Carr IT Solutions - IT Security and Compliance Consulting

I just came across this example of how to store information in Google calendar from the blog at lifehacker.com.

"I went to the doctor last week for a checkup. I had the appointment on GCal for about a week or two prior. When I got back, one of the first things I did was go to my doctor's appointment "event" and add in some additional information. What he told me, what tests he did, what my blood pressure was, what my weight was, and other similar stuff like that. No big deal, just a few sentences. And now, when I'm sitting around a few years from now wondering when my last checkup was, not only can I search "doctor" and find the date in seconds, I'll also find the specifics of what happened at that appointment."

Essentially what this guy is saying is that he uses a system that he has no cotrol over and no idea on what security measures are being applied to store information regarding his current health status. Does anyone apart from me see a problem here?

If Google were to find out that they are being entrusted with this information, then they might not be too happy as this sort of thing is regulated under the HIPAA regulations in the USA. Perhaps they have an explicit clause to get of this in the Terms & Conditions. You have read the GCal Ts & Cs, haven't you??? Hope so.