Portable Digital Devices: Meeting Challenges to Psychotherapeutic Privacy

Ethics and Behavior

Volumn 23, Issue 2, 2013, Pages 81-97

  Taube, Daniel O ^a  

^a ALLIANT INTERNATIONAL UNIVERSITY   (United States)

Author keywords

confidentiality; digital devices; privacy; psychotherapy; technology

Indexed keywords

EID: 84874606144     PISSN: 10508422     EISSN: None     Source Type: Journal    
DOI: 10.1080/10508422.2012.722502     Document Type: Review

References (105)

1. Absolute Software. (n.d.). Computrace data protection [Software]. http://www.absolute.com/en/products/computrace/features.aspx (http://www.absolute.com/en/products/computrace/features.aspx)
2. Alberts v. Devine, 395 Mass. 59, 479 N.E.2d 113 (1985)
3. Alertboot. (n.d.). Alertboot full disk encryption: Comprehensive security for complete peace of mind [Computer software]. http://www.alertboot.com/ (http://www.alertboot.com/)
4. American Association for Marriage and Family Therapy. (2001). Code of ethics. http://www.aamft.org/imis15/content/legal_ethics/code_of_ethics.aspx (http://www.aamft.org/imis15/content/legal_ethics/code_of_ethics.aspx)
5. American Counseling Association. 2005. "Code of ethics". In Journal of Counseling & Development, 84 235-254. doi:10.1002/j.1556-6678.2006.tb00401.x
6. American Psychological Association. 2002. Ethical principles of psychologists and code of conduct. American Psychologist, 57: 1060-1073.
7. American Psychological Association, Ethics Committee. 2010. Report of the Ethics Committee, 2009. American Psychologist, 65: 483-492. doi:10.1037/a0019515
8. American Psychological Association, Ethics Committee. 2011. Report of the Ethics Committee, 2010. American Psychologist, 66: 393-403. doi:10.1037/a0024003
9. Anthony, P. (2010, March 18). 10 of the best Web-based storage solutions reviewed. http://blog.webdistortion.com/2010/03/18/web-based-storage/ (http://blog.webdistortion.com/2010/03/18/web-based-storage/)
10. Balough, R. C. 2001. Global position system and the Internet: A combination with privacy risks. Chicago Bar Association Record, 15: 28-29.
11. Barnett, J. E., Kelly, J. F. and Roberts, M. C. 2011. Telehealth and technology innovations in professional psychology [Special issue]. Professional Psychology: Research and Practice, 42(6)
12. Beckerman-Rodau, S. A. 2004. Ethical risks from the use of technology. Rutgers Computer & Technology Law Journal, 31: 1-34.
13. Berlin, F. S., Malin, H. and Dean, S. 1991. Effects of statutes requiring psychiatrists to report suspected sexual abuse of children. The American Journal of Psychiatry, 148: 449-453.
14. Biddle v. Warren Gen. Hosp., 715 N.E.2d 518 (Ohio, 1999)
15. BlackBerry Knowledge Base. (2011). Actions performed by the BlackBerry smartphone during the removal of stored user and application data. http://btsc.webapps.blackberry.com/btsc/microsites/search.do?cmd=displayKC&docType=kc&externalId=KB16307&sliceId=1&docTypeID=DT_SUPPORTISSUE_1_1&dialogID=111365201&stateId=1%200%20111768751 (http://btsc.webapps.blackberry.com/btsc/microsites/search.do?cmd=displayKC&docType=kc&externalId=KB16307&sliceId=1&docTypeID=DT_SUPPORTISSUE_1_1&dialogID=111365201&stateId=1%200%20111768751)
16. Brown, P. (2008, August 18). Privacy in an age of terabytes and terror. Scientific American. http://www.scientificamerican.com/article.cfm?id=privacy-in-an-age (http://www.scientificamerican.com/article.cfm?id=privacy-in-an-age)
17. California Health and Safety Code, § 1280.15 (2010)
18. California Psychology Licensing Law, California Business and Professions Code §§ 2918, 2960(h), & 2970 (2012)
19. Carbonite.com. (2011). Carbonite data security practices. http://www.carbonite.com/en/files/carbonite-data-security-practices.pdf (http://www.carbonite.com/en/files/carbonite-data-security-practices.pdf)
20. Collins, L. H. 2007. Practicing safer Listserv use: Ethical use of an invaluable resource. Professional Psychology: Research and Practice, 38: 690-698.
