Plan to alter access to health data draws ire

Meredith Wadman

DOI: https://doi.org/10.1126/science.adq4553

IF: 56.9

2024-05-18

Science

Abstract:Universities could no longer store Medicare and Medicaid data, and costs would rise

multidisciplinary sciences

What problem does this paper attempt to address?

Expanding Risks: Medicaid Expansion and Data Security

Jeffrey Clement,Brad N Greenwood,John D’Arcy,Corey Angst

DOI: https://doi.org/10.1101/2024.06.30.24309745

2024-07-01

Abstract:The Patient Protection and Affordable Care Act of 2010 led to the largest expansion of healthcare coverage since the instantiation of Medicare and Medicaid in 1965. Yet, limited attention has been given to the security aftereffects of the statute, specifically the potential for malfeasance in the form of consumer fraud and identity theft resulting from the vast influx of new patient data residing in various and highly dispersed sources. In this work, we fill this gap by exploiting the phased expansion of Medicaid into different states at different times. Using a difference in difference approach, we explore the data security-related aftereffects of the law. Results indicate a significant in claims of consumer fraud after the expansion of Medicaid, with no robust effect on identity theft. In empirical extensions, we find a material drop in data breaches and compromised records after the expansion of Medicaid. Taken in sum, these findings suggest that the expansion of Medicaid had a consequential effect on the security of consumer data and created significant positive externalities for consumers.

Health Policy
Unraveling Medicare and Medicaid Prescription Drug Fraud and Abuse

Myranda Toothman,Ken Moore,Doohee Lee

DOI: https://doi.org/10.1177/0886368711405018

2011-04-13

Abstract:With government spending on Medicare and Medicaid programs skyrocketing, their futures are questionable. Many politicians and political pundits are calling for intense oversight of these agencies to reduce fraud and abuse in the system and, consequently, rein in costs. Many medical providers’ fraudulent behaviors, which cost the medical community billions of dollars, stem from prescribing of pharmaceutical drugs to treat an illness or injury. Although this is part of the job of providers, some allow kickbacks from pharmaceutical companies or patient requests to cloud their clinical judgment. This article identifies several options for increased enforcement of laws concerning Medicaid and Medicare fraud and abuse of drug benefits, with great emphasis placed on the Integrated Data Repository currently under development by the federal government.
Big Bad Data: Law, Public Health, and Biomedical Databases

Sharona Hoffman,Andy Podgurski

DOI: https://doi.org/10.1111/jlme.12040

2013-01-01

Journal of Law, Medicine and Ethics

Abstract:The accelerating adoption of electronic health record (EHR) systems will have profound impacts on clinical care. It will also have far-reaching implications for public health research and surveillance, which in turn could lead to changes in public policy, statutes, and regulations. The public health benefits of EHR use can be significant. However, researchers and analysts who rely on EHR data must proceed with caution and understand the potential limitations of EHRs. Much has been written about the risk of EHR privacy breaches. This paper focuses on a different set of concerns, those relating to data quality. Unlike clinical trial data, EHR data is not recorded primarily to meet the needs of researchers. Because of clinicians’ workloads, poor user-interface design, and other factors, EHR data is surprisingly likely to be erroneous, miscoded, fragmented, and incomplete. Although EHRs eliminate the problem of cryptic handwriting, other kinds of errors are more common with EHRs than with paper records.
Case study Vanderbilt University Medical Center Data Chaos

Azza Al Aghbari,Zinah Al Maskari

DOI: https://doi.org/10.48550/arXiv.2301.10223

2023-01-10

Abstract:The healthcare industry is growing rapidly in the United States because of the increased number of the aging population, shared consciousness of personal health problems, and medical technology improvements. As a result of the growing industry of healthcare, new emerging issues occur in the collection and storage of patient data, and new ways to process, analyze and distribute these data. This has exposed various security threats to personal health data (Lee, 2022). In this case study, we will discuss the issues Vanderbilt University Medical Center (VUMC) challenges while implementing EHR systems which are used to analyze and monitor health records by the users such as doctors, organizations staff, and pharmaceutical agencies(Kaul et al., 2020), and we will analyze these issues and provide solutions and recommendations to solve them.

