Abstract

Protecting the privacy of individually-identifiable health data is a dominant health policy objective in the new millennium. Technological, economic, and health-related reasons substantiate the development of a national electronic health information infrastructure. Through this emerging infrastructure, billions of pieces of health data of varying sensitivities are exchanged annually to provide health care services and service transactions, conduct health research, and promote the public’s health. These multi-purpose, rapid exchanges of electronic health data, far removed from the typical disclosure of health information through the doctor/patient relationship of yesteryear, contribute to heightened individual concerns about identifiable health data. Responding to American fears and perceptions of actual and potential privacy abuses, policymakers have recently developed new, modern privacy protections through legislative and regulatory laws, as well as ethical and industry codes.Modern health information privacy protections are reflected in federal regulations developed by the federal Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act of 1996.