21. comScore. (2011, October 20). Social networking on-the-go: U.S. mobile social media audience grows 37 Percent in the past year. http://www.comscore.com/Press_Events/Press_Releases/2011/10/Social_Networking_On-The-Go_U.S._Mobile_Social_Media_Audience_Grows_37_Percent_in_the_Past_Year (http://www.comscore.com/Press_Events/Press_Releases/2011/10/Social_Networking_On-The-Go_U.S._Mobile_Social_Media_Audience_Grows_37_Percent_in_the_Past_Year)
22. Coursey, D. (2010, January 21). Study: Hacking passwords easy as 123456. PCWorld. http://www.pcworld.com/businesscenter/article/187354/study_hacking_passwords_easy_as_123456.html (http://www.pcworld.com/businesscenter/article/187354/study_hacking_passwords_easy_as_123456.html)
23. Edelstein, R. (2008, November 17). How to permanently delete data from your hard drive [Comment number 2]. http://www.readwriteWeb.com/archives/how_to_permanently_delete_data.php (http://www.readwriteWeb.com/archives/how_to_permanently_delete_data.php)
24. Encryption. (n.d.). In Free Dictionary. http://www.thefreedictionary.com/encryption (http://www.thefreedictionary.com/encryption)
25. Evans-Marsh, J. 2003. Empirical support for the United States Supreme Court's protection of the psychotherapist-patient privilege. Ethics and Behavior, 13: 385-400.
26. FairWarning. (2011, September). How privacy considerations drive patient decisions and impact patient care outcomes. http://www.fairwarningaudit.com/documents/2011-whitepaper-us-patient-survey.pdf (http://www.fairwarningaudit.com/documents/2011-whitepaper-us-patient-survey.pdf)
27. Florida Psychological Services Act. 32 Fla. Stat. § 400.009(u) (2010)
28. Fox, Z. (2011, November 17). 25 worst passwords of 2011. http://mashable.com/2011/11/17/worst-internet-passwords/ (http://mashable.com/2011/11/17/worst-internet-passwords/)
29. Garfinkel, S. and Shelat, A. 2003. Remembrance of data past: A study of disk sanitization practices. IEEE Security & Privacy, 1: 17-27.
30. Grohol, J. M. (1999, April 8). Best practices in e-therapy: Confidentiality and privacy. http://psychcentral.com/best/best2.htm (http://psychcentral.com/best/best2.htm)
31. Harmon, A. (2003, May 19). Fame is no laughing matter for the "Star Wars Kid." The New York Times. http://www.nytimes.com/2003/05/19/technology/19DORK.html (http://www.nytimes.com/2003/05/19/technology/19DORK.html)
32. Harrell, S. (2008, July 1). Locating mobile phones through pinging and triangulation, Pursuit Magazine. http://pursuitmag.com/locating-mobile-phones-through-pinging-and-triangulation/ (http://pursuitmag.com/locating-mobile-phones-through-pinging-and-triangulation/)
33. Harris, M. S. 2002. Is email privacy an oxymoron? Meeting the challenges of formulating a company email policy. St. John's Journal of Legal Commentary, 16: 553-567.
34. Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009, Pub. L. No. 111-5, § 13001, 123 Stat. 226 (2009)
35. Health Insurance Portability and Accountability Act of 1996, Pub. L. No. 104-191, 110 Stat. 1936 (2008)
36. Health Insurance Reform: Security Standards, 45 CFR Part 160 and Subparts A and C of Part 164 (2003)
37. HITECH Breach Notification Guidance and Request for Public Comment, 74 Fed. Reg. 19006 (proposed April 27, 2009) (to be codified at 45 C.F.R. pts. 160 and 164)
38. Hoffman, S. and Podgurski, A. 2007. In sickness, health and cyberspace: Protecting the security of electronic private health information. Boston College Law Review, 48: 331-386.
39. Holloway, J. E., Seeman, E., O'Hara, M. and Forst, A. 2006. Regulation and public policy in the full deployment of the enhanced emergency call system (E-911) and their influence on wireless cellular and other technologies. Boston University Journal of Science & Technology Law, 12: 93-126.
40. Hughes, T. & Coughlin, T. (n.d.). Tutorial on disk drive data sanitization. http://cmrr.ucsd.edu/people/Hughes/DataSanitizationTutorial.pdf (http://cmrr.ucsd.edu/people/Hughes/DataSanitizationTutorial.pdf)
41. InSites Consulting. (2011, September 14). Social media around the world 2011. http://www.slideshare.net/stevenvanbelleghem/social-media-around-the-world-2011 (http://www.slideshare.net/stevenvanbelleghem/social-media-around-the-world-2011)