Computers and Society
Health Care Information and the Protection of Personal Privacy: Ethical and Legal Considerations

Lawrence Gostin

DOI: https://doi.org/10.7326/0003-4819-127-8_part_2-199710151-00050

IF: 39.2

1997-10-15

Annals of Internal Medicine

Abstract:During the early 1990s, the U.S. government addressed the issue of providing universal health care to all its citizens. Although this issue has not been completely resolved, centralization of electronic data and sharing of health care information among insurers and providers have been pursued. The emergence of electronic data banks in health care has raised another issue: each citizen's right to privacy compared with the collective benefit to society when critical data on quality assurance and scientific research are shared by an array of network users. The choices we face are difficult, and the solution may necessarily reflect a compromise that alters traditional beliefs in the right to personal privacy. However, Congress can take the initiative by enacting statutes to ensure that sensitive information contained in electronic patient records is not divulged without a patient's consent and is protected against fraudulent access and abuse.

medicine, general & internal
US hospitals face collapse as cyberattack on UnitedHealth cuts revenue streams

Owen Dyer

DOI: https://doi.org/10.1136/bmj.q686

2024-03-20

BMJ

Abstract:The US government has announced an investigation into one of America's leading health insurers, UnitedHealth, after a ransomware hack of its subsidiary Change Healthcare last month left thousands of doctors and hospitals with little or no revenue."Given the unprecedented magnitude of this attack, and in the best interest of patients and health care providers, the Office for Civil Rights is initiating an investigation into this incident," the sub-agency of the US Department of Health and Human Services said in a statement.The 21 February attack, for which a hacking group called Blackcat has claimed responsibility, is being described by both government and industry as the biggest ever. Change Healthcare's billing software is used for around half the medical claims processed in the US and is relied on by about 900 000 doctors, 33 000 pharmacies, 5500 hospitals, and 600 laboratories. The service has been offline since the attack to prevent contamination...

medicine, general & internal
Leveraging the big-data revolution: CMS is expanding capabilities to spur health system transformation

Niall Brennan,Allison Oelschlaeger,Christine Cox,Marilyn Tavenner

DOI: https://doi.org/10.1377/hlthaff.2014.0130

Abstract:As the largest single payer for health care in the United States, the Centers for Medicare and Medicaid Services (CMS) generates enormous amounts of data. Historically, CMS has faced technological challenges in storing, analyzing, and disseminating this information because of its volume and privacy concerns. However, rapid progress in the fields of data architecture, storage, and analysis--the big-data revolution--over the past several years has given CMS the capabilities to use data in new and innovative ways. We describe the different types of CMS data being used both internally and externally, and we highlight a selection of innovative ways in which big-data techniques are being used to generate actionable information from CMS data more effectively. These include the use of real-time analytics for program monitoring and detecting fraud and abuse and the increased provision of data to providers, researchers, beneficiaries, and other stakeholders.
Advertising Campaign Highlights Value of Medical Record Data

Nigel Hawkes

DOI: https://doi.org/10.1136/bmj.g211

2014-01-01

BMJ

Abstract:Eight UK medical research organisations have launched a campaign promoting the use of anonymised medical records to improve healthcare. They fear that a new leaflet from NHS England, which details plans to access patients’ data, will alarm some people and cause them to opt out, potentially damaging the usefulness of the database. The original plan had been to begin extracting patients’ data from GPs in autumn last year, but this was pushed back to March 2014 after GPs complained they had not been given enough time to inform patients of their right to opt out. NHS England agreed to launch a national awareness campaign to ensure that nobody could claim that …
Medicare Advantage Under Fire: Public Criticism and Implications

Daniel G Aaron,I Glenn Cohen,Eli Y Adashi

DOI: https://doi.org/10.1007/s11606-024-08876-7

2024-06-26

Abstract:Congressional hearings and public reports have drawn attention to problems afflicting Medicare Advantage (MA), the privatized version of Medicare. Private plans became a staple of Medicare through the passage of the Tax Equity and Fiscal Responsibility Act of 1982 (TEFRA). Congress passed this law during a furor of privatization, when think tanks and powerful financial interests emphasized the power of corporations' profit incentive to improve the efficiency and quality of social enterprise. Yet the surging criticism of MA suggests a misalignment between the financial interest of some MA plans and the well-being of their patient populations. The criticisms range from deceptive marketing, ghost networks, and patient cherry-picking to unethical prior authorization denials and defrauding the government. In total, MA plans cost the federal government 22% more per patient than if these patients in question were enrolled in traditional Medicare. Moreover, it is not clear that this additional funding is producing proportional benefits. These developments raise questions about the presence of a profit incentive in Medicare, and perhaps health care more broadly.
Changes To Sharing Medical Records Could Damage Research, Report Warns

