This case concerns residents in the United States of America. Therefore, prima facie, the GDPR does not apply.
However there ought to be federal and state laws in the States that deal with and provide for some form of personal data protection to U.S residents. A report by Wall Street Journal on the same subject matter states, among others, that "................... patients not yet informed.", implying that the data subjects have a right to be informed as in GDPR.
It would be instructive if we could hear from a legal expert from the States about his/her views on this matter.
Shared On DLIKE