42. International Telecommunication Union. (2008). Measuring the information society: The ICT Development Index. Retrieved from the International Telecommunication Union website http://www.itu.int/ITU-/ict/publications/idi/2009/material/IDI2009_w5.pdf (http://www.itu.int/ITU-/ict/publications/idi/2009/material/IDI2009_w5.pdf)
43. Jacobi, J., & Larkin, E. (2006, June 2). Store it on the Web. PCWorld. http://www.pcworld.com/article/125729/store_it_on_the_web.html (http://www.pcworld.com/article/125729/store_it_on_the_web.html)
44. Jansen, W., & Grance, T. (2011, January). Guidelines on security and privacy in public cloud computing (Draft Special Publication 800-144). Retrieved from National Institute for Standards and Technology, U.S. Department of Commerce website http://csrc.nist.gov/publications/drafts/800-144/Draft-SP-800-144_cloud-computing.pdf (http://csrc.nist.gov/publications/drafts/800-144/Draft-SP-800-144_cloud-computing.pdf)
45. Joyce, F. M. and Bigart, A. E. 2007. Liability for all, privacy for none: The conundrum of protecting privacy rights in a pervasively electronic world. Valparaiso University Law Review, 41: 1481-1514.
46. Karbaliotis, C. (2009, February 4). Laptops, BlackBerries, and borders: Panel presentation [PowerPoint slides]. Retrieved from 10th Annual Security and Privacy Conference http://www.cio.gov.bc.ca/services/security/library/conferences/2009/Presentations/Karbaliotis_Constantine_Symantec-Laptops,Blackberries&BorderV0-3.pdf (http://www.cio.gov.bc.ca/services/security/library/conferences/2009/Presentations/Karbaliotis_Constantine_Symantec-Laptops,Blackberries&BorderV0-3.pdf)
47. Kashi, J. 2004. Hi-tech in the law office: We're all confronted by the mobile security sieve. The Alaska Bar Rag, 28: 26-31.
48. Kingsley-Hughes, A. (2011, March 11). How to: Wipe your old iPad/iPhone/iPod ready for resale. ZDNet. http://www.zdnet.com/blog/hardware/how-to-wipe-your-old-ipadiphoneipod-touch-ready-for-resale/11839 (http://www.zdnet.com/blog/hardware/how-to-wipe-your-old-ipadiphoneipod-touch-ready-for-resale/11839)
49. Kline, M. (2011, January 27). The parade of PHI security breaches: Escalating enforcement activity by state attorneys general-most recently in Vermont [Web log message]. http://hipaahealthlaw.foxrothschild.com/2011/01/articles/hipaa-enforcement/the-parade-of-phi-security-breaches-escalating-enforcement-activity-by-state-attorneys-general-most-recently-in-vermont/ (http://hipaahealthlaw.foxrothschild.com/2011/01/articles/hipaa-enforcement/the-parade-of-phi-security-breaches-escalating-enforcement-activity-by-state-attorneys-general-most-recently-in-vermont/)
50. Lendino, J. (2009, September 11). Kill your phone remotely. PCMag.com. http://www.pcmag.com/article2/0,2817,2352755,00.asp (http://www.pcmag.com/article2/0,2817,2352755,00.asp)
51. Lieber, R. (2011, August 19). Your voice mail may be even less secure than you thought. The New York Times, p. B1. http://www.nytimes.com/2011/08/20/your-money/your-phone-may-be-less-secure-than-you-thought.html?pagewanted=2&_r=1 (http://www.nytimes.com/2011/08/20/your-money/your-phone-may-be-less-secure-than-you-thought.html?pagewanted=2&_r=1)
52. Liebesman, Y. J. 2005. Current development: The potential effects of United States v. Councilman on the confidentiality of attorney-client email communications. Georgetown Journal of Legal Ethics, 18: 693-922.
53. MacDonald v. Klinger, 84 A.D.2d 482 (1982)
54. Manhal-Baugus, M. 2001. E-therapy: Practical, ethical and legal issues. CyberPsychology & Behavior, 4: 551-563.
55. Marx, J. (1998). An ethics for the new surveillance. The Information Society, 14(3). http://web.mit.edu/gtmarx/www/ncolin5.html (http://web.mit.edu/gtmarx/www/ncolin5.html)
56. Masur, J. M. 1999. Comment: Safety in numbers: Revisiting the risks to client confidences and attorney-client privilege posed by Internet electronic mail. Berkeley Technology Law Journal, 14: 1117-1160.
57. Matthews, W. P. 1996. Comment: Encoded confidences: Electronic mail, the Internet, and the attorney-client privilege. Kansas Law Review, 45: 273-300.
