The Patient Privacy Rights consumer advocacy coalition is calling on the HIT Policy Committee, a federal advisory board mandated under the American Recovery and Reinvestment Act, to set the bar high for privacy as the government implements the law's health IT provisions.
"The health care and health data mining industries will not willingly build and use privacy-enhancing electronic health records and systems unless you act to set a high bar," Deborah Peel, M.D., founder of the coalition, testified on Sept. 18 before the policy committee. "Congress set a high bar in the ARRA. Congress recognized that the status quo for privacy will not ensure trust and required HIT systems to add new privacy rights very quickly."
Peel recommended the committee adopt the following broad policies to ensure consumer engagement, choice and trust:
- No protected health information should be "exchanged" without the informed consent of the patient.
- The patient has a right to designate a place where their provider must send a copy of their electronic medical information shortly after each encounter at no charge.
- All access to patient records via health information exchanges must be with the explicit permission of the patient, and must include the ability of the patient to selectively prevent the release of specific information to specific providers at specific times.
Peel's full testimony, and testimony on privacy issues from other individuals and organizations, is available at http://healthit.hhs.gov/portal/server.pt. Click on Federal Advisory Committees, then Health IT Policy Committee, then scroll down to the Sept. 18 meeting materials.
Joseph Goedert is news editor at Health Data Management.