Confidentiality, consent and autonomy in the physician-patient relationship

In the practice of medicine there has long been a conflict between patient management and respect for patient autonomy. In recent years this conflict has taken on a new form as patient management has increasingly been shifted from physicians to insurers, employers, and health care bureaucracies. The consequence has been a diminishment of both physician and patient autonomy and a parallel diminishment of medical record confidentiality. Although the new managers pay lip service to the rights of patients to confidentiality of their records, in fact they advocate very liberal medical records access policies. They argue that a wide range of parties has a need to know the contents of individually identifiable medical records in order to control costs, promote quality of care, and undertake research in the public interest. Broad interpretations of the need to know, however, are at odds with strict interpretations of the right to confidentiality. Strict confidentiality policies require that, with few exceptions, patient consent be obtained whenever a patient's record is used outside the treatment context. The traditional criterion for overriding the consent requirement has been that without the override some harm would directly result. This rule is now challenged by the claim that patients have a duty to make their records available for a wide range of research and public health purposes. The longstanding tension between physician responsibility for patient welfare and respect for patient autonomy is being replaced by a debatable requirement that both physician and patient autonomy be subordinated to the goals of data collection and analysis.