Nigel Hawkes

DOI: https://doi.org/10.1136/bmj.k2371

2018-01-01

Abstract:From 25 May patients in the UK have a simpler way of choosing not to share their patient records, a change that could damage health related research, a report from the King’s Fund warns.1The change has been introduced at the same time as the General Data Protection Regulation, which has been discussed widely as organisations email people on their lists to seek their permission to continue doing so.But the change to the NHS opt-out has been less widely publicised, and no special effort has been made to convince patients that their data will be safe and that using the data could improve care and the way the NHS is run.The …
Overseas Outsourcing of Private Information & Individual Remedies for Breach of Privacy

Jennifer Skarda-McCann

2006-06-22

Abstract:I. INTRODUCTION Using personal medical and financial information to blackmail unsuspecting individuals may sound like the plotline to a conspiracy theory movie. In reality, it may also be a consequence of the practice of outsourcing electronic data to foreign countries for business processing. Since the fall of 2003, major newspapers have reported at least two instances of threats by foreign medical record transcriptionists to release patients' medical information via the Internet. (1) On October 7, 2003, a medical transcriptionist in Karachi, Pakistan, sent an email message to the University of California San Francisco Medical Center ("UCSF"), demanding payment for her work, with patient files attached. (2) In a similar incident only a few weeks later, Heartland Information Services ("Heartland"), an Ohio-based company, received an email message from its own employees in Bangalore, India, who attempted to extort money by threatening to reveal confidential material. (3) The average patient would not normally know if her medical information was transmitted abroad following a hospital visit. Transcription of medical records generally is classified as one of the operations for which health care providers can disclose individuals' information without meeting the statutory requirement of obtaining consent. (4) Sometimes medical records awaiting transcription are forwarded, without the knowledge of the health care provider, to several different individuals through subcontracted relationships. For example, in the UCSF incident, the medical center had outsourced its medical record transcription to a California-based company, which in turn had subcontracted with an individual in Florida. (5) Against the terms of her original contract with the California-based firm, the subcontractor in Florida had subcontracted work to an individual in Texas, who, unbeknownst to her, had solicited work from the freelance transcriptionist in Karachi. (6) On the other hand, some health care providers knowingly outsource their records transcription to companies that use overseas employees to complete the work. (7) Heartland's extortion threat is perhaps more alarming than the UCSF incident because, while its clients knew their work was being sent overseas, the company never informed them of this incident. (8) Moreover, the company's representative failed to mention the incident during his appearance at a hearing before state legislators in California on the subject of industry safeguards to protect outsourced information. (9) Although the Supreme Court has implied that it might recognize a right to privacy of personal information, (10) the current legal environment provides limited remedies to those whose privacy rights are transgressed. (11) In the face of a technological world advancing at a rapid rate, legislative action is the only way to guarantee individuals protection of their private information. However, legislators fear that adequate privacy protections will only be implemented as a result of some future scandal. (12) Privacy rights experts warn that just such a scandal is on the horizon. (13) This article addresses the threat of disclosure to consumers' private, personal information due to the increasing practice of outsourcing business processes to foreign companies. By way of introduction, it examines the trend of outsourcing: what jobs are commonly outsourced, in which industries, and the reasons why the practice has become increasingly common in the global economy. The article continues by describing the kinds of personal information that are commonly shared in outsourcing practices and examines two industries in depth: Internet-based loan processing and medical record transcription. To analyze consumer rights and remedies in this context, the article considers the notion of a right to privacy in one's personal information, and then discusses federal statutes and case law which may enable such a right, in particular, the Health Insurance Portability and Accountability Act of 1996 (14) and the Gramm Leach-Bliley Act. …

Engineering,Law
Reducing Medicare and Medicaid entitlements: a contentious environment ensues

T P Weil

Abstract:Since our public officials now lack the courage and political will to raise taxes or to constrain Medicare and Medicaid benefits, we can expect that: 1) the private sector and future generations will pay an increasing share of these entitlements, 2) major cutbacks in Medicare, Medicaid, and health maintenance organization (HMO) reimbursement will result in the aged and poor experiencing decreased access to care and will hasten the current thrust of physicians, hospitals, and insurers forming powerful health networks, 3) these new regional alliances functioning as virtual monopolies will result in the public demanding that state-sponsored health services commissions be established, and 4) the weakest health networks, often in underserved areas, will be fiscally squeezed by inadequate reimbursement, so that by the turn of the century, many of these facilities and HMOs will seek bankruptcy protection as a means of restructuring their long-term debt.
Ethics of Patients Losing Insurance Coverage Due to Hospital-Insurer Contract Disagreements

