Warning on Storage of Health Records

[flashl]

Source: NY Times

In an article in The New England Journal of Medicine, two leading researchers warn that the entry of big companies like Microsoft and Google into the field of personal health records could drastically alter the practice of clinical research and raise new challenges to the privacy of patient records.

The authors, Dr. Kenneth D. Mandl and Dr. Isaac S. Kohane, are longtime proponents of the benefits of electronic patient records to improve care and help individuals make smarter health decisions.

But their concern, stated in the article published Wednesday and in an interview, is that the medical profession and policy makers have not begun to grapple with the implications of companies like Microsoft and Google becoming the hosts for vast stores of patient information.

The arrival of these new corporate entrants, the authors write, promises to bring “a seismic change” in the control and stewardship of patient information.

NY Times

Read more: http://www.nytimes.com/2008/04/17/business/17record.html?ref=business

---

Implications like who owns the data when it stored within their proprietary software, database, or on their server? What happens to the data when a company using the service misses a monthly payment or two?

Obviously its not a 'business' concern. Years ago, same questions were raised after discovery that some U.S. customers' credit info is stored in databases off shore.

[notesdev]

1. This is why I do cash-only

and never give my social security number to a medical practicioner.

As a database programmer, I know just how this information could be used - and believe you me, it's not likely to be used for patients' benefit.

[laylah]

2. How lovely you can

afford to "cash and carry"; however, many, if not most, of us cannot.

[notesdev]

3. trying to help, anyway

Working with databases regularly makes one pretty paranoid about having one's own information get into a database. I never sign up for anything that might even put me on a mailing list, if I can help it.

I don't think anyone else's data should be subject to the techniques of data harvesting, either. Let the harvesters assemble their own data to mine - and put an end to these practices which involuntarily include people in these lists for targeting.

Today they target for marketing - what will they target for tomorrow?

[uppityperson]

11. Some insurances still have ss# for insurance id#.

I encourage anyone who has one of these to contact their ins company and ask them to change it as they will. I don't give mine out, although it is out so many places already. My cell phone carrier always asks for it, had to have them change to another number also.

[juno jones]

4. I too am as cash-n-carry as possible.

Which means I see a doc about once a year and use alternitive methods like chinese medicine the rest of the time. Not to mention, I'm uninsured and too chronically broke to pay for that useless shit.

This is one of the reasons that I don't get into the system and oppose Hil making it mandatory. Until our data is secure, I really don't want anyone to have access to my medical records.

[mainegreen]

5. HIPAA covers a lot of this.

HIPAA has nasty teeth. You don't want to cross HIPAA.

I really don't agree that HIPAA doesn't cover them. We make software for the the industry and HIPAA applies to any identifying data we store.

[flashl]

6. We are witnessing an extraordinary period where laws and regulations are routinely ignored

by simply stating there is a security need or a business necessity.

[mainegreen]

8. I'd like to see someone try the 'business necessity' line with HIPAA.

They'd get torn to pieces. Probably by their own lawyers. Lawyers really take HIPAA seriously.

I really don't see how google or microsoft wouldn't be considered a health care clearinghouse and thus a covered entity. And if you think this in any way changes the governments access to your data, well it will probably reduce some abuse. The biggest threat is from improper security of stored records from hacking or internal attack.

[flashl]

10. OT: How often do you think this happens?

Florida medical records sold at Utah surplus store

SALT LAKE CITY -- The medical records of some Central Florida Regional Hospital patients were sold last month at a Salt Lake City surplus store for about $20, a newspaper reported.

...

The Deseret Morning News of Salt Lake City reported in a copyright story for Monday editions that the records of 28 patients were sold to a local school teacher looking for scrap paper for her fourth-grade class.

The mix-up is being blamed on a shipping problem. But some of the people whose records were sold or whose loved ones' records were sold want answers and assurances it won't happen again.

[mainegreen]

12. Not very often, but once is too often.

That hospital is in for a world of bureaucratic hurt btw. Clear violation of HIPAA.

[Phred42]

7. in only 8 years Republicans have destroyed almost everything

that has made America - America

It should be clear to most people by now that Republicans actually Hate America and everything it once stood for.

Goddamn them.

[Trillo]

9. What is the difference between DNA, and health records or data?

As I understand it, DNA is simply data or instructions for the growth and functioning of biological cells. Heath records are the history of how those cells worked en masse. Neither are the cells themselves, but simply data about them.

If there are parallels between the two (not saying there is), then ownership of one has already been removed from each of us.