{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,10]],"date-time":"2026-11-10T20:04:10Z","timestamp":1794341050810,"version":"4.9.0"},"reference-count":125,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2021,1,4]],"date-time":"2021-01-04T00:00:00Z","timestamp":1609718400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2021,1,4]],"date-time":"2021-01-04T00:00:00Z","timestamp":1609718400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/100006108","name":"U.S. Department of Health & Human Services | NIH | National Center for Advancing Translational Sciences","doi-asserted-by":"publisher","award":["U01TR002623"],"award-info":[{"award-number":["U01TR002623"]}],"id":[{"id":"10.13039\/100006108","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["npj Digit. Med."],"abstract":"<jats:title>Abstract<\/jats:title><jats:p>The National Academy of Medicine has long advocated for a \u201clearning healthcare system\u201d that produces constantly updated reference data during the care process. Moving toward a rapid learning system to solve intractable problems in health demands a balance between protecting patients and making data available to improve health and health care. Public concerns in the U.S. about privacy and the potential for unethical or harmful uses of this data, if not proactively addressed, could upset this balance. New federal laws prioritize sharing health data, including with patient digital tools. U.S. health privacy laws do not cover data collected by many consumer digital technologies and have not been updated to address concerns about the entry of large technology companies into health care. Further, there is increasing recognition that many classes of data not traditionally considered to be healthcare-related, for example consumer credit histories, are indeed predictive of health status and outcomes. We propose a multi-pronged approach to protecting health-relevant data while promoting and supporting beneficial uses and disclosures to improve health and health care for individuals and populations. Such protections should apply to entities collecting health-relevant data regardless of whether they are covered by federal health privacy laws. We focus largely on privacy but also address protections against harms as a critical component of a comprehensive approach to governing health-relevant data. U.S. policymakers and regulators should consider these recommendations in crafting privacy bills and rules. However, our recommendations also can inform best practices even in the absence of new federal requirements.<\/jats:p>","DOI":"10.1038\/s41746-020-00362-8","type":"journal-article","created":{"date-parts":[[2021,1,4]],"date-time":"2021-01-04T11:02:41Z","timestamp":1609758161000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":233,"title":["Privacy protections to encourage use of health-relevant digital data in a learning health system"],"prefix":"10.1038","volume":"4","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8172-4400","authenticated-orcid":false,"given":"Deven","family":"McGraw","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9781-0477","authenticated-orcid":false,"given":"Kenneth D.","family":"Mandl","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,1,4]]},"reference":[{"key":"362_CR1","unstructured":"The Learning Healthcare System: Workshop Summary (The National Academies Press, Washington, DC, 2007)."},{"key":"362_CR2","doi-asserted-by":"publisher","first-page":"1017","DOI":"10.1001\/jamainternmed.2013.560","volume":"173","author":"L Gottlieb","year":"2013","unstructured":"Gottlieb, L., Sandel, M. & Adler, N. Collecting and applying data on social determinants of health in health care settings. JAMA Intern Med. 173, 1017\u20131020 (2013).","journal-title":"JAMA Intern Med."