Giving patients granular control of personal health information: Using an ethics 'Points to Consider' to inform informatics system designers

International Journal of Medical Informatics

Volumn 82, Issue 12, 2013, Pages 1136-1143

  Meslin, Eric M ^a,b,c   Alpert, Sheri A ^a   Carroll, Aaron E ^b,c   Odell, Jere D ^a,c   Tierney, William M ^b,d   Schwartz, Peter H ^a,b,c  

^a Indiana University   (United States)

^b INDIANA UNIVERSITY SCHOOL OF MEDICINE   (United States)

^c INDIANA UNIVERSITY   (United States)

^d REGENSTRIEF INSTITUTE   (United States)

Author keywords

Computerized; Electronic health records; Ethics; Medical records systems; Patient access to records; Physician patient relations; Privacy

Indexed keywords

COMPUTERIZED; ELECTRONIC HEALTH RECORD; ETHICS; MEDICAL RECORDS SYSTEMS; PATIENT ACCESS; PHYSICIAN-PATIENT RELATIONS;

DATA PRIVACY; DESIGN; INFORMATION SCIENCE; RECORDS MANAGEMENT; TOOLS;

PHILOSOPHICAL ASPECTS;

ARTICLE; ELECTRONIC MEDICAL RECORD; ETHICIST; HEALTH CARE POLICY; HUMAN; MANDATORY REPORTING; MEDICAL ETHICS; MEDICAL INFORMATICS; MEDICAL INFORMATION; MEDICAL INFORMATION SYSTEM; PATIENT AUTONOMY; PATIENT DECISION MAKING; PATIENT INFORMATION; PATIENT PREFERENCE; PRIORITY JOURNAL; RISK ASSESSMENT; UNITED STATES;

COMPUTERIZED; ELECTRONIC HEALTH RECORDS; ETHICS; MEDICAL RECORDS SYSTEMS; PATIENT ACCESS TO RECORDS; PHYSICIAN-PATIENT RELATIONS; PRIVACY;

ACCESS TO INFORMATION; COMPUTER SECURITY; CONFIDENTIALITY; HUMANS; INFORMATION MANAGEMENT; MEDICAL INFORMATICS COMPUTING; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; PATIENT ACCESS TO RECORDS; SOFTWARE DESIGN;

EID: 84888201299     PISSN: 13865056     EISSN: 18728243     Source Type: Journal    
DOI: 10.1016/j.ijmedinf.2013.08.010     Document Type: Article

References (51)