58. McGuire, J. M., Toal, P. and Blau, B. 1985. The adult client's conception of confidentiality in the therapeutic relationship. Professional Psychology: Research and Practice, 16: 375-384.
59. Merluzzi, T. V. and Brischetto, C. S. 1983. Breach of confidentiality and perceived trustworthiness of counselors. Journal of Counseling Psychology, 30: 245-251. doi:10.1037/0022-0167.30.2.245
60. Microsoft. (2010). Security risks in the mobile enterprise. http://technet.microsoft.com/en-us/library/cc182262.aspx (http://technet.microsoft.com/en-us/library/cc182262.aspx)
61. Minkevitch, H. (2011, February 23). People v. Diaz: Is your iPhone constitutionally protected? Berkeley Technology Law Journal. http://btlj.org/2011/02/23/people-v-diaz-is-your-iphone-constitutionally-protected/ (http://btlj.org/2011/02/23/people-v-diaz-is-your-iphone-constitutionally-protected/)
62. mobiThinking. (2011, July). Global mobile statistics 2011. http://mobithinking.com/mobile-marketing-tools/latest-mobile-stats#subscribers (http://mobithinking.com/mobile-marketing-tools/latest-mobile-stats#subscribers)
63. Mozy.com. (n.d.). Decho Corporation privacy policy. http://mozy.com/privacy (http://mozy.com/privacy)
64. Mrozinski v. Pogue, 423 S.E.2d 405 (Ga. Ct. App. 1992)
65. Muehleman, T., Pickens, B. K. and Robinson, F. 1985. Informing clients about the limits to confidentiality, risks, and their rights: Is self-disclosure inhibited?. Professional Psychology: Research and Practice, 16: 385-397.
66. Nakashima, E. 2008. Travelers' laptops may be detained at border: No suspicion required under DHS policies. The Washington Post, August 1: A01
67. National Association of Social Workers. 2008. Code of ethics, Washington, DC: Author.
68. Notification in the case of Breach of Unsecured Protected Health Information, 72 Fed. Reg. 42740 (issued August 24, 2009, to be codified at 45 C.F.R. pts. 160 and 164)
69. Nowell, D. and Spruill, J. 1993. If it's not absolutely confidential, will information be disclosed?. Professional Psychology: Research and Practice, 24: 367-369. doi:10.1037/0735-7028.24.3.367
70. Oza, A. 2008. Amend the ECPA: Fourth Amendment protection erodes as e-mails get dusty. Boston University Law Review, 88: 1043-1073.
71. Pennsylvania State Board of Psychology, 49 PA Code § 41.61 (2011)
72. People v. Endacott, 164 Cal. App. 4th 1346, 79 Cal. Rptr. 3d 907 (2008)
73. Piatt, W. and Dewitte, P. 2008. Loose lips sink attorney-client ships: Unintended technological disclosure of confidential communications. St. Mary's Law Journal, 39: 781-818.
74. Poneman Institute. (2011, March), Second annual survey on medical identity theft. http://www.protectmyid.com/images/education_center/pdf/050TypesofFraud/1_types%20of%20fraud_medical%20study.PDF (http://www.protectmyid.com/images/education_center/pdf/050TypesofFraud/1_types%20of%20fraud_medical%20study.PDF)
75. Privacy Rights Clearinghouse. (2011, August). Fact Sheet 18: Online privacy: Using the Internet safely. https://www.privacyrights.org/fs/fs18-cyb.htm (http://https://www.privacyrights.org/fs/fs18-cyb.htm)
76. Privacy Rights Clearinghouse. (2012, January 27). A chronology of data breaches. http://www.privacyrights.org/ar/ChronDataBreaches.htm#2008 (http://www.privacyrights.org/ar/ChronDataBreaches.htm#2008)
77. Province of British Columbia. (n.d.). Policy Summary No. 3: Portable storage devices. http://www.cio.gov.bc.ca/local/cio/informationsecurity/policy/summaries/3_portable_ (http://www.cio.gov.bc.ca/local/cio/informationsecurity/policy/summaries/3_portable_)
78. Rand, J. W. 2000. What would Learned Hand do? Adapting to technological change and protecting the attorney-client privilege on the Internet. Brooklyn Law Review, 66: 361-420.
79. Richmond, D. P. 2007. Comment: Can you find me now?-Tracking the limits on government access to cellular GPS location data. CommLaw Conspectus, 16: 283-219.
80. Rubenstein, I. A., Lee, R. D. and Schwartz, P. M. 2008. Data mining and Internet profiling: Emerging regulatory and technological approaches. University of Chicago Law Review, 75: 261-285.
81. SDAndroid. (n.d.). SHREDroid-Secure deletion for Android. http://www.securedeletion.com/ (http://www.securedeletion.com/)
