Health privacy is difficult but not impossible in a post-HIPAA data-driven world

Chest

Volumn 146, Issue 3, 2014, Pages 835-840

  Terry, Nicolas ^a  

^a Indiana University School of Law Indianapolis   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS TO INFORMATION; ARTICLE; ELECTRONIC MEDICAL RECORD; HEALTH CARE; HEALTH INSURANCE; HUMAN; INFORMATION PROCESSING; LAW; MEDICAL INFORMATION; MEDICAL RECORD; PRIVACY; PUBLIC HEALTH; SOCIAL MEDIA; CONFIDENTIALITY; TRENDS; UNITED STATES;

CONFIDENTIALITY; HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT; HEALTH RECORDS, PERSONAL; HUMANS; PUBLIC HEALTH; SOCIAL MEDIA; UNITED STATES;

EID: 84907189678     PISSN: 00123692     EISSN: 19313543     Source Type: Journal    
DOI: 10.1378/chest.13-2909     Document Type: Article

References (29)

1. The HIPAA privacy and security rules were promulgated under the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191 (Administrative Simplifi cation) and the Health Information Technology for Economic for Clinical Health Act of 2009, Public Law 111-5, Subtitle D (Privacy). An unoffi cial combined text of the HIPAA rules as amended can be found at http://www.hhs.gov/ocr/privacy/hipaa/administrative/combined/hipaasimplifi cation-201303.pdf.
2. Modifi cations to the HIPAA privacy, security, enforcement, and breach notifi cation rules under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; other modifi cations to the HIPAA rules. Fed Regist. 2013;78(17): 5565-5702.
3. Breaches affecting 500 or more individuals. US Department of Health and Human Services website. http://www.hhs.gov/ocr/privacy/hipaa/administrative/breachnotifi cationrule/breachtool.html. Accessed April 2, 2014.
4. Meaningful use. Centers for Medicare & Medicaid Services website. http://www.cms.gov/Regulations-and-Guidance/Legislation/EHRIncentivePrograms/Meaningful-Use.html. Accessed April 2, 2014.
5. Terry NP. Meaningful adoption: what we know or think we know about the financing, effectiveness, quality, and safety of electronic medical records. J Leg Med. 2013; 34 (1): 7-42.
6. Jayakumar A. Cyberattacks are on the rise. And health-care data is the biggest target, Washington Post. February 5, 2014. http://www. washingtonpost.com/blogs/wonkblog/wp/2014/02/05/cyberattacksare-on-the-rise-and-health-care-data-is-the-biggest-target. Accessed April 2, 2014.
7. IMS Health Holdings. Form S-1, Registration Statement Under the Securities Act of 1933. US Securities and Exchange Commission website. http://www.sec.gov/Archives/edgar/data/1595262/000119312514000659/d628679ds1.htm. Accessed April 2, 2014.
8. Terry N. Protecting patient privacy in the age of big data. UMKC Law Rev. 2013; 81: 385-415.
9. Terry NP. Information technology's failure to disrupt health care. Nev Law J. 2013;13(3):722.
10. Terry N. Big data proxies and health privacy exceptionalism. Health Matrix. In press.
11. Terry NP. What's wrong with health privacy? J Health Biomed Law. 2009; 5: 1-32.
12. About blue button. HealthIT.gov website. http://www.healthit.gov/patients-families/blue-button/about-blue-button. Accessed April 2, 2014.
13. Terry N, Francis LP. Ensuring the privacy and confidentiality of electronic health records. U Ill Law Rev. 2007; 2007: 681-735.
14. Public welfare. 45 CFR $160.202.
15. See, for example, Hawaii Health Care Privacy Harmonization Act 2012, which reduced state protections to the federal norm.
16. West's Ann Cal Civ Code $56.06, as amended by AB No. 658 (2013).
17. Cal Health and Safety Code $130203(a)
18. Tex Health & Safety Code Ann $181.001(b)(2)
19. See, for example, Acara v Banks, 470 F3d 569, 572 (5th Cir 2006).
20. Available on LexisNexis.
21. Resnick v AvMed, Inc, 693 F3d 1317 (11th Cir 2012).
22. See generally Terry N. Big data proxies and health privacy exceptionalism. Health Matrix. In press.
23. Consumer data privacy in a networked world: a framework for protecting privacy and promoting innovation in the global digital economy. The White House website. http://www.whitehouse.gov/sites/default/files/privacy-final.pdf. Published 2012. Accessed April 2, 2014.
24. Protecting consumer privacy in an era of rapid change: recommendations for businesses and policymakers. Federal Trade Commission website. http://www.ftc.gov/sites/default/files/documents/reports/federal-trade-commission-reportprotecting-consumer-privacy-era-rapid-change-recommendations/120326privacyreport.pdf. Published 2012. Accessed April 2, 2014.
25. Podesta J. Big data and the future of privacy. The White House website. http://www.whitehouse.gov/blog/2014/01/23/big-dataand-future-privacy. Published January 23, 2014. Accessed April 2, 2014.
26. Section 5(a)(1) Federal Trade Commission Act.
27. In the Matter of LabMD, Inc, a corporation. Federal Trade Commission website. http://www.ft c.gov/sites/default/files/documents/cases/140117labmdorder.pdf. Published January 16, 2014. Accessed April 2, 2014.
28. European Commission. Proposal for a regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), 2012. http://ec.europa.eu/justice/data-protection/document/review2012/com-2012-11-en.pdf. Accessed April 2, 2014.
29. See generally Grossmann C, Goolsby AW, Olsen L, McGinnis JM. Clinical Data as the Basic Staple of Health Learning: Creating and Protecting a Public Good. Washington, DC: Institute of Medicine of the National Academies, 2010.