Updating HIPAA for the electronic medical record era

Area of Science:

• Health Informatics
• Health Policy
• Digital Health

Background:

• Patient access to health information is a growing expectation.
• Legislation like HIPAA, HITECH, and the 21st Century Cures Act aims to facilitate this access.
• Technological advancements support seamless, on-demand patient data availability.

Observation:

• Inconsistent definitions of "health information" across policies create confusion.
• Variations in electronic health record (EHR) system capabilities hinder data portability.
• Divergent local health system policies complicate health data release and reuse.

Findings:

• Current policies present a fragmented landscape for patients, providers, and data reusers.
• Challenges to health data portability and fluidity stem from regulatory and technical inconsistencies.
• Achieving the goals of HIPAA, HITECH, and Cures requires addressing these systemic issues.

Implications:

• Policy recommendations are needed to harmonize definitions and streamline data release.
• Standardization of EHR systems is crucial for effective health information exchange.
• Fulfilling the promise of patient-centered health data access requires legislative and systemic improvements.