this post was submitted on 29 Dec 2023
3 points (80.0% liked)

Privacy

833 readers
7 users here now

Privacy is the ability for an individual or group to seclude themselves or information about themselves, and thereby express themselves selectively.

Rules

  1. Don't do unto others what you don't want done unto you.
  2. No Porn, Gore, or NSFW content. Instant Ban.
  3. No Spamming, Trolling or Unsolicited Ads. Instant Ban.
  4. Stay on topic in a community. Please reach out to an admin to create a new community.

founded 2 years ago
MODERATORS
[email protected]
3
Hospital in Czech Republic considering sharing sensitive medical data with Cloudflare site to translate docs (sopuli.xyz)
submitted 11 months ago by [email protected] to c/[email protected]
2 comments fedilink hide all child comments
 

Some people use https://libretranslate.com/ thinking they are gaining some privacy by avoiding Google Translate. This web service is proxied through Cloudflare, thus exposing potentially sensitive text to a privacy-hostile US tech giant. #Libretranslate uses words like “libre”, “free” and “open” to gain people’s trust. No mention of Cloudflare, so quite deceiving.

A CTO in Czech Republic was considering using Libretranslate on sensitive medical and personal data of people. Yikes! His only concern was whether the Libretranslate admin kept logs of the translations.

Czech is an EU member, thus subject to the GDPR. But I actually cannot think of a GDPR violation here in the general case. Everyone is free to outsource. And Europeans would likely be routed to a CF server in Europe.

top 2 comments
sorted by: hot top controversial new old
[–] sarmale 1 points 10 months ago (1 children)

This cant be legal, right?

Right?

[–] [email protected] 2 points 10 months ago* (last edited 10 months ago)

The website of a Belgian law office specializing in GDPR is (ironically) on Cloudflare itself. So they apparently determined that it’s legal under the GDPR. From there, I suppose the question is whether medical information somehow changes the equation. But that’s beyond the GDPR and essentially my question. I don’t know if Czech has privacy safeguards specific to medical data that covers this.