Data privacy in electronic health records (EHR)

I've heard rumors about how the FBI operates, but I can't say for certain, so I won't speak on it as if it's fact.

But when it comes to the banking system, here’s the deal: every single employee has their own unique login. Every time someone accesses an account, there's a digital paper trail. We know exactly who looked at what and exactly when they did it. You can't just poke around in accounts whenever you feel like it; you only access them when a client actually walks up to your desk or visits your office. If you start checking someone's account multiple times in a short window without reason, red flags go up immediately. And if you accidentally leak account info to anyone other than the owner or their authorized representative? You're looking at getting fired on the spot. In rare cases, maybe a formal warning first, but usually, it's gone.

Why wouldn't our electronic medical records work the exact same way?

placidorca16 honestly, I couldn't care less. It's not worth my energy. I have much bigger problems to deal with than worrying about whether some random person glanced at my medical file.

Nancy Wood4 said:It’s possible, but I don't buy it. If I end up in the ER because of some illness, they should have access to my entire medical history—cardiology, psych, OBGYN, all of it...

I'm glad you have such unwavering faith in the USA institutions, good for you. 👍 That basically means you've never been screwed over by them before.
Checking someone's record at the FBI, a bank, or pulling up an electronic health record once it's live? I'll be able to do that without any issues or repercussions, trust me. ☕

Fixed the quote. 🙂

We still don't know how or if this is actually going to work, and honestly, it feels stupid to spread panic when nobody here has a clue about the mechanics of it all.

I know how things run in banks because I have plenty of contacts working in the industry, and if it works anything like their systems, I don't think we have much to worry about.

Besides, when you're sitting in an emergency room, I doubt you'll care who saw your file. Your only concern will be getting help.

I’ve got two buddies working at different banks... whenever you walk up to a teller to pay a bill, deposit some cash, or whatever, they have full access to your account info and credit history. How often do you actually hit up a branch? How many random people have handled your transactions? Believe me, anything can happen.

melloworca6 said:Why wouldn't our digital IDs work exactly like that?

Because in the USA—where corruption is basically a lifestyle choice—that’s just how things go.

placidorca16, honestly, it doesn't bother me—I don't even stress about this stuff. I've got way bigger fish to fry than worrying if someone spotted my ID card.

Well, that's your prerogative—you aren't the subject here anyway.

Nancy Wood4 said:I’ve got two friends working at different banks. When you walk up to a teller to pay a bill or make a deposit, they can see everything—your balance, your loans, all of it. How often do you actually go into a branch? How many different people have handled your transactions? Trust me, anything is possible.

Look, I have friends in banking too. They can see my accounts, sure, but they aren't gossiping about my balance over coffee.

And no, they aren't allowed to share your data. If they do, you file a formal complaint, take it straight to the branch manager, and believe me, they’re getting fired. I know people who lost their jobs just for accidentally letting someone slip up with info that wasn't theirs.

placidorca16 said:Because different kinds of abuses are just our reality here in the USA.

Fine. That's your take. You aren't the center of attention here.

Do me a favor and tell me if you actually understand how these digital IDs are going to work? You don't know, and honestly, neither do I.

So why start a panic when nobody has a clue what this system is actually going to look like?

And yeah, this is my business, and I'm not the topic here, but I have the right to express my opinion just like you do. Your problem is that you're just whining and panicking for no reason. I really don't get what you were trying to achieve by claiming that if my employer finds out about my medical condition, I'll be stuck in court for ten years trying to prove myself.
I know how this works; I'm not an idiot. I know how to use the internet and find the info I need just like you. I've simply decided not to let it stress me out.

I mean, who’s actually going to report them? Especially when most people don't even realize what's happening.

Regarding the digital IDs, I doubt they'll bother migrating all the old data—that sounds like a massive headache. We'll probably find out soon enough. But honestly, it's the 21st century; there's no way America is staying stuck in the Stone Age.

Nancy Wood4 said:who’s actually going to report them? especially when the person doesn't even realize what happened.

Regarding these digital records, I doubt they'll bother uploading all the old data because that's just too massive a headache. We'll see, I guess. But honestly, it's the 21st century; America can't just stay stuck in the Stone Age.

Why stress over something you don't even know about? Wherever there's a database holding your info, there's someone who could misuse it. Are we really supposed to start panicking over "what ifs"? 🤷
Once you find out, you report it. Usually, the people responsible get punished, whether it's immediately or down the road.