},{"key":"362_CR3","unstructured":"Kuraitis, V. & McGraw, D. Health Data Outside Hipaa: The Wild West of Unprotected Personal Data. The Healthcare Blog. https:\/\/thehealthcareblog.com\/blog\/2019\/08\/12\/health-data-outside-hipaa-the-wild-west-of-unprotected-personal-data\/. Accessed 12 Aug 2019."},{"key":"362_CR4","unstructured":"NY Times. The Privacy Project. https:\/\/www.nytimes.com\/interactive\/2019\/opinion\/internet-privacy-project.html (Series of articles, June 2019 to Feb. 2020)"},{"key":"362_CR5","unstructured":"What They Know. Wall St J. https:\/\/www.wsj.com\/news\/types\/what-they-know (series of articles, 27 Feb 2011 to 23 Dec. 2012)."},{"key":"362_CR6","doi-asserted-by":"publisher","first-page":"1141","DOI":"10.1001\/jama.2019.11365","volume":"322","author":"IG Cohen","year":"2019","unstructured":"Cohen, I. G. & Mello, M. M. Big data, big tech, and protecting patient privacy. JAMA 322, 1141\u20131142 (2019).","journal-title":"JAMA"},{"key":"362_CR7","unstructured":"U.S. Department of Health and Human Services. Report to Congress.- Report on Health Information Blocking. https:\/\/www.healthit.gov\/sites\/default\/files\/reports\/info_blocking_040915.pdf. Accessed 20 Apr 2015."},{"key":"362_CR8","unstructured":"Finley, D. About 60 Health Systems are Siding with Epic Systems Against HHS Proposed Data-sharing Rules. https:\/\/www.businessinsider.com\/60-health-systems-epic-systems-hhs-2020-2. Accessed 06 Feb 2020."},{"key":"362_CR9","first-page":"2479","volume":"311","author":"GM Weber","year":"2014","unstructured":"Weber, G. M., Mandl, K. D. & Kohane, I. S. Finding the Missing Link for Big Biomedical Data. JAMA 311, 2479\u20132480 (2014).","journal-title":"JAMA"},{"key":"362_CR10","unstructured":"Chess, E. Step Aside, Biomarkers. Look to the Bank Account for Early Signs Of Dementia. https:\/\/www.statnews.com\/2019\/12\/05\/dementia-early-warning-check-bank-accounts-not-biomarkers\/. Accessed 05 Dec 2019."},{"key":"362_CR11","unstructured":"Parker-Pope, T. Keeping Score On How You Take your Medicine. The NY Times. https:\/\/well.blogs.nytimes.com\/2011\/06\/20\/keeping-score-on-how-you-take-your-medicine\/. Accessed 20 Jun 2011."},{"key":"362_CR12","unstructured":"Health Insurance Portability and Accountability Act. Public Law No. 104-191, 110 Stat. 1938 (1996)."},{"key":"362_CR13","unstructured":"Health Information Technology for Economic and Clinical Health Act (HITECH). Public Law No. 111-5, 123 Stat. 226 (Feb. 17, 2009)."},{"key":"362_CR14","unstructured":"Code of Federal Regulations title 45, \u00a7 160.103 (definition of health information)."},{"key":"362_CR15","doi-asserted-by":"crossref","unstructured":"Price, W. N. & Cohen, I. G., Privacy in the Age of Medical Big Data. Nat. Med. 25, 37\u201343 (2019).","DOI":"10.1038\/s41591-018-0272-7"},{"key":"362_CR16","unstructured":"National Committee on Vital and Health Statistics (NCVHS). Health Information Privacy Beyond HIPAA: A Framework for Use and Protection (A Report for Policy Makers. https:\/\/ncvhs.hhs.gov\/wp-content\/uploads\/2019\/07\/Report-Framework-for-Health-Information-Privacy.pdf. Accessed 18 Jun 2019."},{"key":"362_CR17","unstructured":"U.S. Department of Health & Human Services. Examining Oversight of the Privacy & Security of Health Data Collected by Entities Not Regulated by HIPAA. https:\/\/www.healthit.gov\/sites\/default\/files\/non-covered_entities_report_june_17_2016.pdf. Accessed 17 Jun 2016."},{"key":"362_CR18","unstructured":"Forbrukerradet. Out of Control: How Consumers are Exploited by the Online Advertising Industry. https:\/\/fil.forbrukerradet.no\/wp-content\/uploads\/2020\/01\/2020-01-14-out-of-control-final-version.pdf. Accessed 14 Jan 2020."