Doctor John Jones specializes in surgeries that are not medi…

Doctor John Jones specializes in surgeries that are not medically necessary such as face lifts. Since most of the procedures Doctor Jones performs would not be covered under health insurance, he only accepts credit cards for payment and does not bill insurance. Isra Ibrahim, a potential patient, looks online for a doctor to perform a facelift and finds Doctor Jones’s website. When Isra visits Doctor Jones’s office, Isra does not receive a privacy notice with her initial paperwork. Isra asks Doctor Jones for a copy of the privacy notice and is told that the office does not maintain a privacy notice. Is it likely that Doctor Jones has violated HIPAA?

Five years after Linh Lee retired from working for a major t…

Five years after Linh Lee retired from working for a major tobacco producer, Linh was diagnosed with lung cancer. Linh hires an attorney to determine if she has a viable legal claim against her former employer. Linh’s attorney sends a number of requests to the company for records maintained about Linh as well as for practices in place at the time that Linh was an employee of the company. What are the reasons that the company likely maintained these records?

Damir Datsyuk was diagnosed with cancer after taking Tummy R…

Damir Datsyuk was diagnosed with cancer after taking Tummy Relief, a heartburn medication. Prior to the cancer diagnosis, Damir tested positive for Hepatitis C. Damir hired an attorney to sue the manufacturer of Tummy Relief. Because Damir did not want the Hepatitis C diagnosis to be discussed in public, his attorney obtained a qualified protective order from the court.  How does the qualified protective order affect the protected health information in the lawsuit?

Luke Lucky, an experienced poker player, signs up to play in…

Luke Lucky, an experienced poker player, signs up to play in a national poker tournament at Big Dog Casino in Las Vegas, Nevada. After arriving at the casino, Luke decides to participate in 3 smaller tournaments in addition to the national poker tournament.  To cover the entry fees, Luke pays the casino $20,000 in cash. Does this cash payment trigger a reporting requirement?

Iron Dreams, a company whose mission is to ensure that all o…

Iron Dreams, a company whose mission is to ensure that all of its customers get at least 150 minutes of exercise per week, starts a marketing campaign to promote its new app which has a $19.99 monthly subscription. The campaign involves employees of Iron Dreams calling prospective customers around the country. Iron Dreams’s Advertising Manager asks you, as the Privacy Officer, to review the campaign to double check that you believe Iron Dreams would be complying with the requirements of U.S. law. Which of the following parts of the campaign would you approve?

United-by-DNA is a company based in Anchorage, Alaska, that…

United-by-DNA is a company based in Anchorage, Alaska, that sequences individual’s DNA for a fee of $69.99.  Sophia Schmitz, the CEO of the company, hopes to find a way to assist with cancer research after her mother is diagnosed with liver cancer. Sophia instructs her research committee to scrape publicly available resources looking for the names of people diagnosed with liver cancer in Belgium and Germany. Sophia plans to attempt to link these names to their relatives in the United-by-DNA database to help determine if genetics plays a part in those who contract liver cancer. Sophia intends to sell the results of the search on United-by-DNA. One of the members of the research committee has taken this privacy class. Which of these is the most important concern this privacy student might raise?

Angelica Angeles is a 2024 graduate of Georgia Tech who rece…

Angelica Angeles is a 2024 graduate of Georgia Tech who recently started a job at Safe-N-Sound Security in Utah City, Utah. Angelica received an employee manual on the first day of work at the cybersecurity support center, which is unionized. Being a detail-oriented Georgia Tech graduate, Angelica reads the entire manual. The manual is explicit that the company will monitor all emails in a person’s official work account. Angelica learns from the manual that the company promises not to read any emails accessed at work that originate in an account other than the official work account. Based on these statements in the manual, Angelica regularly checks her personal email accounts at work. After a month with Safe-N-Sound Security, Angelica realizes that the company is failing to pay its workers overtime as required by federal law. After this discovery, the topics of Angelica’s personal emails change from general updates to complaints about working conditions at Safe-N-Sound Security. After two months of working for Safe-N-Sound Security, Angelica is fired. Angelica believes that her personal emails led to her termination. If Angelica is correct, does Angelica have a strong case that she should not have been fired?

You are hired as the Chief Privacy Officer of Bear Cubs Deli…

You are hired as the Chief Privacy Officer of Bear Cubs Delivery, a company based in Chicago, Illinois, which has ten warehouses located throughout the state. After the company’s CEO learns that the U.S. Congress is considering a bill known as the “Bosses Spy No More Act,” which would prohibit employers from utilizing certain surveillance tools that use artificial intelligence, the CEO asks you to review the company’s current employee monitoring practices for any potential violations of existing federal or state laws. After investigating the current practices of the company, you become aware that Bear Cubs Delivery is using an employee-monitoring tool that records the video and audio of employees while on-site at the company’s warehouses. The tool utilizes artificial intelligence to identify the faces of individual employees and then to calculate for each identified employee the daily percentage of conversations that are not work related. Your investigation also reveals that employees who work in the warehouses are not informed of this employee-monitoring tool and only top-level executives receive the reports generated by the tool. Based on your investigation, your response to the CEO is: 

What is the size of the given struct in bytes? Assume a char…

What is the size of the given struct in bytes? Assume a char is 1 byte, an int is 4 bytes, and a short is 2 bytes. The struct members are arranged so that each memory address aligns with multiples of the size of the data element; i.e. each member is naturally aligned. struct textbook {    int num_pages;    char title;    short num_chapters;};