Data privacy in electronic health records (EHR)

Lisa Moore61 said:They really are. Across every single field—even doctors are just people, after all. The old Romans had a saying about that...

True—it’s just that when they mess up, the fallout tends to be a lot more dramatic than most other professions.

That's why we need to fight back against them—constructively, obviously.

Yeah, except in this country, not everyone actually has equal access or even a fair shot at fighting back.

What matters more is how difficult—or even impossible—it can be to help a patient when their medical history isn't complete. That can end in tragedy.

Agreed. Though, not every single fact ends up being equally relevant.

melloworca6 said:Did anyone actually claim this wasn't happening? 🤷 We've all been shouting from the rooftops that this shouldn't be allowed—and that people need to report it.

Well, you can't complain about the heat when you're the one playing with matches.

Let me ask you something. If you found out that your GP or your OB-GYN (doesn't even matter which one for this) had leaked some private medical issue of yours to someone else—and you knew for a fact there was no other way they could have known unless the doctor or a nurse blabbed—would you report them?

melloworca6 said:Let me ask you something. If you found out that your GP or OBGYN—doesn't matter which one for this—had leaked your medical info to someone else, and you knew for a fact it could only have happened because the doctor or a nurse just couldn't keep their mouth shut, would you report them?

I’d report it—but only if there was an actual chance of getting things sorted and seeing that gossip actually punished. If there wasn't a real shot at justice, I wouldn't bother wasting my time, energy, sanity, or money—which, unfortunately, is a common way to live in the US.

And what exactly do you consider a punishment?

melloworca6 said:So, what counts as a penalty to you?

Under the law—usually fines, losing your license, or jail time if things get criminal—it all depends on how much damage that little slip-up actually caused. But personally? I don't think just talking too much is the real issue. To me, a doctor being negligent, careless, or just flat-out wrong with treatment is a way bigger deal.

placidorca16 said:The law usually settles this with fines, pulling licenses, or jail time if it hits criminal territory—it all depends on how much damage the gossip actually does. But honestly? I don't think just talking is the real issue here. To me, the massive problem is when doctors fail to act, get negligent, or straight-up misdiagnose someone.

I'm with you on that.

As for reporting a doctor for breaking patient confidentiality, I say go ahead and file it even if you’re convinced nothing will happen. You can turn a blind eye to something once, maybe twice, but eventually, someone's going to have to answer for it.

Regarding the question in the title, I think it’s totally understandable why you’d feel the need to tell a doctor about things that have truly shaped your life. Things like your medications, specific therapies, any allergies to antibiotics, past pregnancies or miscarriages, even surgeries. I actually just finished up an ER visit recently, and they poked and prodded me about everything—every single medication I take and why, my entire medical history, my diet, my lifestyle, birth control... basically everything. It didn't really feel like they were trying to write a biography about me; it felt more like they were just desperately trying to figure out what was going on with my body.
I'm well aware that in smaller towns, there's this tricky issue where the people working in hospitals or clinics pretty much know everyone. If there's something a patient is trying to keep private, there's always that nagging possibility that information might leak out. If that happens, please, report them to the medical board. Don't go thinking nobody actually reads those complaints. You probably aren't the only one feeling this way, and honestly, maybe a review board is just looking for a legitimate reason to get rid of someone incompetent or an absolute idiot, and your complaint gives them the opening they need. Use every tool the law and the government provide you.
As long as abortion remains legal here in the US, there is absolutely no reason anyone should have to justify whether they had one or not.

Just my two cents... I'm not 100% sure how this digital health record system is actually going to work, but logically, EVERY healthcare worker should have access to everyone's files. I assume you'll just log in using some kind of national ID number. Why does everyone need access? Because the whole point of an electronic record is that if I end up in an ER on Maui, or seeing a specialist in Memphis, the doctors there can see my entire medical history immediately.
I really hope the system tracks exactly who accesses my records and when. I live in a small town, and I know at least ten people working at the local hospital. If any private info "leaked," I honestly wouldn't even know which one of them was responsible.
And yeah, if I had undergone an abortion and whether that gets logged in the digital file depends on me—I would never agree to that. I'd be willing to face whatever consequences come my way to keep that private.

Nancy Wood4 said:just my two cents... I'm not entirely sure how this whole digital health record thing is going to actually work, but if logic holds, I assume every single healthcare provider will have access to everyone's files, probably triggered by some sort of national ID number. Why everyone? Well, because the whole point of a centralized electronic record is so that if I end up in an emergency room on Maui, or seeing a gynecologist in Memphis, the doctors there can see my entire medical history immediately.
I really hope the system logs exactly who accesses my records and when, because honestly, I live in a small town where I know at least ten people working at the local hospital, and if any private data were to "leak" out, I truly wouldn't even know which one of them was responsible.
And frankly, if I had ever undergone an abortion and it was up to me whether that got logged in this electronic file, I would never agree to it; I’d be willing to face just about any consequence to keep that information private.