},{"key":"362_CR19","unstructured":"Test-Achats. Nutrition And Health Applications Do Not Respect Privacy. https:\/\/www.test-achats.be\/action\/espace-presse\/communiques-de-presse\/2020\/food-and-health-apps#. Accessed 23 Jan 2020."},{"key":"362_CR20","doi-asserted-by":"crossref","unstructured":"Huckvale, K., Torous, J., & Larsen, M. Assessment of the Data Sharing and Privacy Practices of Smartphone Apps For Depression And Smoking Cessation. JAMA Network Open. https:\/\/jamanetwork.com\/journals\/jamanetworkopen\/fullarticle\/2730782 (2019).","DOI":"10.1001\/jamanetworkopen.2019.2542"},{"key":"362_CR21","unstructured":"Public Law 114-255. 130 Stat 1033 Sections 4003\u20134004."},{"key":"362_CR22","unstructured":"Federal Register vol. 85 25642-25961. Accessed 01 May 2020."},{"key":"362_CR23","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1016\/j.cels.2015.05.001","volume":"1","author":"KD Mandl","year":"2015","unstructured":"Mandl, K. D., Mandel, J. C. & Kohane, I. S. Driving Innovation in Health Systems Through an Apps-Based Information Economy. Cell Syst. 1, 8\u201313 (2015).","journal-title":"Cell Syst."},{"key":"362_CR24","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1038\/s41746-020-00358-4","volume":"3","author":"KD Mandl","year":"2020","unstructured":"Mandl, K. D. et al. Push Button Population Health: The SMART\/HL7 Bulk Data Access Application Programming Interface. npj Digit. Med. 3, 151 (2020).","journal-title":"npj Digit. Med."},{"key":"362_CR25","doi-asserted-by":"crossref","unstructured":"Mandl, K. D. & Kohane, I. S. A 21st Century Health IT System: Creating a Real-World Information Economy. N. Engl. J. Med. 376, 1905\u20131907.","DOI":"10.1056\/NEJMp1700235"},{"key":"362_CR26","unstructured":"Federal Register vol. 85 no. 85. 25510-25640. Accessed 01 May 2020."},{"key":"362_CR27","unstructured":"Roth, M. Special Report: Epic Uproar Exposes Conflict Between Data Privacy and Innovation. Health Leaders Media. https:\/\/www.healthleadersmedia.com\/innovation\/special-report-epic-uproar-exposes-conflict-between-data-privacy-and-innovation. Accessed 11 Feb 2020."},{"key":"362_CR28","unstructured":"Mandl, K. D. & Kohane, I. S. Epic\u2019s call to block a proposed data rule is wrong for many reasons. Stat News. https:\/\/www.statnews.com\/2020\/01\/27\/epic-block-proposed-data-rule\/. Accessed 20 Jan 2020."},{"key":"362_CR29","doi-asserted-by":"publisher","first-page":"1781","DOI":"10.1056\/NEJMp1917640","volume":"382","author":"KD Mandl","year":"2020","unstructured":"Mandl, K. D. & Kohane, I. S. Data Citizenship under the 21st Century Cures Act. N. Engl. J. Med 382, 1781\u20131783 (2020). March 11.","journal-title":"N. Engl. J. Med"},{"key":"362_CR30","unstructured":"U.S. Code title 15, \u00a745."},{"key":"362_CR31","unstructured":"US. Code title 15, \u00a745(a)(2)."},{"key":"362_CR32","first-page":"583","volume":"114","author":"DJ Solove","year":"2014","unstructured":"Solove, D. J. & Hartzog, W. The FTC and the New Common Law of Privacy. Col. Law Rev. 114, 583\u2013676 (2014).","journal-title":"Col. Law Rev."},{"key":"362_CR33","unstructured":"U.S. Department of Health and Human Services. Examining Oversight of the Privacy & Security of Health Data Collected by Entities Not Regulated by HIPAA. https:\/\/www.healthit.gov\/sites\/default\/files\/non-covered_entities_report_june_17_2016.pdf. Accessed 17 Jun 2016."},{"key":"362_CR34","doi-asserted-by":"publisher","first-page":"205","DOI":"10.1056\/NEJMp1512142","volume":"374","author":"KD Mandl","year":"2016","unstructured":"Mandl, K. D. & Kohane, I. S. Time for a Patient-Driven Health Information Economy? N. Engl. J. Med. 374, 205\u2013208 (2016). January 21.","journal-title":"N. Engl. J. Med."