Skip to content

A Talk with @BadHIPPA: Demystifying Health Privacy Law

Lucia Savage@BadHIPPA

Healthcare privacy attorney Lucia Savage and the creator of @BadHIPPA debunk pervasive legal myths, clarifying what HIPAA actually regulates.

Summary

The Pervasive Misunderstanding of HIPAA

During the pandemic and political debates, the Health Insurance Portability and Accountability Act (HIPAA) became widely misunderstood and misquoted across social media and news broadcasts.

The Origins of the @BadHIPPA Viral Account

Lucia Savage and the creator of the popular Twitter account @BadHIPPA review some of the most absurd, hilarious, and legally inaccurate public claims about HIPAA.

What HIPAA Actually Regulates

Savage clearly explains the statutory boundaries of HIPAA, defining 'Covered Entities' (hospitals, insurers) versus commercial entities and private citizens.

Modern Health Data Privacy Gaps Beyond HIPAA

The speakers discuss critical regulatory gaps in protecting consumer health data collected by mobile wellness apps, fitness trackers, and search engines.

Related talks

Main Stage·49 min

  • DEF CON
  • Policy
  • Date: Aug 2025
  • Location: Las Vegas

Cooper Quintin · Lisa Femia · Thorin Klosowski · Alexis Hancock · Hannah Zhao

Electronic Frontier Foundation attorneys, technologists, and activists answer community questions on digital rights, surveillance law, privacy legislation, and AI policy.

policyprivacydigital-rights+2