Oh, wonderful. If it works like that, everyone in my tiny backwater town is going to know that Lisa Nelson70 is getting tested for STDs. I'll just be branded as some kind of social pariah, even though I don't have anything. So that's the reward for being a responsible adult, I suppose. I also sincerely hope they aren't digitizing every single scrap of paper from the old physical files into these electronic versions. Because, as I've said before, I can already see the potential for massive abuse.
I know firsthand what happens when someone gets their hands on information that's supposed to be strictly confidential—everyone else finds out before you even realize what's happening yourself. To give you an example, we all know that certain agents at the FBI aren't supposed to use their database for personal curiosity, yet if you have the right connection, they can look up anyone's business without a second thought. And don't go thinking otherwise—I know this from experience.
At this rate, I think I might just stop being so honest with my gynecologist.

If you ask me, moving everything to digital health records is basically a direct assault on privacy and data security. I mean, sure, people can abuse systems in other industries too—but still.

I’ve been thinking—maybe we should just revert to the dark ages of gynecological exams, you know, the kind where you had to stay under a sterile drape that wasn't allowed to move an inch? We could ditch the digital charts entirely and just let every patient tell their doctor whatever they feel like mentioning. 🙂

melloworca6 said:So, what exactly defines a penalty to you?

placidorca16 said:The legal side usually involves fines, losing your medical license, or even jail time if it hits criminal territory—it all depends on how much damage the chatter actually causes. But personally, I don't think just talking about something is the real issue here. To me, the massive problem is when a doctor fails to act, shows negligence, or provides incorrect treatment.

In my view, the real penalty for breaching patient confidentiality is losing your job and facing a hearing before the medical board.

Instead of just venting bitterness and throwing sharp insults into the void of an online forum, we should be taking actual steps. It’s up to patients to help improve the system by reporting doctors who are truly negligent.

If people are genuinely worried about their medical records, they shouldn't be talking about women going in for routine screenings. We should be talking about patients in the early stages of something like Parkinson's, or those dealing with psychiatric care. If the system leaks sensitive info for those groups, I honestly believe they'll never find employment again.

Those are the real stakes. It's not about who knows which specific test was done or whether someone had an abortion.

If you are proactive enough to take charge of your own health, why does it matter what the gossip in a small town is? If you chose an abortion, that was your decision and you stand by it. Why is there so much resentment over who knows what?

I'm not saying it's ever okay to break the doctor-patient bond, but I find it interesting that no one on this thread seems to be suffering from MS or myasthenia gravis... people whose diagnoses carry a heavy stigma if leaked, which could have devastating consequences for their entire livelihood.

placidorca16 said:Yeah, it’s just that in this country, not everyone gets an equal playing field or even a fair shot at fighting back.
.

So, what are we actually going to do about it? Just sit here on a message board, venting our bitterness and cynicism, badmouthing doctors, acting like we're above it all while waiting for someone else to step up and build a functional legal system?

right

Nancy Wood4 said:Here’s my take. I don't know exactly how this digital health card system is going to roll out, but if we're being logical, every healthcare professional should be able to access anyone's records. I assume it’ll just pull up based on whatever medical ID you carry. Why does everyone need access? Because that's the whole point of a digital record—if I end up in an ER on Maui or seeing a specialist in Memphis, doctors need to see my entire medical history right then and there.
I really hope there’s some kind of digital paper trail that logs exactly who accesses my medical records and when. Living in a small town like this, I basically know ten different people working at the local hospital. If any of my private info were to leak out, I honestly wouldn't even know which one of them to point a finger at.
Look, if I had gone through with an intentional abortion and it was up to me whether that ended up on my medical records, there’s no way I would have ever agreed to it. I'd be willing to face whatever consequences came my way because of that decision. Period..

I’m back at it again with this thought: there's no way they get a look at the parts of a medical file that don't concern them. Say you end up in OB-GYN—I seriously doubt they're going to have access to anything non-gynecological.

They’ll probably have to use some kind of unique passcode, something personalized so there's a clear digital paper trail. It'll show exactly who accessed whose file and when. That’s how it works at places like Chase or Bank of America.

It’s funny how everyone scrambled to jump on the bandwagon with those digital IDs, yet nobody seems to give a damn that a bunch of different people have access to their private bank accounts. 🙂

And this bolded part? That’s on you. If you're willing to put your own life on the line in certain situations, who are we to judge? Everyone does what they think is best for them.

Lisa Moore61 Asks:
If you leak patient info, you're done. You lose your job, and then you have to face a disciplinary hearing before the medical board. Simple as that.

Instead of just pouring bile and sharp insults into the void of this forum, we actually need to take action. It’s on the patients to help build a better system by reporting doctors who are negligent.

If people are actually losing sleep over a few red flags on a background check, then they’re looking at the wrong crowd. You shouldn't be worried about women going in for routine five-stitch procedures. You should be focused on patients dealing with early-stage Parkinson’s or folks coming out of psychiatric wards. If there's a massive leak in the system, I honestly don't think we'll ever see anyone getting hired again.

That’s exactly the problem right there. It doesn't matter who performed which procedure, or whether someone had an abortion or not. That's just not the point.

