This Article Full Text Full Text (PDF) All Versions of this Article: M2207v1 15/5/569    most recent Submit a response Alert me when this article is cited Alert me when eLetters are posted Alert me if a correction is posted Services Similar articles in this journal Similar articles in PubMed Alert me to new issues of the journal Download to citation manager Google Scholar Articles by Sengupta, S. Articles by Hripcsak, G. PubMed PubMed Citation Articles by Sengupta, S. Articles by Hripcsak, G.

A Model for Expanded Public Health Reporting in the Context of HIPAA

^a Department of Biomedical Informatics, Columbia University, New York, NY
^b Institute for Urban Family Health, New York, NY

^_* Correspondence: George Hripcsak, MD, MS, 622 W 168 Street, VC5, New York, NY 10032 (Email: hripcsak{at}columbia.edu).

Received for publication: 07/14/06; accepted for publication: 06/06/08.

The advent of electronic medical records and health information exchange raise the possibility of expanding public health reporting to detect a broad range of clinical conditions and of monitoring the health of the public on a broad scale. Expanding public health reporting may require patient anonymity, matching records, re-identifying cases, and recording patient characteristics for localization. The privacy regulations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) provide several mechanisms for public health surveillance, including using laws and regulations, public health activities, de-identification, research waivers, and limited data sets, and in addition, surveillance may be distributed with aggregate reporting. The appropriateness of these approaches varies with the definition of what data may be included, the requirements of the minimum necessary standard, the accounting of disclosures, and the feasibility of the approach.