National HIV Prevention Conference


Atlanta, Georgia, USA — August 29- September 1, 1999


Print this Article


A national review of the law on health information privacy.

Natl HIV Prev Conf 1999 Aug 29-Sep 1:(abstract no. 736)
Gostin LW, Lazzarini Z, Neslund VS, Osterholm MT
Georgetown University Law Center, Washington, DC.


Our objectives were to review and analyze the laws in the 50 states, the district of Columbia, and Puerto Rico that regulate the acquisition, storage, and use of public health data and to offer proposals for reform of the laws on public health information privacy. Virtually all states reported some statutory protection for governmentally maintained health data for public health information in general (49 states), communicable diseases (42 states), and sexually transmitted diseases (43 states). State statutes permitted disclosure of data for statistical purposes (42 states), contact tracing (39 states), epidemiologic investigations (22 states), and subpoena or court order (14 states). The survey revealed significant problems that affect both the development of fair and effective public health information systems and the protection of privacy. Statutes may be silent about the degree of privacy protection afforded, confer weaker privacy protection to certain kinds of information, or grant health officials broad discretion to disseminate personal information. Our proposals for law reform are based on a meeting of experts at the Carter Presidential Center under the auspices of the Centers for Disease Control and Prevention and the Council of State and Territorial Epidemiologists: (1) an independent data protection commission should be established, (2) health authorities should justify the collection of personally identifiable information, (3) subjects should be given basic information about data practices, (4) data should be held and used in accordance with fair information practices, (5) legally binding privacy and security assurances should attach to identifiable health information with significant penalties for breach of these assurances, (6) disclosure of data should be made only for purposes consistent with the original collection, and (7) secondary uses beyond those originally intended by the data collector should be permitted only with informed consent.

PRESENTER CONTACT INFORMATION:
Name: Lawrence Gostin
Address: Georgetown University Law Center
600 New Jersey Avenue, N.W.
Washington, D.C. 20001

Acrobat ReaderDownload PDF of this abstract.

990829
736


Centers for Disease Control and Prevention. National HIV Prevention Conference, 1999. Atlanta, GA: U.S. Department of Health and Human Services, Centers for Disease Control and Prevention, August 29- September 1, 1999.

AEGiS is made possible through unrestricted funding from Boehringer Ingelheim, iMetrikus, Inc., John M. Lloyd Foundation, the National Library of Medicine, and donations from users like you. Always watch for outdated information. This article first appeared in 1999. This material is designed to support, not replace, the relationship that exists between you and your doctor.