As for the specific situation I know about, the client had no idea their info was accidentally leaked to someone else, but the branch manager found out regardless, and that employee was fired on the spot.

melloworca6 said:Look, please tell me—do you actually have any idea how these digital health records are even going to work? You don't—and neither do I.

So why trigger all this panic when nobody has a clue what this whole system is even going to look like.

And yeah, this is my business—I’m not trying to make myself the center of attention here—but I have just as much right to an opinion as you do. Your thing is that you're freaking out and panicking for no reason. Honestly, I have no idea what you were trying to achieve by suggesting that if my employer finds out about my medical history, I'll be stuck in court for ten years before I can prove anything.
I know how this works; I'm not clueless. I know how to use the internet to find answers just like you. I've just decided not to let it get under my skin.

Look, I don't care if you interpret the bold text that way, but maybe your own posts could be taken the same way sometimes. Regardless, I don't owe you a breakdown of my logic—I'm just stating my view, same as you. I mentioned employers and the courts merely as an example of how slow the American legal system can be, not because I think you're "clueless," as you put it. I hope using examples isn't against the rules, especially when they're relevant to the topic. And, obviously, I have absolutely nothing against your decisions, nor did I say I did.

Whether you want to call my concerns about potential data misuse or privacy breaches "panic" is up to you—you're free to decide that it's something I simply don't care about.

I asked you straight up: do you even have a clue what the whole system is actually going to look like? You don't. So how can you sit there pre-emptively claiming it’ll be abused when you haven't the slightest idea how it functions or who gets access to what?

Any system can be exploited, so what? Are we just supposed to throw in the towel before we even start? Every single profession has its share of hacks and its share of pros—medicine is no different. Jumping to the conclusion that healthcare workers are just going to abuse this feels a bit paranoid to me. Look, if you’ve dealt with shady people, I’m sorry, but those are just outliers. Most people are decent and take their jobs seriously.

In my opinion, as long as people stay quiet and don't report things like data breaches or medical errors, these issues will keep happening. And yeah, some people won't report a doctor for screwing them over because they're terrified that if they come back to the hospital, they won't get proper care. Others just don't feel like fighting the system, so they let it slide. Until people speak up, nothing changes.

melloworca6 said:I asked you nicely—do you even have a clue how this whole system is actually going to look? You don't. So, how can you already be typing away about potential abuse when you haven't the slightest idea how it’ll function or who’s going to have access to what?

You’re basically asking questions and then immediately answering them yourself—so, what exactly am I supposed to add to that? If you've already decided what my response is going to be, I guess there isn't much left for me to say.

Any system can be rigged—so what, we’re just supposed to go out and hang ourselves?

Did I say that somewhere? Seriously—be a little fair and at least give me credit when you quote me.

Every single field has its share of hacks and its share of pros—medicine is no exception. Jumping straight to the assumption that healthcare workers are just out to exploit people feels a little paranoid, honestly.

That’s your take—and look, I’m not arguing with you there. But honestly, do you really think repeating that it's all just "paranoid" is actually going to get you anywhere?😕 You’re more than welcome to put your full faith in the system—I mean, you have that right. I also have the right to think the whole thing is a joke. So, what now? Are you actually trying to talk me out of my opinion—or just forcing me to change my mind?🤷

Sorry you had to deal with those types—but honestly, they’re just outliers. Most people in the field are actually decent and take their jobs seriously.

All it takes is one single person to threaten your rights or your status—if the system isn't actually looking out for you—and that’s plenty. No need for a crowd.

As far as I'm concerned, as long as people just stay quiet and don't report stuff like data leaks or medical malpractice—yeah, there are definitely those who won't call out a doctor for screwing them over because they’re terrified of being treated poorly if they ever need that hospital again—well, until then, this kind of nonsense is just going to keep happening.

And how exactly would you know that people "aren't reporting" things? — just curious.🤷 Look, you really should have figured that out on your own—honestly. Reporting it isn't nearly enough—not by a long shot.But seriously—it’s necessary. Prove it.Getting results from our legal system is—as I’ve already pointed out—a massive headache that can drag on forever. I'm not going to bore you by repeating myself.

If you actually thought starting a thread meant everyone would just nod along and feed your ego—well, you clearly missed the entire point of a public forum.

placidorca16 said:If you started this thread just because you wanted everyone to kiss your ass and agree with you, then you’re the one who fundamentally misunderstood how a public forum works.

Look, I'm done. It's clear talking to you is a total waste of breath.

