{"id":5,"date":"2009-01-05T08:36:44","date_gmt":"2009-01-05T13:36:44","guid":{"rendered":"http:\/\/blogs.law.harvard.edu\/internetahead\/?p=5"},"modified":"2009-01-05T08:38:38","modified_gmt":"2009-01-05T13:38:38","slug":"privacy-part-ii","status":"publish","type":"post","link":"https:\/\/archive.blogs.harvard.edu\/internetahead\/2009\/01\/05\/privacy-part-ii\/","title":{"rendered":"Privacy:  Part II"},"content":{"rendered":"<p>In today&#8217;s post, we&#8217;ll continue the analysis of Obama&#8217;s guarantees of online privacy rights to American citizens.\u00a0 Specifically, we will discuss the commitment to protect sensitive online health data that will be increasingly important as the President-elect attempts to reform the health care system.<\/p>\n<p>\u00a0<\/p>\n<p><span><strong><span style=\"text-decoration: underline\">Privacy Issues:\u00a0 Electronic Health Records<\/span><\/strong><\/span><\/p>\n<p>The digitization of health records is an key part of President-elect Obama&#8217;s health care plan, as it will help to reduce costs while minimizing errors and improving the standard of care in the U.S.\u00a0 However, this idea comes with many new risks of its own:\u00a0 Not only can online\/electronic records leave patients susceptible to general abuse, misuse, or theft of their data, but it also specifically could allow for discrimination in insurance or care.\u00a0 Thus, it is important that the Obama administration acts proactively to safeguard such important information.<\/p>\n<p>Luckily, the transition has already yielded positive results for the privacy of medical records.\u00a0 On December 15, the Department of Health and Human Services released a document entitled &#8220;<a href=\"http:\/\/www.hhs.gov\/healthit\/documents\/NationwidePS_Framework.pdf\" target=\"_blank\">Nationwide Privacy and Security Framework For Electronic Exchange of Individually Identifiable Health Information<\/a>,&#8221; providing guidelines for the protection of electronic records.\u00a0 The document includes 8 key principles for the usage of these documents:<\/p>\n<ol>\n<li><strong>Individual access:\u00a0<\/strong> Individuals should be offered a reasonable and simple means of access to their health information.<\/li>\n<li><strong>Correction:\u00a0 <\/strong>Individuals should be provided with a means to correct erroneous health information.<\/li>\n<li><strong>Openness and Transparency<\/strong><\/li>\n<li><strong>Individual Choice:\u00a0<\/strong> Individuals should be given the opportunity to make decisions about the &#8220;collection, use, and disclosure&#8221; of their health information.<\/li>\n<li><strong>Collection, Use, and Disclosure Limitation:\u00a0 <\/strong>Health information should be collected, used, and disclosed only to &#8220;the extent necessary to accomplish a specified purpose(s) and never to discriminate inappropriately&#8221;.<\/li>\n<li><strong>Data Quality and Integrity<\/strong><\/li>\n<li><strong>Safeguards<\/strong>:\u00a0 Medical records should be protected with technical and physical safeguards that prevent unauthorized abuse or disclosure.<\/li>\n<li><strong>Accountability<\/strong>:\u00a0 Sufficient monitoring mechanisms should be used to ensure that the principles are followed.<\/li>\n<\/ol>\n<p>Additionally, the Department released other documents applying the 1996 <a href=\"http:\/\/www.cms.hhs.gov\/HIPAAGenInfo\/Downloads\/HIPAALaw.pdf\" target=\"_blank\">Health Insurance Portability and Accountability Act<\/a>\u00a0(HIPAA) to the future of electronic records.\u00a0 While many <a href=\"http:\/\/news.cnet.com\/8301-13578_3-10121497-38.html?tag=mncol;txt\" target=\"_blank\">software companies<\/a>\u00a0have argued that this act is sufficient to protect the privacy of health records, many other individuals are still concerned that it doesn&#8217;t go far enough and should be reformed to take into account the rapid changes occurring in technology.\u00a0<\/p>\n<p>\u00a0<\/p>\n<p><span><strong><span style=\"text-decoration: underline\">Recommendations<\/span><\/strong><\/span><span style=\"text-decoration: underline\">\u00a0<\/span><\/p>\n<p>This concern of privacy advocates is legitimate, and the Obama administration should address it before moving forward with the President-elect&#8217;s plans to use electronic health care records.