Privacy as a concept: shadowy opaque faces overlaid with 1s and 0s

HIPAA RFI Comments: Patient Privacy Rights

By Adrian Gropper and Deborah C. Peel

Among other rich nations, US healthcare stands out as both exceptionally privatized and exceptionally expensive. And taken overall, we have the worst health outcomes among the Western Democracies.

On one hand, regulators are reluctant to limit private corporate action lest we reduce innovation and patient choice and promote moral hazards. On the other hand, a privatized marketplace for services requires transparency of costs and quality and a minimum of economic externalities that privatize profit and socialize costs.

For over two decades, the HIPAA law and regulations have dominated the way personal health data is used and abused to manipulate physician practice and increase costs. During these decades, digital technology has brought marvels of innovation and competition to markets as diverse as travel and publishing while healthcare technology is burning out physicians and driving patients to bankruptcy.

Read More

neural web and female face

Privacy Regulation in the Age of Machine Learning

By Adrian Gropper

Will the machines use our own personal information against us? The answer depends on privacy regulations that are yet to be written.

I know that the current approach to privacy regulation, be it general as in GDPR or sectoral as in HIPAA, is not readily extensible to a world where the principal value of personal data is machine learning. It’s easier to follow my logic if you agree that technology costs are already low compared to the value of personal data. Buying your own AI is increasingly sensible. Then, who will teach your personal AI in school, at work, in your community? You and your doctor will both have personal AI. What is the role of intellectual property when the cost of personal data dominates the cost of your AI? How do you use your AI to license the use of your personal data by others? Standards will be essential to maximize the market for your personal data, whether it’s sold or donated for the public good. These personal data standards are less-than-welcome in a process dominated by enterprises. Nonetheless, thoughtful privacy regulation designed around machine learning will keep humans responsible for the machines.

Read More

Digital Health @ Harvard Brown Bag Lunch Series: Free Independent Health Records, featuring Adrian Gropper, MD

January 26, 2017 12:00 PM
Berkman Klein Center for Internet and Society
23 Everett St., 2nd floor, Harvard Law School, Cambridge, MA

Register for this event

The Digital Health @ Harvard brown bag lunch series features speakers from Harvard as well as collaborators and colleagues from other institutions who research the intersection between health and digital technology. The series is cosponsored by the Berkman Klein Center for Internet & Society at Harvard University and the Petrie-Flom Center for Health Law Policy, Biotechnology, and Bioethics at Harvard Law School. The goal of the series is to discuss ongoing research in this research area, share new developments, identify opportunities for collaboration, and explore the digital health ecosystem more generally.

These lunches are free and open to the public, but RSVPs are required. RSVP now!

This Month

Dr. Adrian Gropper is working to put patients in charge of their health records, arguably the most valuable and most personal kinds of connected information about a person. They encompass elements of anonymous, pseudonymous, and verified identity and they interact with both regulated institutions and licensed professionals. Gropper’s research centers on self-sovereign technology for management of personal information both in control of the individual and as hosted or curated by others. The HIE of One project is a free software reference implementation and currently the only standards-based patient-centered record. The work implements a self-sovereign UMA Authorization Server and is adding blockchain identity as self-sovereign technology to enable licensed practitioners to authenticate and, for example, write a compliant prescription directly into the patient’s self-sovereign health record. Read More