New Issues/Challenges New Risks

New Issues in 2007

New Risks in 2007

• Post-Internet Boom:

  • Broader access to health information

  • Little standardization for on-line privacy regulations

  • Access to on-line data can result in access to millions of records

• Consumers becoming part of the model:

  • Aggregate of health information held by consumers

  • Selling of consumer information (e.g., health care products, insurances)

• “Non-covered” entities entering healthcare market:

  • HIPAA does not address these entities

  • New market with little regulation or guidance

• Post-Internet Boom:

  • Unauthorized on-line access to, and disclosure of health information

  • Identity Theft

  • Compromise of millions of records through single security breach

• Consumers becoming part of the model:

  • Accuracy of health information (i.e., how much trust will be given to patient entered data)

  • Read/write control of health information

  • Authorized distribution of health information

• “Non-covered” entities entering healthcare market:

  • No CPS compliance requirements for non-covered entities

  • Potential lack of trust, which has economic impacts