John,
No one is accusing them of violating HIPAA violations. The "violation" is of our trust: they made this change without informing us.
If John Squire says that have not yet used our data, then I believe him. If they have no intention of selling our data going forward, then why do they need to make this policy change?
AC has always had the right to ask for their use of our data; that was the old policy. The new policy is that we have no say in the matter; they can use it at will, and sell it for whatever purpose they choose.