},{"key":"362_CR35","doi-asserted-by":"publisher","first-page":"103","DOI":"10.1177\/1073110520917035","volume":"48","author":"JK Wagner","year":"2020","unstructured":"Wagner, J. K. The Federal Trade Commission and Consumer Protections for Mobile Health Apps. J. Law, Med. Ethics 48, 103\u2013114 (2020). April 28.","journal-title":"J. Law, Med. Ethics"},{"key":"362_CR36","doi-asserted-by":"publisher","first-page":"94","DOI":"10.1177\/1073110520917034","volume":"48","author":"N Terry","year":"2020","unstructured":"Terry, N. Assessing the thin regulation of consumer-facing health technologies. J. Law, Med. Ethics 48, 94\u2013102 (2020).","journal-title":"J. Law, Med. Ethics"},{"key":"362_CR37","unstructured":"Coldewey, D. 9 Reasons the Facebook FTC Settlement is a Joke. Techcrunch. https:\/\/techcrunch.com\/2019\/07\/24\/9-reasons-the-facebook-ftc-settlement-is-a-joke\/. Accessed 24 Jul 2019."},{"key":"362_CR38","unstructured":"Olen, H. Why Facebook\u2019s $5 Billion Settlement With the Ftc Won\u2019t Change A Thing. Wash Post. https:\/\/www.washingtonpost.com\/opinions\/2019\/07\/25\/why-facebooks-billion-settlement-with-ftc-wont-change-thing\/. Accessed 25 Jul 2019."},{"key":"362_CR39","unstructured":"Congressional Research Service. Data Protection Law: An Overview. https:\/\/fas.org\/sgp\/crs\/misc\/R45631.pdf. Accessed 25 Mar 2019."},{"key":"362_CR40","unstructured":"U.S. Department of Health and Human Services. Privacy and Security Solutions for Interoperable Health Information Exchange\u2014Report on State Law Requirements for Patient Permission to Disclose Health Information. https:\/\/www.healthit.gov\/sites\/default\/files\/disclosure-report-1.pdf. Accessed Aug 2009."},{"key":"362_CR41","unstructured":"Baum, S. Navigating State Patient Data Privacy Laws Will Only Get More Challenging. MedCity News. https:\/\/medcitynews.com\/2018\/11\/navigating-state-patient-data-privacy-laws-will-only-get-more-challenging\/. Accessed 13 Nov 2018."},{"key":"362_CR42","unstructured":"Craig, D. What You Need To Know About Hipaa And Your State\u2019s Laws. https:\/\/blog.sprucehealth.com\/need-know-hipaa-states-laws\/. Accessed 10 Oct 2016."},{"key":"362_CR43","unstructured":"EU, General Data Protection Regulation (GDPR) OJ 2016 L119\/1."},{"key":"362_CR44","first-page":"52","volume":"88","author":"M Butler","year":"2017","unstructured":"Butler, M. Is HIPAA outdated? While coverage gaps and growing breaches raise industry concern, others argue HIPAA is still effective. J. Ahima. 88, 52 (2017).","journal-title":"J. Ahima."},{"key":"362_CR45","unstructured":"Tanner, A. Our Bodies, Our Data: How companies make billions selling our medical records (Beacon Press, Boston, 2017)."},{"key":"362_CR46","unstructured":"Robbins, R. Contract offers unprecedented look at Google deal to obtain patient data from the University of California. Stat News. https:\/\/www.statnews.com\/2020\/02\/26\/patient-data-contract-google-university-of-california\/. Accessed 26 Feb 2020."},{"key":"362_CR47","unstructured":"Rosenbaum, L. Google Health Exec Defends Controversial Partnership With Ascension: \u2018We\u2019re Super Proud of it.\u2019 Forbes. https:\/\/www.forbes.com\/sites\/leahrosenbaum\/2020\/01\/14\/google-health-exec-defends-controversial-partnership-with-ascension-were-super-proud-of-it\/#69dd0116a3be. Accessed 14 Jan 2020."},{"key":"362_CR48","unstructured":"Landi, H. Providence St. Joseph Health, Microsoft form strategic alliance to leverage cloud, AI technology. Fierce Healthcare. https:\/\/www.fiercehealthcare.com\/tech\/providence-st-joseph-health-microsoft-form-strategic-alliance-to-leverage-cloud-ai-technology. Accessed 08 Jan 2019."