I didn't start this discussion because I needed an echo chamber; I did it because abortion was being treated as off-topic. You can be incredibly rude. Honestly, honey, you clearly don't get what a forum is for. Every time someone disagrees with you, you just grab them by the throat, tear their posts apart sentence by sentence, and twist their words until they fit your little narrative. This isn't your first rodeo, and I'm definitely not the only one you've pulled this on. I have no interest in participating in this thread anymore. Say whatever you want. 👋

A quick note to all the other women out there: Yes, your medical records—whether paper or digital—are strictly confidential. They cannot be shared without your explicit consent. If you ever find out someone leaked your private health info, report it immediately. Contrary to what some people claim here, that kind of thing doesn't just go unpunished under US law.

And who exactly am I supposed to report? How am I even meant to track down the source if every single person in a white coat can just peer at my files whenever they feel like it? That’s really the crux of the issue. What am I going to do, walk down to the local precinct and tell them I'd like to file a formal complaint because my medical history has become an open secret?

melloworca6 said:Look, I'm done. It’s clear talking to you is just a waste of breath.

I started this thread because the abortion discussion went totally off-topic—not because I wanted someone to baby me or be straight-up rude. Honestly, honey, you clearly misunderstood how an American forum works—if someone doesn't jump on your bandwagon, you just grab them by the collar and start nitpicking their posts until they fit your narrative. This isn't your first rodeo, either—I'm definitely not the only one you've pulled this stunt on. I'm out; feel free to keep shouting into the void. 👋

Fine, if that's your take. 🤷 Whatever helps you sleep at night.

I have no idea which of my sentences I supposedly "twisted."🤷 I quoted everything verbatim and added my own commentary. Is that against the rules now? You’re actually the one labeling my posts as "paranoid," "whiny," or "rude"—and since you're a moderator, you think that's okay. Unlike you, I haven't resorted to name-calling.

Sure, I defend my position—but I do it through the proper channels here. As far as I know, quoting a sentence or a paragraph is perfectly legal on this board, and everyone does it—you included. Apparently, I'm being "rude" simply because you can't force your opinion down my throat. It’s a shame you think we all need to think exactly the same way just to have a conversation.👋

placidorca16 said:So you're actually the one calling my posts "paranoid," "whining," and "disrespectful." And since you're a moderator, you think you can just get away with that.

Now, I’m stepping in strictly as a moderator.

If you feel like any of my posts were offensive, there's a report button right next to them—just use it. We have other moderators who will review your report, and we also have administrators who stay completely neutral.

Besides, if you have an issue with how I moderate or what I write, go ahead and take it to the Feedback and Suggestions subforum. You're free to complain there.

Lisa Nelson70 there is a medical board that oversees doctors where stuff like this gets reported. There is also a whistleblower hotline where you can file a complaint about this kind of thing.

melloworca6 said:I’m speaking strictly as a moderator here.
If you feel like any of my posts were offensive, just hit that little report button next to my comment. We have other mods who will review your report—and don't worry, the admins stay completely neutral.

Plus, there's a dedicated "Feedback and Suggestions" subforum down below—if you've got beef with how I moderate or anything else I write, feel free to take it there.

Oh, don't sweat it—I wasn't actually trying to report you. You didn't offend me. It was more of a... phenomenological observation, I guess.😉

Since we're critiquing each other—maybe take a look at your own tagged posts once in a while?☕ Other than that, I'm totally fine with us still hanging out, if you're cool with it.🙂 Honestly, I'm not one to hold a grudge.

Let’s all just take a breath and stop the bickering, please; there really is no sense in fighting... on one hand, I’ll admit we have absolutely no idea how this whole thing is going to play out in practice, but on the other, we know perfectly well that if anyone gets their hands on certain data and decides they want to exploit it, it's going to be incredibly difficult to actually hold them accountable—and I say that not as mere speculation, but from the perspective of someone who has actually worked within one of those types of bureaucratic systems before.

Anyway, I have appointments scheduled in two weeks with both a gastroenterologist and a physiatrist, though they're at two different hospitals. If anything feels off or unusual during those visits, I'll be sure to let you all know.

Please, do share what you're experiencing, but let's try to keep the arguing to a minimum, won't you?

Nancy Wood4 said:Well, what can you do? It’s the 21st century—America can’t just stay stuck in the Stone Age.

It isn't quite like we're living in the Stone Age, though—in fact, if this digital health initiative actually works, we might end up being the second or maybe even the third country in Europe to roll out something like this. We have this habit, I suppose, of rushing headlong into things just to impress the big shots in the EU. It was like that with Bologna, and—God forbid—it might be like that with this, resulting in something flimsy riddled with system errors. Though, I do hope they actually vet this properly and only give it the green light once these practical loopholes are patched up and refined.