1. Faden R.R., Beauchamp T.L., King N.M.P. A History and Theory of Informed Consent 1986, Oxford UP, New York, 392 pp.
2. Schwartz P.H., Meslin E.M. The ethics of information: absolute risk reduction and patient understanding of screening. J. Gen. Intern. Med. 2008, 23(6):867-870.
3. Alpert S.A. Health care information: access, confidentiality, and good practice. Ethics, Computing and Medicine: Informatics and the Transformation of Health Care 1998, 75-101. Cambridge UP, New York. K.W. Goodman (Ed.).
4. Alpert S. Privacy issues in clinical genomic medicine, or Marcus Welby, M.D., meets the $1000 genome. Camb. Q. Healthc. Ethics 2008, 17(4):373-384.
5. Saul S. Drowning in Data (Internet) 2002, Available from:, (cited 2013 April 13). http://www.a-website.org/mnemosyne/no_signposts/01tsunami.html.
6. Anderson J.G. Social, ethical and legal barriers to e-health. Int. J. Med. Inform. 2007, 76(May-June (5/6)):480-483.
7. Boonstra A., Broekhuis M. Barriers to the acceptance of electronic medical records by physicians from systematic review to taxonomy and interventions. BMC Health Serv. Res. 2010, 10:231.
8. Caine K., Hanania R. Patients want granular privacy control over health information in electronic medical records. J. Am. Med. Inform. Assoc. 2013, 20(1):7-15.
9. Civan A., Skeels M.M., Stolyar A., Pratt W. Personal health information management: consumers' perspectives. AMIA Annu. Symp. Proc. 2006, 156-160.
10. Malin B.A., Emam K.E., O'Keefe C.M. Biomedical data privacy: problems, perspectives, and recent advances. J. Am. Med. Inform. Assoc. 2013, 20(1):2-6.
11. Perera G., Holbrook A., Thabane L., Foster G., Willison D.J. Views on health information sharing and privacy from primary care practices using electronic medical records. Int. J. Med. Inform. 2011, 80(February (2)):94-101.
12. OCR HIPAA Privacy Uses and Disclosures for Treatment, Payment, and Health Care Operations (Internet) 2003, April, Available from:, (cited 2013 April 13). http://www.hhs.gov/ocr/privacy/hipaa/understanding/coveredentities/usesanddisclosuresfortpo.html.
13. Hebl M.R., Xu J., Mason M.F. Weighing the care: patients' perceptions of physician care as a function of gender and weight. Int. J. Obes. Relat. Metab. Disord. 2003, 27(2):269-275.
14. Shaw M., Tomlinson D., Higginson I. Survey of HIV patients' views on confidentiality non-discrimination policies in general practice. BMJ 1996, 312(7044):1463-1464.
15. Thornicroft G., Brohan E., Rose D., Sartorius N., Leese M. Global pattern of experienced and anticipated discrimination against people with schizophrenia: a cross-sectional survey. Lancet 2009, 373(9661):408-415. Indigo Study Group.
16. McDonald C.J., Overhage J.M., Tierney W.M., Dexter P.R., Martin D.K., Suico J.G., Zafar A., Schadow G., Blevins L., Glazener T., Meeks-Johnson J., Lemmon L., Warvel J., Porterfield B., Warvel J., Cassidy P., Lindbergh D., Belsito A., Tucker M., Williams B., Wodniak C. The Regenstrief Medical Record System: a quarter century experience. Int. J. Med. Inform. 1999, 54(3):225-253.
17. Blumenthal D. Stimulating the adoption of health information technology. N. Engl. J. Med. 2009, 360(15):1477-1479.
18. National Research Council (U.S.) Committee on Maintaining Privacy and Security in Health Care Applications of the National Information Infrastructure. For the Record: Protecting Electronic Health Information 1997, National Academy Press, Washington, DC, 264 pp.
19. Goodman K.W. Ethics, Computing, and Medicine: Informatics and the Transformation of Health Care 1998, Cambridge UP, New York, NY, USA, 180 pp.
20. Miller R.A. Why the standard view is standard: people, not machines, understand patients' problems. J. Med. Philos. 1990, 15(6):581-591.
21. K.W. Goodman, E.M. Meslin, Ethics, information technology, and public health: duties and challenges in computational epidemiology, in: J.J. Magnusen, P. Fu, J. Aspevig (Eds.), Public Health Informatics and Information Systems, 2nd ed., Springer (forthcoming).
22. Title XIII (Health Information Technology for Economic and Clinical Health Act, "HITECH") of the American Recovery and Reinvestment Act of 2009 ("AARA"), Pub. L. No. 111-5, 123 Stat. 115, 226-79, 2009 (codified in scattered sections of 42 U.S.C.).
23. Health Insurance Portability and Accountability Act of 1996, Pub. L. No. 104-191, 1996 (codified in scattered sections of title 42 U.S. Code); 45 C.F.R. parts 160 and 164 (HIPAA Privacy and Security Rules).
24. President's Council of Advisors on Science & Technology (PCAST) Report to the President Realizing the Full Potential of Health Information Technology to Improve Healthcare for Americans: A Path Forward 2010, PCAST, Executive Office of the President, U.S., Washington, DC, 108 pp. Available from:, (cited 2012 February 15). http://www.whitehouse.gov/sites/default/files/microsites/ostp/pcast-health-it-report.pdf.
25. Health IT Policy Committee, Privacy and Security Tiger Team, Letter to David Blumenthal, Chairman of the Office of the National Coordinator for Health IT, August 19, 2010 (cited 2013 March 20). Available from: http://www.healthit.gov/sites/default/files/tigerteamrecommendationletter8-17.pdf.
