US DPO case studies
US DPO · Put your knowledge to work in context.
The US Data Privacy Officer (DPO) Certification is a professional credential for practitioners who build and run privacy programs under United States law. It suits privacy officers, compliance managers, in-house counsel, security leads, and consultants who need to show working command of the US regulatory patchwork rather than a single statute. The US DPO case studies are 5 cases and about 3,605 words.
1The Wellness App Outside the HIPAA Perimeter
Meridian Virtual Health is a Delaware professional corporation whose clinicians deliver telehealth in 40 states, and HIPAA clearly covers its clinical platform. In 2023 it launched Meridian Wellness, a direct-to-consumer app requiring no clinician relationship: users log mood scores, sleep, menstrual cycles, prescription names and self-reported PHQ-9 results, and may buy a $9.99 monthly coaching tier.
739 words, about 4 min2Deletion Request With a Fraud Flag and a Broken GPC Signal
Northline Outfitters is a multichannel retailer with 4.2 million loyalty members and stores nationwide. On March 3, a California customer submits a deletion request through the web form and separately emails asking that her purchase history be erased 'including the fraud flag.' Her account shows a chargeback opened 11 days earlier and a $1,240 outstanding balance already referred to collections.
731 words, about 4 min3Lapsed Data Privacy Framework Certification and a New Subprocessor
Cadence People sells HR software to 900 employer clients, mostly in the EU. Its Dublin subsidiary contracts with clients as a processor; the Boston parent hosts the platform and acts as subprocessor.
726 words, about 4 min4Ransomware at the Scheduling Vendor: Starting the Breach Clock
Riverside Valley Health is a three-hospital system in Ohio, Kentucky and Indiana with 62,000 patient portal users. On Monday April 8, its scheduling vendor MedQueue discovers that ransomware deployed the previous Friday encrypted a database server holding appointment notes, insurance member IDs and free-text intake comments.
705 words, about 4 min5Fingerprint Time Clocks: DPIA and the BIPA Question
Vantage Grocery operates 180 stores in Illinois, Texas, Washington and California and wants to replace badge time clocks with fingerprint scanners to cut buddy punching it estimates at $900,000 a year. The vendor, TimePrint, stores templates in a multi-tenant cloud and describes them as irreversible mathematical representations.
704 words, about 4 min