Shadow health records meet new data privacy laws

Research output: Contribution to journalJournal articleResearchpeer-review

Standard

Shadow health records meet new data privacy laws. / Price II, William Nicholson; Spector-Bagdady, Kayte ; Minssen, Timo; Kaminski, Margot .

In: Science, Vol. 363, No. 6426, 01.02.2019, p. 448-450.

Research output: Contribution to journalJournal articleResearchpeer-review

Harvard

Price II, WN, Spector-Bagdady, K, Minssen, T & Kaminski, M 2019, 'Shadow health records meet new data privacy laws', Science, vol. 363, no. 6426, pp. 448-450. https://doi.org/10.1126/science.aav5133

APA

Price II, W. N., Spector-Bagdady, K., Minssen, T., & Kaminski, M. (2019). Shadow health records meet new data privacy laws. Science, 363(6426), 448-450. https://doi.org/10.1126/science.aav5133

Vancouver

Price II WN, Spector-Bagdady K, Minssen T, Kaminski M. Shadow health records meet new data privacy laws. Science. 2019 Feb 1;363(6426):448-450. https://doi.org/10.1126/science.aav5133

Author

Price II, William Nicholson ; Spector-Bagdady, Kayte ; Minssen, Timo ; Kaminski, Margot . / Shadow health records meet new data privacy laws. In: Science. 2019 ; Vol. 363, No. 6426. pp. 448-450.

Bibtex

@article{8db1b24ed659461cbd5151e5a68f07b6,
title = "Shadow health records meet new data privacy laws",
abstract = "Large sets of health data can enable innovation and quality measurement but can also create technical challenges and privacy risks. When entities such as health plans and health care providers handle personal health information, they are often subject to data privacy regulation. But amid a flood of new forms of health data, some third parties have figured out ways to avoid some data privacy laws, developing what we call “shadow health records”—collections of health data outside the health system that provide detailed pictures of individual health—that allow both innovative research and commercial targeting despite data privacy rules. Now that space for regulatory arbitrage is changing. The long arms of Europe's new General Data Protection Regulation (GDPR) and California's new Consumer Privacy Act (CCPA) will reach shadow health records in many companies. In this article, we lay out the contours of the GDPR's and CCPA's impact on shadow health records and health data more broadly, highlight critical remaining uncertainty, and call for increased clarity from lawmakers and industry on the use of such data for research.",
keywords = "Faculty of Law, big data, GDPR, CCPA, Shadow health records, research exemption, privacy",
author = "{Price II}, {William Nicholson} and Kayte Spector-Bagdady and Timo Minssen and Margot Kaminski",
year = "2019",
month = "2",
day = "1",
doi = "10.1126/science.aav5133",
language = "English",
volume = "363",
pages = "448--450",
journal = "Science",
issn = "0036-8075",
publisher = "American Association for the Advancement of Science",
number = "6426",

}

RIS

TY - JOUR

T1 - Shadow health records meet new data privacy laws

AU - Price II, William Nicholson

AU - Spector-Bagdady, Kayte

AU - Minssen, Timo

AU - Kaminski, Margot

PY - 2019/2/1

Y1 - 2019/2/1

N2 - Large sets of health data can enable innovation and quality measurement but can also create technical challenges and privacy risks. When entities such as health plans and health care providers handle personal health information, they are often subject to data privacy regulation. But amid a flood of new forms of health data, some third parties have figured out ways to avoid some data privacy laws, developing what we call “shadow health records”—collections of health data outside the health system that provide detailed pictures of individual health—that allow both innovative research and commercial targeting despite data privacy rules. Now that space for regulatory arbitrage is changing. The long arms of Europe's new General Data Protection Regulation (GDPR) and California's new Consumer Privacy Act (CCPA) will reach shadow health records in many companies. In this article, we lay out the contours of the GDPR's and CCPA's impact on shadow health records and health data more broadly, highlight critical remaining uncertainty, and call for increased clarity from lawmakers and industry on the use of such data for research.

AB - Large sets of health data can enable innovation and quality measurement but can also create technical challenges and privacy risks. When entities such as health plans and health care providers handle personal health information, they are often subject to data privacy regulation. But amid a flood of new forms of health data, some third parties have figured out ways to avoid some data privacy laws, developing what we call “shadow health records”—collections of health data outside the health system that provide detailed pictures of individual health—that allow both innovative research and commercial targeting despite data privacy rules. Now that space for regulatory arbitrage is changing. The long arms of Europe's new General Data Protection Regulation (GDPR) and California's new Consumer Privacy Act (CCPA) will reach shadow health records in many companies. In this article, we lay out the contours of the GDPR's and CCPA's impact on shadow health records and health data more broadly, highlight critical remaining uncertainty, and call for increased clarity from lawmakers and industry on the use of such data for research.

KW - Faculty of Law

KW - big data

KW - GDPR

KW - CCPA

KW - Shadow health records

KW - research exemption

KW - privacy

UR - http://science.sciencemag.org/content/363/6426/448.full

U2 - 10.1126/science.aav5133

DO - 10.1126/science.aav5133

M3 - Journal article

C2 - 30705168

VL - 363

SP - 448

EP - 450

JO - Science

JF - Science

SN - 0036-8075

IS - 6426

ER -

ID: 211101789