You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
TelemetryArea: what it touches
New FeaturesKind: in v2.1.236,
New FeaturesSection of the release
What
On accounts whose entitlement includes "hipaa", a new pass checks every telemetry field against an allowlist before anything is sent and replaces anything unrecognised with a fixed hipaa_redacted placeholder.
Details
Recognised shapes are matched by regex for UUIDs, session ids and version strings, and by fixed enumeration for platform, architecture and client type.
Any string field not on the list is redacted wholesale rather than passed through.
A helper emits a HIPAA notice at most once per terminal.
Keyed on the "hipaa" entitlement check, so accounts without it are unaffected.
Evidence
hipaa_redacted
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