Personally, I don't lose much sleep over it; if someone is going to spread information—you know, blabbing about someone's diagnoses, conditions, illnesses, or abortions—well, that's possible now anyway. There have always been those kinds of whispers among colleagues, family, and so on. Unfortunately, there are people like that (let's not kid ourselves), but they aren't everyone, nor are they the majority. Even IRS agents have insights into everyone's salaries and all that business, yet not every single one of them is running their mouth. Whether the law will get tougher regarding these issues, or whether justice can actually be served within a reasonably decent timeframe—that remains to be seen. Something needs to move forward, I guess.

We are talking about something here that hasn't even truly begun to live; we don't even have a rough prototype or a basic framework yet. Right now, everything looks rather black and white, but it shouldn't stay that way, because if it does, there will be some nasty gaps and oversights.

I'm no lawyer, but I suspect that in cases involving the disclosure of such secrets or spreading them around—the process works a bit differently. In my view, it might actually move much faster and more effectively than when a doctor harms you (my own family has experienced this twice, actually), simply because those situations turn into such nonsense where nobody admits fault, everyone protects one another, and blowing the case up in the media doesn't exactly help either—at least, it hasn't worked so far.

Sophia Wells72 said:It’s not like we’re living in the Stone Age—actually, with this digital health rollout, we’d be the second or maybe third country in Europe to pull this off. We have this knack for rushing headlong into things just to impress the big shots in the EU. It was the same deal with Bologna, and—God forbid—it’ll be the same here: a flimsy system riddled with glitches. I’m just hoping they actually bother to vet this properly and give it the green light only after they patch up all these practical holes.

The fact that people's medical records are already sitting in the Department of Health and Human Services database without patients getting any actual guarantees regarding data protection pretty much tells you everything you need to know about this whole setup. To me, it screams unprofessionalism at this stage alone. Even if you question how reliable those old handwritten files are, at least they're easier to secure than stuff stored electronically.

And yeah, obviously, this is just another way to play nice with European bureaucracy—just like Bologna, which is already proving to be a step down from what we had before.

Sophia Wells72 said:Look, it’s not like we’re living in the Stone Age, but honestly, with this whole digital health rollout, we’d be the second or maybe even third country in Europe trying to pull this off. We have this reputation for rushing headlong into things just to look good for the big shots in the EU. It was like that with Bologna, and heaven forbid it’ll be like this—just a flimsy system riddled with glitches. I really hope they actually take a hard look at this and only give it the green light once they’ve patched up all these massive holes in the practical side of things.

Personally, I don't lose sleep over it. If someone is going to go around gossiping, barking about someone else's diagnoses, medical conditions, illnesses, or abortions—well, that’s possible right now too. People have always done that kind of chatter among coworkers or family, let's not kid ourselves. There are people like that, unfortunately, but they aren't everyone, and certainly aren't the majority. Even IRS agents can see everyone's salary and all that sensitive stuff, and it doesn't mean they're all out there blabbing. Whether the laws will get tougher for people like that, or if justice will actually be served in any reasonable timeframe—that's still to be seen. Something has to change.

We’re talking about something that hasn't even truly come to life yet. We don't even have a rough draft or a solid framework. Right now, everything looks very black and white, but it can't stay that way because there are going to be nasty gaps and loopholes everywhere.

I'm no lawyer, but I think when it comes to leaking secrets like this or spreading them around, the process works differently. I actually think it might move faster and better than when a doctor messes you over (my family has dealt with that twice, believe me). With doctors, it's just a bunch of nonsense where nobody admits to making a mistake, everyone protects one another, and blowing a case up in the media doesn't usually help much either, at least not from what I've seen.

To jump in on this: e-prescriptions? Great. I don't want to have to drive out for meds every single time. You just call and pick them up at any pharmacy—it's the same thing no matter where you are, and the doctor gets more time to actually talk to the patient. It's excellent. Say I head down to Miami, my regular doctor isn't there, so I need to stock up before I hit the beach—I can see the gap there. Or what if the doctor goes on vacation? What then?
Second thing: a networked data system? Sounds great, no more lugging around a mountain of paperwork. But from experience, it doesn't work. Not all hospitals are connected. For example, like how Mayo Clinic might not be synced up with a local community hospital.
Third: everyone can see everything. If you don't tell them the whole truth about every single ailment you've ever had, it's bad. If you keep something quiet, it's bad. No matter how you slice it, it's a problem.
Fourth: I agree with what this person is saying—there will be more loopholes and fewer mistakes. As many pros as there are cons.