When 2+2 Equals a Privacy Question
Natasha Singer writes:
Big players like the Cerner Corporation, which maintains electronic health systems for 8,000 clients, including large hospitals and retail clinics, and smaller players like Practice Fusion, which offers its Web-based health record systems free to health care providers, say they make use of patient data collected from their clients.
A spokeswoman for Cerner, whose Web site promotes its “data mining of our vast warehouse of electronic health records,” said the company shares de-identified patient data with researchers or drug companies looking for patients to participate in clinical trials. The patient records are “double scrubbed,” she said, explaining that the company removes personal data like names and addresses before it runs a search using a numbered code for each patient.
Other sensitive information, like mental health records, might be removed before the patient data is sent out, she said.
The Web site of Practice Fusion, meanwhile, quotes Ryan Howard, the chief executive, as saying that the company subsidizes its free record-keeping systems by selling de-identified data to insurance groups, clinical researchers and pharmaceutical companies. In an interview, however, Mr. Howard said Practice Fusion had not yet started selling patient information but that it intended to do so.
Read more in The New York Times.