Accoding to the Privacy Rights Clearing House, "Your consent is not necessary when your information is used by a business associate of your health care provider or plan. Services provided by a business associate can include: legal, actuarial, accounting, consulting, data aggregation, management, administrative, accreditation, and financial. These business relationships are established with a written contract. Your personal medical information can be used to carry on the business association, but you are not a party to the arrangement."
We all know how trustworthy medical insurance companies are. Government is really more interested in protecting big business interests than your privacy.
A possible new threat to your privacy has recently come to light. Pharmacies have long been able to compile data on the prescribing habits of various physicians and then turn around and sell the data to drug companies, who want to know who is prescribing their medications, how their salesmen are doing, and also how to shape their sales pitches to the proclivities of the individual physicians. This process is referred to as data mining.
Of course, they are not supposed to include any information about specific patients, but according to a new article in BNet, The CBS interactive business network, "A new lawsuit alleges that CVS Pharmacies sold its lists to Eli Lilly, Merck, AstraZeneca and Bayer 'by name, date of birth and medications taken.' If true, that’s sobering in terms of patient privacy — do you really want Lilly knowing that you take Prozac?"
Individual physicians, through an American Medical Association (AMA) website, can elect to "opt out" of allowing their prescribing data to be sold by the pharmacies. However, many physicians either do not really care if their data is mined, or have not taken the time to opt out. Many others may not even know that pharmacies do this sort of thing. They don't teach you about this in medical school.
Busy docs have other things on their minds - it took me longer than it should have to track down the website and take care of this task.
Of course, it would work a whole lot better if physicians had to opt in in order for pharmacies to sell their information. But limiting the number of opt-outs is why this is done the way it is done.
I urge everyone to bug your personal physicians to opt out. They do not have to be AMA members to avail themselves of the opt-out service. You can even hand them the web link to the correct site to make it easier for them.
The push to use electronic medical records - which might eventually be available on the internet - while helping physicians to gain easy access to important prior patient medical records, is going to be another big threat to privacy. This will especially be true for psychiatrists, who deal with the most personal information of all.