\u00a0 A few issues regarding HIPAA are of particular concern. \u00a0<\/p>\n<p>First, the Act allows the disclosure of private health data<span>\u2014<\/span>without consent<span>\u2014<\/span>for &#8220;treatment, payment, or health-care operations.&#8221;\u00a0 This is done without notifying the patient in any way, and should be changed so that individuals have greater control over how their personal information is used.\u00a0 President-elect Obama has begun to address this issue through the &#8220;Individual Choice&#8221; principle, but should continue to do so by reforming the HIPAA. \u00a0<\/p>\n<p>Additionally, the Center for Democracy and Technology <a href=\"http:\/\/www.cdt.org\/election2008\/privacy\/links.php\" target=\"_blank\">notes<\/a>\u00a0that the HIPAA only applies to health entities.\u00a0 As President, Obama should strengthen the Act for the new electronic records, but he should not merely extend these rules to non-health entities; the HIPAA would not address all of the additional potential privacy problems of employers and Internet companies that would also hold electronic medical records.\u00a0 Instead, new laws must be tailored to these other groups that will have access to private health information. \u00a0<\/p>\n<p>This is particularly important when one considers the potential for <a href=\"http:\/\/content.nejm.org\/cgi\/content\/full\/353\/9\/865\" target=\"_blank\">health discrimination<\/a>.\u00a0 Privacy and patient advocates point out that individuals should have greater control over what medical information employers and insurers have access over to prevent employment or coverage discrimination (i.e. not hiring someone with a terminal disease or charging higher premiums to someone genetically predisposed to having cancer).\u00a0 Right now, forms of discrimination such as medical underwriting (when coverage is selectively provided on the basis of health) are prohibited by the HIPAA, but the law would not work when employers or insurers themselves were the ones holding the information.\u00a0 The Obama administration should work to supplement this law.<\/p>\n<p>Provided that President-elect Obama works to protect and enforce privacy laws while he attempts to fix the health care industry, electronic medical records with be a giant step forward.\u00a0 However, if he fails to carry out the HHS&#8217;s 8 principles or does not take the above-mentioned steps to improve the HIPAA, electronic health information will become a dangerous issue in and of itself.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In today&#8217;s post, we&#8217;ll continue the analysis of Obama&#8217;s guarantees of online privacy rights to American citizens.\u00a0 Specifically, we will discuss the commitment to protect sensitive online health data that will be increasingly important as the President-elect attempts to reform the health care system. \u00a0 Privacy Issues:\u00a0 Electronic Health Records The digitization of health records [&hellip;]<\/p>\n","protected":false},"author":2003,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-5","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/archive.blogs.harvard.edu\/internetahead\/wp-json\/wp\/v2\/posts\/5","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/archive.blogs.harvard.edu\/internetahead\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/archive.blogs.harvard.edu\/internetahead\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/internetahead\/wp-json\/wp\/v2\/users\/2003"}],"replies":[{"embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/internetahead\/wp-json\/wp\/v2\/comments?post=5"}],"version-history":[{"count":0,"href":"https:\/\/archive.blogs.harvard.edu\/internetahead\/wp-json\/wp\/v2\/posts\/5\/revisions"}],"wp:attachment":[{"href":"https:\/\/archive.blogs.harvard.edu\/internetahead\/wp-json\/wp\/v2\/media?parent=5"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/internetahead\/wp-json\/wp\/v2\/categories?post=5"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/internetahead\/wp-json\/wp\/v2\/tags?post=5"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}