Microsoft starts storing more and more in-depth data offsite? Will keyboard entries into our EHR be tracked and stored in Microsoft's servers? Will we subsequently be held liable if a breach at Microsoft causes this information to leak, or if Microsoft just straight-up starts selling it to advertisers? Windows is our one-and-only option for endpoint devices, so it's not like we can just switch.
I genuinely don't have the answers to these questions right now, but it may start to become a serious conversation for our department in the future if things continue at the trajectory they're going at. Or, maybe I'm just old and paranoid and everything will be okie dokie.
I guess it will be like it was before, that there is a different version of windows for these use cases. Like Windows LTSC.
Like most of Microsoft's more odious features, this one can be turned off through GPO/Intune policy across an organization. As such, the liability will mostly fall on the organization to make sure it's off. The privacy and security impacts will be felt by individuals and small businesses.
They claim that the data is only stored locally, so far. We'll see, I guess.
Sadly a lot of the privacy switches are exclusive to enterprise and education users, but our endpoints are running Pro (we have our previous supervisor to thank for that). I guess I'll hope this is one of the ones we can just toggle off without any fuss.