If you actually give a damn about your own health, why are you letting small-town gossip get under your skin? If you decided on an abortion, that was your call to make, and you should stand by it. Honestly, I don't get why there's so much bitter drama over who knows what about someone else's business. It's exhausting.

Look, I’m not saying it's ever okay to blow off the basic duties of a doctor-patient relationship. There isn't a single scenario where breaking that trust is justified. It just strikes me as odd that nobody on this thread is speaking up about living with MS or myasthenia gravis. I’m talking about the people whose diagnoses carry a massive stigma—the kind of situation where if your condition leaks out, it could completely wreck your life and your ability to actually exist in society.

Look, I don't have MS or Parkinson’s, but I’m dealing with some kind of autoimmune connective tissue disorder that doctors haven't quite pinned down yet. They're leaning towards Lupus right now. It's one of those things that just keeps progressing, and honestly, I can't help but think if potential employers knew what I was dealing with, they wouldn't even give me an interview.

I personally wouldn't sweat those digital health records. I know exactly how this type of tech works within major banks like Chase or Wells Fargo, and I’m betting these cards will operate on the exact same logic. There will be a clear paper trail showing exactly who accessed what and when. If any data ever leaks, we'll be able to pinpoint precisely whose hands were in my files. Honestly? I’d go as far as to say it’ll actually be easier to catch and nail anyone caught leaking private info to the public.

As for the FBI, they’ve really tightened their grip lately. Sure, you might have access to certain data, but there's a massive chance that if you get caught snooping through someone's private files—especially since everything is encrypted and logged by user ID—you'll be looking at an immediate pink slip.

Lisa Moore61 said:If people actually have reason to worry about medical records, we aren't talking about women getting routine procedures—it's the patients with early-stage Parkinson's, or those who've been in psychiatric wards, etc... because if the system leaks, I doubt they'll ever find jobs again...

So, you're basically admitting that digital records pose a massive risk to medical privacy.

if you're conscious enough to care about your own health, why does small-town gossip matter? if you chose an abortion, that's your call and you should stand by it—so why all this bitterness over who knows what?

That shouldn't be your concern. Everyone’s entitled to their own bitterness—just like everyone's entitled to their own opinion, I guess.

I'm not saying it's okay to violate doctor-patient confidentiality in any scenario, but it's interesting how no one with MS or myasthenia gravis is chiming in here—people whose lives could be totally derailed if their diagnosis leaked publicly.

And how exactly would you know who's showing up here and what they're dealing with?

Lisa Moore61 said:So what’s the actual plan here? Just sit around this forum, venting bitterness and bile, trashing doctors, acting all superior, and waiting for someone else to magically build us a functional legal system?
right

Hey, that might be your move—but everyone’s got their own way of doing things, and nobody’s obligated to shout it from the rooftops if they don't feel like it.

And who's to say there aren't people here battling serious illnesses? Then again, this thread is specifically about women's health, not a general medical forum, so... I suppose we shall see. Since we don't all share the same doctor, and we can't exactly know what shows up on our scans just yet, we're left with nothing but speculation for the time being.

As for things at the FBI—I wouldn't go that far. It’s actually quite difficult to get fired from a place like that; usually, you just get a "slap on the wrist," like having your pay docked for a few months or something similar (which is exactly what happened to that guy caught smuggling people across the border). Most of those disciplinary measures seem more like a way to mock you if you get caught doing something you shouldn't, rather than being truly punitive. Everyone is granted access to specific types of data, sure, but as for who exactly was snooping through records, that information is either impossible to uncover or simply isn't tracked. Or perhaps it's just tolerated. But we've wandered off-topic now, so I won't dwell on it any longer.

melloworca6 said:It’s funny how everyone's jumping on the bandwagon regarding these digital IDs, yet nobody seems to care that a bunch of different people can peek at their bank accounts too.🙂

Not quite. I just said abuses are possible in other areas—but that's not what we're talking about here.😁

If you're willing to risk your own life in certain situations, who are we to judge? Everyone does what they think is best for them.

I couldn't agree more.

I'm not worried about those digital IDs because I know how the systems work at major banks—I trust these will function similarly. There will be a clear paper trail showing exactly who accessed my info and when. If anything leaks, we'll know precisely who was looking. Honestly, I'd go as far as to say it might actually make it easier to report anyone leaking data to the public.

In this country, it can take an entire decade to go from filing a complaint to getting a court ruling. If an employer refuses to hire you—say, because of a health issue—you're going to be waiting a long, long time.🙄

melloworca6 said:I still don't think they'll be able to see parts of the medical record that aren't relevant to them. Like, if you end up in OBGYN, I seriously doubt they'd have access to your non-gynecology stuff.

Maybe, but I doubt it. I mean, if I end up in the ER for one thing, they're gonna need access to my entire history—cardiology, psych, OBGYN, all of it.

Glad you have so much faith in the USA institutions. Good for you. 👍 Means you've clearly never been screwed over by them before.
Checking someone out via the FBI, a bank, or pulling up an electronic health record once it's live? I'll be doing that without any issues or legal trouble, trust me. ☕