82. Simple Encryption. (n.d.). http://www.cs.usask.ca/content/resources/tutorials/csconcepts/1999_3/lessons/L3/SimpleEncryption.html.
83. Slabbart, N. J. 2008. Orwell's ghost: How teletechnology is reshaping civil society. Commlaw Conspectus, 16: 349-359.
84. Smith, G. D. 2006. Note: Private eyes are watching you: With the implementation of the E-911 mandate, who will watch every move you make?. Federal Communications Law Journal, 58: 705-725.
85. Softpedia. (n.d.). Cryptofile 1.0. [Software]. http://handheld.softpedia.com/get/Security/Encryption/Cryptofile-38451.shtml (http://handheld.softpedia.com/get/Security/Encryption/Cryptofile-38451.shtml)
86. Spearstone. (2009, March 11). Spearstone announces Smartphone application for DiskAgent product line [Press release]. http://https://diskagent.com/press_releases/smartphone.php (http://https://diskagent.com/press_releases/smartphone.php)
87. Stapleton, T. 2007. The Electronic Communications Privacy Act and Cell Location Data: Is the whole more than the sum of its parts? 73. Brooklyn Law Review,: 383-409.
88. State Board of Medical Examiners v. Hedgepath, 325 S.C. 166, 480 S.E.2d 724 (1997)
89. Taube, D. O. and Elwork, A. 1990. Researching the effects of confidentiality law on patients' self-disclosures. Professional Psychology: Research and Practice, 21: 72-75.
90. TechJournal. (2011, June). Seven tips on keeping your mobile devices secure, report on smartphone malware. http://www.techjournalsouth.com/2011/06/seven-tips-on-keeping-your-mobile-devices-secure-report-on-smartphone-malware/ (http://www.techjournalsouth.com/2011/06/seven-tips-on-keeping-your-mobile-devices-secure-report-on-smartphone-malware/)
91. Texas State Board of Examiners Rules of Practice. 22 Tex. Admin. Code § 465.12, (2011)
92. Texas State Board of Examiners Rules and Regulations, Rules Relating to the Licensing and Regulation of Social Workers, 22 Tex. Admin Code §§ 781.201(7), 781.211(b) & 781.803-791.904 (2011)
93. Truecrypt. (n.d.). Free, open-sourced on-the-fly encryption. http://www.truecrypt.org/
94. Tschabitscher, H. (n.d.). How many emails are sent every day? http://email.about.com/od/emailtrivia/f/emails_per_day.htm (http://email.about.com/od/emailtrivia/f/emails_per_day.htm)
95. United States Computer Emergency Readiness Team. (2004). National cyber alert System: Cyber security tip ST08-001: Using caution with USB drives. http://www.us-cert.gov/cas/tips/ST08-001.html (http://www.us-cert.gov/cas/tips/ST08-001.html)
96. United States Computer Emergency Readiness Team. (2011). Cyber threats to mobile phones. http://www.us-cert.gov/reading_room/cyber_threats_to_mobile_phones.pdf (http://www.us-cert.gov/reading_room/cyber_threats_to_mobile_phones.pdf)
97. United States Department of Health and Human Services. (2008, July). Health information privacy: HHS, Providence Health & Services agree on corrective action plan to protect health information. http://www.hhs.gov/ocr/privacy/hipaa/enforcement/examples/providenceresolutionagreement.html (http://www.hhs.gov/ocr/privacy/hipaa/enforcement/examples/providenceresolutionagreement.html)
98. United States v. Arnold, 533 F.3d 1003 (9th Cir. 2008)
99. United States v. Montoya de Hernandez, 473 U.S. 531 (1985)
100. United States v. Ramsey, 431 U.S. 606 (1977)
101. Watson, H. and Levine, M. 1989. Psychotherapy and mandated reporting of child abuse. American Journal of Orthopsychiatry, 59: 246-256.
102. Werbach, K. 2007. Sensors and sensibilities. Cardozo Law Review, 28: 2321-2371.
103. Whitney, L. (2010, February 16). Cell phone subscriptions to hit 5 billion globally. CNET Reviews. http://reviews.cnet.com/8301-13970_7-10454065-8.html (http://reviews.cnet.com/8301-13970_7-10454065-8.html)
104. Wickr. (n.d.). Wickr: Leave no trace. http://https://www.mywickr.com/ (http://https://www.mywickr.com/)
105. Younggren, J. November 2011. Adventures on the electronic frontier: Ethics and risk management in the digital era, November, San Rafael, CA: Paper presented at the Workshop for the American Psychological Association Insurance Trust.