},{"key":"362_CR49","unstructured":"Jahns, I. For the benefit of all\u2019\u201d Mayo partners with Amazon, Microsoft and others in the fight against COVID-19. MedCityBeat. https:\/\/www.medcitybeat.com\/news-blog\/2020\/for-the-benefit-of-all-mayo-partners-with-amazon-microsoft-and-others-in-fight-against-covid-19. Accessed 26 Mar 2020."},{"key":"362_CR50","doi-asserted-by":"publisher","first-page":"507","DOI":"10.1001\/jama.2019.21215","volume":"323","author":"R Wachter","year":"2020","unstructured":"Wachter, R. & Cassel, C. Sharing Health Data with Digital Giants: Overcoming Obstacles and Reaping Benefits While Protecting Patients. JAMA 323, 507\u2013508 (2020).","journal-title":"JAMA"},{"key":"362_CR51","unstructured":"Smith, E. The Techlash Against Amazon, Facebook And Google \u2013 And What They Can Do Economist. https:\/\/www.economist.com\/briefing\/2018\/01\/20\/the-techlash-against-amazon-facebook-and-google-and-what-they-can-do. Accessed 20 Jan 2018."},{"key":"362_CR52","unstructured":"Davis, J. Facebook Accused Of Exposing User Health Data In Complaint to FTC. Health IT News. https:\/\/healthitsecurity.com\/news\/facebook-accused-of-exposing-user-health-data-in-ftc-complaint. Accessed 20 Feb 2019."},{"key":"362_CR53","unstructured":"Nakashima, R. A. P. Exclusive: Google tracks your movements, like it or not. Associated Press. https:\/\/apnews.com\/828aefab64d4411bac257a07c1af0ecb. Accessed 13 Aug 2018."},{"key":"362_CR54","unstructured":"Zuboff, S. Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power (PublicAffairs, New York, 2019)."},{"key":"362_CR55","unstructured":"Anonymous. I\u2019M The Google Whistleblower. The Medical Data Of Millions Of Americans Is At Risk. The Guardian. https:\/\/www.theguardian.com\/commentisfree\/2019\/nov\/14\/im-the-google-whistleblower-the-medical-data-of-millions-of-americans-is-at-risk. Accessed 14 Nov 2019."},{"key":"362_CR56","unstructured":"Garcia, A. Google\u2019s \u2018Project Nightingale\u2019 center of Federal inquiry. https:\/\/www.cnn.com\/2019\/11\/12\/tech\/google-project-nightingale-federal-inquiry\/index.html. Accessed 15 Nov 2019."},{"key":"362_CR57","unstructured":"U.S. Department of Health and Human Services. HIPAA and COVID-19. https:\/\/www.hhs.gov\/hipaa\/for-professionals\/special-topics\/hipaa-covid19\/index.html. Accessed 12 Jun 2020."},{"key":"362_CR58","unstructured":"Mostashari, F. & McClellan, M. Data Interoperability and Exchange to Support COVID-19 Containment. https:\/\/healthpolicy.duke.edu\/sites\/default\/files\/atoms\/files\/data_interoperability_and_exchange_to_support_covid-19_containment_final.pdf. Accessed 01 May 2020."},{"key":"362_CR59","unstructured":"Gebhart, G. Verily\u2019s COVID-19 Screening Website Leaves Privacy Questions Unanswered. https:\/\/www.eff.org\/deeplinks\/2020\/03\/verilys-covid-19-screening-website-leaves-privacy-questions-unanswered. Accessed 25 Mar 2020."},{"key":"362_CR60","unstructured":"Watson, C., Cicero, A., Blumenstock, J., & Fraser, M. A National Plan to Enable Comprehensive COVID-19 Case Finding and Contact Tracing in the U.S. https:\/\/www.centerforhealthsecurity.org\/our-work\/pubs_archive\/pubs-pdfs\/2020\/200410-national-plan-to-contact-tracing.pdf. Accessed 10 Apr 2020."},{"key":"362_CR61","unstructured":"Vogelstein, F. & Knight, W. Health Officials Say \u2018No Thanks\u2019 to Contact Tracing Tech. Wired. https:\/\/www.wired.com\/story\/health-officials-no-thanks-contact-tracing-tech\/. Accessed 08 May 2020."},{"key":"362_CR62","unstructured":"O\u2019Neill, P. H., Ryan-Mosley, T. & Johnson, B. A Flood Of Coronavirus Apps Are Tracking Us. Now It\u2019s Time To Keep Track Of Them. MIT Tech Rev. https:\/\/www.technologyreview.com\/2020\/05\/07\/1000961\/launching-mittr-covid-tracing-tracker\/. Accessed 07 May 2020."