How do you handle HIPAA and GDPR compliance when sharing visual patient data (like skin lesions or gait videos) with outside researchers?
I am trying to understand the process. Do you just manually blur faces in Premiere/Photoshop? Do you just avoid sharing it entirely? How much of a bottleneck is this?
Compliance often gets viewed as something to check off a list. I'm curious to hear if anyone's seen it genuinely spark discussions among employees or team members. Or maybe even conversations between employees and managers as well.
There are some compliance activities that sound straightforward when someone explains them in a meeting.
Then you actually get involved and discover there are ten stakeholders, three spreadsheets, and a dozen follow-up emails behind the scenes.
What's a task that looked easy to you at first but turned out to be much more complicated in practice?