Legal issues concerning electronic health information: privacy, quality, and liability.

Personally identifiable health information about individuals and general medical information is increasingly available in electronic form in health databases and through online networks. The proliferation of electronic data within the modern health information infrastructure presents significant benefits for medical providers and patients, including enhanced patient autonomy, improved clinical treatment, advances in health research and public health surveillance, and modern security techniques. However, it also presents new legal challenges in 3 interconnected areas: privacy of identifiable health information, reliability and quality of health data, and tortbased liability. Protecting health information privacy (by giving individuals control over health data without severely restricting warranted communal uses) directly improves the quality and reliability of health data (by encouraging individual uses of health services and communal uses of data), which diminishes tort-based liabilities (by reducing instances of medical malpractice or privacy invasions through improvements in the delivery of health care services resulting in part from better quality and reliability of clinical and research data). Following an analysis of the interconnectivity of these 3 areas and discussing existing and proposed health information privacy laws, recommendations for legal reform concerning health information privacy are presented. These include (1) recognizing identifiable health information as highly sensitive, (2) providing privacy safeguards based on fair information practices, (3) empowering patients with information and rights to consent to disclosure (4) limiting disclosures of health data absent consent, (5) incorporating industry-wide security protections, (6) establishing a national data protection authority, and (7) providing a national minimal level of privacy protections.

[1]  J. Hodge.  The intersection of federal health information privacy and state administrative law: The protection of individual health data and workers' compensation , 1999 .

[2]  L. Gostin,et al.  Health Services Research: Public Benefits, Personal Privacy, and Proprietary Interests , 1998, Annals of Internal Medicine.

[3]  A Flahault,et al.  FluNet as a tool for global monitoring of influenza on the Web. , 1998, JAMA.

[4]  J C Wyatt,et al.  The origin, content, and workload of e-mail consultations. , 1998, JAMA.

[5]  W R Hersh,et al.  Applicability and quality of information for answering clinical questions on the Web. , 1998, JAMA.

[6]  Developing countries find telemedicine forges links to more care and research. , 1998, JAMA.

[7]  B L Humphreys,et al.  Medicine and health on the Internet: the good, the bad, and the ugly. , 1998, JAMA.

[8]  R. Raschke,et al.  A computer alert system to prevent injury from adverse drug events: development and evaluation in a community teaching hospital. , 1998, JAMA.

[9]  G Eysenbach,et al.  Responses to unsolicited patient e-mail requests for medical advice on the World Wide Web. , 1998, JAMA.

[10]  R. Haynes,et al.  Effects of computer-based clinical decision support systems on physician performance and patient outcomes: a systematic review. , 1998, JAMA.

[11]  D. Bates,et al.  Effect of computerized physician order entry and a team intervention on prevention of serious medication errors. , 1998, JAMA.

[12]  L. Gostin,et al.  The "Names Debate": The Case for National HIV Reporting in the United States , 1998 .

[13]  David K. Djavaherian.  Reno v. ACLU , 1998 .

[14]  Daniel Z. Sands,et al.  Guidelines for the Clinical Use of Electronic Mail with Patients , 1998 .

[15]  L. Gostin.  Personal Privacy in the Health Care System: Employer-Sponsored Insurance, Managed Care, and Integrated Delivery Systems , 1997, Kennedy Institute of Ethics journal.

[16]  L. Gostin,et al.  Health Care Information and the Protection of Personal Privacy: Ethical and Legal Considerations , 1997, Annals of Internal Medicine.

[17]  G D Lundberg,et al.  Assessing, controlling, and assuring the quality of medical information on the Internet: Caveant lector et viewor--Let the reader and viewer beware. , 1997, JAMA.

[18]  Donald E. Kacmar.  The Impact of Computerized Medical Literature Databases on Medical Malpractice Litigation: Time for Another Helling v. Carey Wake-Up Call? , 1997 .

[19]  Valeriy Nenov,et al.  Application of Information Technology: Remote Analysis of Physiological Data from Neurosurgical ICU Patients , 1996, J. Am. Medical Informatics Assoc..

[20]  Christoph U. Lehmann,et al.  The interactive patient: a multimedia interactive educational tool on the World Wide Web. , 1996, M.D. computing : computers in medical practice.

[21]  Joel R. Reidenberg,et al.  Data Privacy Law: A Study of United States Data Protection , 1996 .

[22]  K H Rothenberg,et al.  Genetic Information and Health Insurance: State Legislative Approaches , 1995, Journal of Law, Medicine & Ethics.

[23]  Lawrence O Gostin,et al.  Health information privacy. , 1995, Cornell law review.

[24]  R. Bashshur.  On the definition and evaluation of telemedicine. , 1995, Telemedicine journal : the official journal of the American Telemedicine Association.

[25]  P. Schwartz.  Protection of privacy in health care reform. , 1995, Vanderbilt law review.

[26]  M D Hagen,et al.  The utility of electronic mail as a medium for patient-physician communication. , 1994, Archives of family medicine.

[27]  R Nelson,et al.  Use of electronic mail as a clinical tool. , 1994, Healthcare information management : journal of the Healthcare Information and Management Systems Society of the American Hospital Association.

[28]  Robert Kevin Grigsby,et al.  Federal Policy for the Protection of Human Subjects , 1993, Research on social work practice.

[29]  Telecommunications Board.  Computers at Risk: Safe Computing in the Information Age , 1990 .

[30]  Ninth Circuit..  Harbeson v. Parke Davis, Inc. , 1984, The Federal reporter.

[31]  Alan B. Vickery.  Breach of Confidence: An Emerging Tort , 1982 .

[32]  H. W. Schultz.  Public Health Service Act , 1981 .

[33]  H. W. Schultz.  Federal Trade Commission Act , 1981 .

[34]  T. Beauchamp,et al.  Principles of biomedical ethics , 1991 .