},{"key":"362_CR63","unstructured":"Holmes, A. Take A First Look At Apple And Google\u2019s Ambitious New Covid-19 Contact Tracing Technology That Will Send You A Notification If You Were Near Someone Who Has The Coronavirus. Bus Insider. https:\/\/www.businessinsider.com\/apple-google-covid-19-contact-tracing-smartphone-screenshots-2020-5. Accessed 04 May 2020."},{"key":"362_CR64","unstructured":"Morrison, S. Apple and Google look like problematic heroes in the pandemic. Vox. https:\/\/www.vox.com\/recode\/2020\/4\/16\/21221458\/apple-google-contact-tracing-app-coronavirus-covid-privacy. Accessed 16 Apr 2020."},{"key":"362_CR65","unstructured":"Newton, C. Why Countries Keep Bowing To Apple And Google\u2019s Contact Tracing App Requirements. The Verge. https:\/\/www.theverge.com\/interface\/2020\/5\/8\/21250744\/apple-google-contact-tracing-england-germany-exposure-notification-india-privacy. Accessed 08 May 2020."},{"key":"362_CR66","unstructured":"Nanos, J. Every Step You Take: How Companies Use Geolocation Data To Target You\u2013And Everyone Around\u2013In Ways You\u2019re Not Even Aware of Boston Globe. https:\/\/apps.bostonglobe.com\/business\/graphics\/2018\/07\/foot-traffic\/. Accessed 20 Jun 2020."},{"key":"362_CR67","doi-asserted-by":"publisher","first-page":"1845","DOI":"10.2105\/AJPH.2011.300206","volume":"101","author":"J O'Connor","year":"2011","unstructured":"O'Connor, J. & Matthews, G. Informational Privacy, Public Health, and State Laws. Am. J. Public Health 101, 1845\u20131850 (2011).","journal-title":"Am. J. Public Health"},{"key":"362_CR68","unstructured":"Hartzog, W. & Richards, N. It\u2019s Time to Try Something Different On Internet Privacy. Wash Post. https:\/\/www.washingtonpost.com\/opinions\/its-time-to-try-something-different-on-internet-privacy\/2018\/12\/20\/bc1d71c0-0315-11e9-9122-82e98f91ee6f_story.html?noredirect=on. Accessed 20 Dec 2018."},{"key":"362_CR69","doi-asserted-by":"crossref","unstructured":"Cate, F. H. & Mayer-Sch\u00f6nberger, V. Notice and Consent in a World of Big Data. https:\/\/www.repository.law.indiana.edu\/facpub\/2662 (2013).","DOI":"10.1093\/idpl\/ipt005"},{"key":"362_CR70","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1162\/DAED_a_00113","volume":"140","author":"HA Nissenbaum","year":"2011","unstructured":"Nissenbaum, H. A. contextual approach to privacy online. Daedalus 140, 32\u201348 (2011).","journal-title":"Daedalus"},{"key":"362_CR71","first-page":"95","volume":"14","author":"F Pasquale","year":"2014","unstructured":"Pasquale, F. Redescribing health policy: the importance of information policy. Houst. J. Health Law Policy 14, 95\u2013128 (2014).","journal-title":"Houst. J. Health Law Policy"},{"key":"362_CR72","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1136\/amiajnl-2013-002605","volume":"22","author":"A Unyaef","year":"2015","unstructured":"Unyaef, A., Dehling, T., Taylor, P. L. & Mandl, K. D. Availability and quality of mobile health app privacy policies. J. Am. Med Inf. Assoc. 22, 28\u201333 (2015). April.","journal-title":"J. Am. Med Inf. Assoc."},{"key":"362_CR73","unstructured":"Berreby, D. Click to Agree With What? No One Reads Terms Of Service, Studies Confirm. The Guardian. https:\/\/www.theguardian.com\/technology\/2017\/mar\/03\/terms-of-service-online-contracts-fine-print. Accessed 03 Mar 2017."