26. Beauchamp T.L., Childress J.F. Principles of Biomedical Ethics 2009, Oxford UP, New York, 417 pp. 6th ed.
27. Emanuel E.J., Emanuel L.L. Four models of the physician-patient relationship. JAMA 1992, 267(16):2221-2226.
28. Katz J. The Silent World of Doctor and Patient 1984, Free Press, New York, 263 pp.
29. Calvillo J., Román I., Roa L.M. Empowering citizens with access control mechanisms to their personal health resources. Int. J. Med. Inform. 2013, 82(January (1)):58-72.
30. Pellegrino E.D., Thomasma D.C. For the Patient's Good: The Restoration of Beneficence in Health Care 1988, Oxford UP, New York, 240 pp.
31. Quill T.E., Brody H. Physician recommendations and patient autonomy: finding a balance between physician power and patient choice. Ann. Intern. Med. 1996, 125(9):763-769.
32. Kon A.A. The shared decision-making continuum. JAMA 2010, 304(8):903-904.
33. McNutt R.A. Shared medical decision making: problems process progress. JAMA 2004, 292(20):2516-2518.
34. Secretary's Advisory Committee on Automated Personal Data Systems Records, Computers and the Rights of Citizens. DHEW Publication No. (OS) 73-94, Stock No. 1700-00116 1973, July, Superintendent of Documents, US Government Printing Office, Washington, DC.
35. Office of the National Coordinator for Health Information Technology (ONC) Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information 2008, December, ONC, U.S. Department of Health and Human Services, Available from:, (cited 2013 March 16). http://www.healthit.gov/sites/default/files/nationwide-ps-framework-5.pdf.
36. The Madrid Privacy Declaration (Internet), 2009, November, Madrid, Spain. Available from: (cited 2013 March 16). http://thepublicvoice.org/madrid-declaration/.
37. Indiana Health Information Exchange, Indiana Network for Patient Care (Internet). Available from: (cited 2013 April 20). http://www.ihie.org/indiana-network-for-patient-care.
38. McDonald C.J., Overhage J.M., Barnes M., Schadow G., Blevins L., Dexter P.R., Mamlin B., Committee I.M. The Indiana network for patient care: a working local health information infrastructure. An example of a working infrastructure collaboration that links data from five health systems and hundreds of millions of entries. Health Aff. (Millwood) 2005, 24(5):1214-1220.
39. Fife R.S., Keener P., Meslin E.M., Randall M., Schiffmiller R.L. Faculty ownership of medical facilities: inappropriate conflict or an opportunity that benefits physicians and patients?. Acad. Med. 2004, 79(11):1051-1055.
40. Knoppers B.M., Leroux T., Doucet H., Godard B., Laberge C., Stanton-Jean M., Fortin S., Cousineau J., Monardes C., Girard N., Levesque L., Durand C., Farmer Y., Dion-Labrie M., Bouthillier M.E., Avard D. Framing genomics, public health research and policy: points to consider. Public Health Genomics 2010, 13(4):224-234.
41. Were M.C., Meslin E.M. Ethics of implementing Electronic Health Records in developing countries: points to consider. AMIA Annu. Symp. Proc. 2011, 1499-1505.
42. Fredrickson D.S. The Recombinant DNA Controversy: A Memoir: Science, Politics, and the Public Interest 1974-1981 2001, ASM Press, Washington, DC, 388 pp.
43. Drabiak-Syed K. Granular control of EHRs to overcome fragmented disclosure law: how policy choices for granularity will affect clinical care, impact secondary use of health information, and alter risks for patients and providers. Ind. Health Law Rev. 2013, 10(39):39-74.
44. Meslin E.M., Alpert S., Carroll A.E., Odell J.D., Schwartz P.H. Points to Consider in Ethically Constructed Patient-Controlled Electronic Health Records 2012, August, Indiana University Center for Bioethics, Indianapolis, Indiana, Available from:. http://hdl.handle.net/1805/2936.
45. Jonas H. The Imperative of Responsibility: In Search of An Ethics for the Technological Age 1984, University of Chicago Press, Chicago, 255 pp.
46. van der Linden H., Kalra D., Hasman A., Talmon J. Inter-organizational future proof EHR systems: a review of the security and privacy related issues. Int. J. Med. Inform. 2009, 78(March (3)):141-160.
47. Van Gorp A., Van de Poel I. Deciding on ethical issues in engineering design. Philosophy and Design: From Engineering to Architecture 2008, 77-104. Springer, Dordrecht. P. Vermaas, P. Kroes, A. Light, S. Moore (Eds.).
48. La Puma J., Stocking C.B., Silverstein M.D., DiMartini A., Siegler M. An ethics consultation service in a teaching hospital. Utilization and evaluation. JAMA 1988, 260(6):808-811.
49. Cho M.K., Tobin S.L., Greely H.T., McCormick J., Boyce A., Magnus D. Research ethics consultation: the Stanford experience. IRB 2008, 30(6):1-6.
50. Meslin E.M., Alyea J.M., Helft P.R. Pandemic Influenza Preparedness: Ethical Issues and Recommendations to the Indiana State Department of Health 2008, August, Indiana University Center for Bioethics, Indianapolis (IN), Available from:. http://hdl.handle.net/1805/1912.
51. Meslin E.M., Goodman K.W. An ethics and policy agenda for biobanks and electronic health. Sci. Prog. 2010, February, Available from:. http://www.scienceprogress.org/2010/02/bank-on-it/.