title: Patients want granular privacy control over health information in electronic medical records.
abstract: OBJECTIVE
  To assess patients' desire for granular level privacy control over which personal health information should be shared, with whom, and for what purpose; and whether these preferences vary based on sensitivity of health information.
  
  
  METHODS
  A card task for matching health information with providers, questionnaire, and interview with 30 patients whose health information is stored in an electronic medical record system. Most patients' records contained sensitive health information.
  
  
  RESULTS
  No patients reported that they would prefer to share all information stored in an electronic medical record (EMR) with all potential recipients. Sharing preferences varied by type of information (EMR data element) and recipient (eg, primary care provider), and overall sharing preferences varied by participant. Patients with and without sensitive records preferred less sharing of sensitive versus less-sensitive information.
  
  
  CONCLUSIONS
  Patients expressed sharing preferences consistent with a desire for granular privacy control over which health information should be shared with whom and expressed differences in sharing preferences for sensitive versus less-sensitive EMR data. The pattern of results may be used by designers to generate privacy-preserving EMR systems including interfaces for patients to express privacy and sharing preferences.
  
  
  CONCLUSIONS
  To maintain the level of privacy afforded by medical records and to achieve alignment with patients' preferences, patients should have granular privacy control over information contained in their EMR.
authors.affiliation: School of Computing, Clemson University, Clemson, SC 29634, USA. caine@clemson.edu
authors.forename: Kelly
authors.initials: K
authors.lastname: Caine
authors.forename: Rima
authors.initials: R
authors.lastname: Hanania
mesh_terms: D000293:Adolescent; D000328:Adult; D000368:Aged; D003219:Confidentiality; D057286:Electronic Health Records; D005260:Female; D019538:Health Care Surveys; D006801:Humans; D007196:Indiana; D033181:Information Dissemination; D008297:Male; D008875:Middle Aged; D015999:Multivariate Analysis; D057240:Patient Preference; D014584:User-Computer Interface