Ishani Rao,Albert E. Zhou,Neelesh P. Jain,Jane M. Grant-Kels

DOI: https://doi.org/10.1016/j.clindermatol.2024.05.007

IF: 2.797

2024-05-22

Clinics in Dermatology

Abstract:Despite most Americans having healthcare coverage, coverage does not equate to access. For many, healthcare coverage is being threatened by contractual disagreements between major health insurers and hospitals. In New York, in efforts to control costs, Aetna and United Healthcare have recently engaged in contentious contract negotiations with New York-Presbyterian and Mount Sinai medical centers, resulting in unprecedented ripples in patients' health plans and access. These disruptions have been shown to negatively impact patient health and result in patients managing their treatment at steep out-of-pocket rates or scrambling to find new providers in-network. We discuss the ethical implications of fallouts between insurance companies and hospitals and their impacts on patients.

dermatology
'Anonymous' genetic databases vulnerable to privacy leaks

Helena Kudiabor

DOI: https://doi.org/10.1038/d41586-024-03236-1

IF: 64.8

2024-10-15

Nature

Abstract:The ability to link private and public data sets could be putting research participants' private health information at risk. The ability to link private and public data sets could be putting research participants' private health information at risk.

multidisciplinary sciences
Medicare meets the cloud: the development of a secure platform for the storage and analysis of claims data

Roy L Simpson,Joseph A Lee,Yin Li,Yu Jin Kang,Circe Tsui,Jeannie P Cimiotti

DOI: https://doi.org/10.1093/jamiaopen/ooae007

2024-01-04

JAMIA Open

Abstract:Abstract Introduction Cloud-based solutions are a modern-day necessity for data intense computing. This case report describes in detail the development and implementation of Amazon Web Services (AWS) at Emory—a secure, reliable, and scalable platform to store and analyze identifiable research data from the Centers for Medicare and Medicaid Services (CMS). Materials and Methods Interdisciplinary teams from CMS, MBL Technologies, and Emory University collaborated to ensure compliance with CMS policy that consolidates laws, regulations, and other drivers of information security and privacy. Results A dedicated team of individuals ensured successful transition from a physical storage server to a cloud-based environment. This included implementing access controls, vulnerability scanning, and audit logs that are reviewed regularly with a remediation plan. User adaptation required specific training to overcome the challenges of cloud computing. Conclusion Challenges created opportunities for lessons learned through the creation of an end-product accepted by CMS and shared across disciplines university-wide.
How Health Data Integrity Can Earn Trust and Advance Health

Jochen Lennerz,Nick Schneider,Karl Lauterbach

DOI: https://doi.org/10.58875/gtrd9795

2024-01-01

Issues in science and technology

Abstract:Efforts to share health data across borders snag on legal and regulatory barriers. Before detangling the fine print, let’s agree on overarching principles.

engineering, industrial, multidisciplinary,multidisciplinary sciences,social issues
Three years in - changing plan features in the U.S. health insurance marketplace

Caitlin N McKillop,Teresa M Waters,Cameron M Kaplan,Erin K Kaplan,Michael P Thompson,Ilana Graetz

DOI: https://doi.org/10.1186/s12913-018-3198-3

2018-06-15

Abstract:Background: A central objective of recent U.S. healthcare policy reform, most notably the Affordable Care Act's (ACA) Health Insurance Marketplace, has been to increase access to stable, affordable health insurance. However, changing market dynamics (rising premiums, changes in issuer participation and plan availability) raise significant concerns about the marketplaces' ability to provide a stable source of healthcare for Americans that rely on them. By looking at the effect of instability on changes in the consumer choice set, we can analyze potential incentives to switch plans among price-sensitive enrollees, which can then be used to inform policy going forward. Methods: Data on health plan features for non-tobacco users in 2512 counties in 34 states participating in federally-facilitated exchanges from 2014 to 2016 was obtained from the Centers for Medicaid & Medicare Services. We examined how changes in individual plan features, including premiums, deductibles, issuers, and plan types, impact consumers who had purchased the lowest-cost silver or bronze plan in their county the previous year. We calculated the cost of staying in the same plan versus switching to another plan the following year, and analyzed how costs vary across geographic regions. Results: In most counties in 2015 and 2016 (53.7 and 68.2%, respectively), the lowest-cost silver plan from the previous year was still available, but was no longer the cheapest plan. In these counties, consumers who switched to the new lowest-cost plan would pay less in monthly premiums on average, by $51.48 and $55.01, respectively, compared to staying in the same plan. Despite potential premium savings from switching, however, the majority would still pay higher average premiums compared to the previous year, and most would face higher deductibles and an increased probability of having to change provider networks. Conclusion: While the ACA has shown promise in expanding healthcare access, continued changes in the availability and affordability of health plans are likely to result in churning and switching among enrollees, which may have negative ramifications for their health going forward. Future healthcare policy reform should aim to stabilize marketplace dynamics in order to encourage greater care continuity and limit churning.
Regulations and Funding to Create Enterprise Architecture for a Nationwide Health Data Ecosystem

