title: Safeguarding patient privacy in electronic healthcare in the USA: the legal view.
abstract: The conflict between the sweeping power of technology to access and assemble personal information and the ongoing concern about our privacy and security is ever increasing. While we gradually need higher electronic access to medical information, issues relating to patient privacy and reducing vulnerability to security breaches surmount. In this paper, we take a legal perspective and examine the existing patchwork of laws and obligations governing health information in the USA. The study finds that as Electronic Medical Records (EMRs) increase in scope and dissemination, privacy protections gradually decrease due to the shortcomings in the legal system. The contributions of this paper are (1) an overview of the legal EMR issues in the USA, and (2) the identification of the unresolved legal issues and how these will escalate when health information is transmitted over wireless networks. More specifically, the paper discusses federal and state government regulations such as the Electronic Communications Privacy Act, the Health Insurance Portability and Accountability Act (HIPAA) and judicial intervention. Based on the legal overview, the unresolved challenges are identified and suggestions for future research are included.
authors.affiliation: School of Management, New Jersey Institute of Technology, Newark, NJ 07102, USA. WalshD@njit.edu
authors.forename: Diana
authors.initials: D
authors.lastname: Walsh
authors.forename: Katia
authors.initials: K
authors.lastname: Passerini
authors.forename: Upkar
authors.initials: U
authors.lastname: Varshney
authors.forename: Jerry
authors.initials: J
authors.lastname: Fjermestad
mesh_terms: D016494:Computer Security / Q000331:legislation & jurisprudence*; D003219:Confidentiality / Q000331:legislation & jurisprudence*; D006233:Persons with Disabilities / Q000331:legislation & jurisprudence; D020408:Health Insurance Portability and Accountability Act / Q000331:legislation & jurisprudence; D006801:Humans; D016347:Medical Records Systems, Computerized / Q000331:legislation & jurisprudence*; D013685:Telecommunications / Q000331:legislation & jurisprudence*; D014481:United States