Gabriel Seidman,Ahmad AlKasir,Kate Ricker,J. T. Lane,Anne B. Zink,Michelle A. Williams

DOI: https://doi.org/10.2105/ajph.2023.307477

2024-01-12

American Journal of Public Health

Abstract:The COVID-19 pandemic highlighted the United States’ lack of a nationwide infrastructure for collecting, sharing, and using health data, especially for secondary uses (e.g., population health management and public health). The federal government is taking several important steps to upgrade the nation’s health data ecosystem—notably, the Centers for Disease Control and Prevention’s Data Modernization Initiative and the Office of the National Coordinator for Health Information Technology’s Trusted Exchange Framework and Common Agreement. However, substantial barriers remain. Inconsistent regulations, infrastructure, and governance across federal and state levels and between states significantly impede the exchange and analysis of health data. Siloed systems and insufficient funding block effective integration of clinical, public health, and social determinants data within and between states. In this analytic essay, we propose strategies to develop a nationwide health data ecosystem. We focus on providing federal guidance and incentives to develop state-designated entities responsible for the collection, integration, and analysis of clinical, public health, social determinants of health, claims, administrative, and other relevant data. These recommendations include a regulatory clearinghouse, federal guidance, model legislation and templated regulation, funding to incentive enterprise architecture, regulatory sandboxes, and a 3-pronged research agenda. (Am J Public Health. Published online ahead of print January 11, 2024:e1–e9. https://doi.org/10.2105/AJPH.2023.307477 )

public, environmental & occupational health
Selling NHS patient data

Jessica Morley,Nicola Hamilton,Luciano Floridi

DOI: https://doi.org/10.1136/bmj.q420

2024-02-22

BMJ

Abstract:The next government must resist a retail model of data management

medicine, general & internal
Privacy in the age of medical big data

W. Nicholson Price,I. Glenn Cohen

DOI: https://doi.org/10.1038/s41591-018-0272-7

IF: 82.9

2019-01-01

Nature Medicine

Abstract:Big data has become the ubiquitous watch word of medical innovation. The rapid development of machine-learning techniques and artificial intelligence in particular has promised to revolutionize medical practice from the allocation of resources to the diagnosis of complex diseases. But with big data comes big risks and challenges, among them significant questions about patient privacy. Here, we outline the legal and ethical challenges big data brings to patient privacy. We discuss, among other topics, how best to conceive of health privacy; the importance of equity, consent, and patient governance in data collection; discrimination in data uses; and how to handle data breaches. We close by sketching possible ways forward for the regulatory system.

biochemistry & molecular biology,cell biology,medicine, research & experimental

Plan to alter access to health data draws ire

Expanding Risks: Medicaid Expansion and Data Security

Unraveling Medicare and Medicaid Prescription Drug Fraud and Abuse

Big Bad Data: Law, Public Health, and Biomedical Databases

Case study Vanderbilt University Medical Center Data Chaos

Health Care Information and the Protection of Personal Privacy: Ethical and Legal Considerations

US hospitals face collapse as cyberattack on UnitedHealth cuts revenue streams

Leveraging the big-data revolution: CMS is expanding capabilities to spur health system transformation

Advertising Campaign Highlights Value of Medical Record Data

Medicare Advantage Under Fire: Public Criticism and Implications

Changes To Sharing Medical Records Could Damage Research, Report Warns

Overseas Outsourcing of Private Information & Individual Remedies for Breach of Privacy

Reducing Medicare and Medicaid entitlements: a contentious environment ensues

Ethics of Patients Losing Insurance Coverage Due to Hospital-Insurer Contract Disagreements

'Anonymous' genetic databases vulnerable to privacy leaks

Medicare meets the cloud: the development of a secure platform for the storage and analysis of claims data

How Health Data Integrity Can Earn Trust and Advance Health

Three years in - changing plan features in the U.S. health insurance marketplace

Regulations and Funding to Create Enterprise Architecture for a Nationwide Health Data Ecosystem

Selling NHS patient data

Privacy in the age of medical big data