},{"key":"362_CR74","doi-asserted-by":"crossref","unstructured":"Hartzog, W. Privacy\u2019s Blueprint: The Battle to Control the Design of New Technologies (Harvard University Press, Cambridge, 2018).","DOI":"10.4159\/9780674985124"},{"key":"362_CR75","doi-asserted-by":"publisher","first-page":"495","DOI":"10.1097\/GIM.0b013e31817a8aaa","volume":"10","author":"AL McGuire","year":"2008","unstructured":"McGuire, A. L. et al. Confidentiality, privacy, and security of genetic and genomic test information in electronic health records: points to consider. Genet. Med. 10, 495\u2013499 (2008).","journal-title":"Genet. Med."},{"key":"362_CR76","unstructured":"Brumfield, C. 11 New State Privacy And Security Laws Explained: Is Our Business Ready? CSO. https:\/\/www.csoonline.com\/article\/3429608\/11-new-state-privacy-and-security-laws-explained-is-your-business-ready.html. Accessed 08 Aug 2019."},{"key":"362_CR77","unstructured":"Fowler, G. Nobody Reads Privacy Policies. This Senator Wants Lawmakers To Stop Pretending We Do. Wash Post. https:\/\/www.washingtonpost.com\/technology\/2020\/06\/18\/data-privacy-law-sherrod-brown\/. Accessed 18 Jun 2020."},{"key":"362_CR78","doi-asserted-by":"publisher","first-page":"29","DOI":"10.1136\/amiajnl-2012-000936","volume":"20","author":"D McGraw","year":"2013","unstructured":"McGraw, D. Building public trust in uses of Health Insurance Portability and Accountability Act de-Identified data. J. Am. Med Inform. Assn 20, 29\u201334 (2013).","journal-title":"J. Am. Med Inform. Assn"},{"key":"362_CR79","unstructured":"Title 1.81.5 of Part 4 of Division 3 of the California Civil Code (Section 1798.100 et seq.) at 1798.140(o)."},{"key":"362_CR80","unstructured":"Doddi, D. & Gottlieb, D. California Bill Proposes CCPA Exceptions for HIPAA De-identified Information, Other Health data. JD Supra. https:\/\/www.jdsupra.com\/legalnews\/california-bill-proposes-ccpa-34045\/ (Jan 17, 2020)."},{"key":"362_CR81","doi-asserted-by":"publisher","first-page":"300","DOI":"10.1097\/MLR.0000000000001080","volume":"2019","author":"AC Anderson","year":"2019","unstructured":"Anderson, A. C. & Chen, J. ACO Affiliated Hospitals increase implementation of care coordination strategies. Med. Care 2019, 300\u2013304 (2019).","journal-title":"Med. Care"},{"key":"362_CR82","doi-asserted-by":"publisher","first-page":"1859","DOI":"10.1001\/jama.2017.15028","volume":"318","author":"KD Mandl","year":"2017","unstructured":"Mandl, K. D. & Bourgeois, F. T. The Evolution of patient diagnosis: from art to digital data-driven science. JAMA 318, 1859\u20131860 (2017).","journal-title":"JAMA"},{"key":"362_CR83","doi-asserted-by":"publisher","first-page":"655","DOI":"10.1056\/NEJMsa1507092","volume":"375","author":"AK Manrai","year":"2016","unstructured":"Manrai, A. K. et al. Genetic misdiagnoses and the potential for health disparities. N. Eng. J. Med. 375, 655\u2013665 (2016).","journal-title":"N. Eng. J. Med."},{"key":"362_CR84","doi-asserted-by":"publisher","first-page":"576","DOI":"10.1136\/amiajnl-2014-002864","volume":"21","author":"FS Collins","year":"2014","unstructured":"Collins, F. S., Hudson, K. L., Briggs, J. P. & Lauer, M. S. PCORnet: turning a dream into reality. J. Am. Med. Inform. Ass\u2019n 21, 576\u2013577 (2014).","journal-title":"J. Am. Med. Inform. Ass\u2019n"},{"key":"362_CR85","first-page":"204","volume":"75","author":"R Califf","year":"2014","unstructured":"Califf, R. The Patient-Centered Outcomes Research Network: a national infrastructure for comparative effectiveness research. N. C. Med. J. 75, 204\u2013210 (2014).","journal-title":"N. C. Med. J."},{"key":"362_CR86","first-page":"147","volume":"1","author":"S Visweswaran","year":"2018","unstructured":"Visweswaran, S. et al. Accrual to Clinical Trials (ACT): a clinical and translational science award consortium network. J. Am. Med Inform. Ass\u2019n Open 1, 147\u2013152 (2018).","journal-title":"J. Am. Med Inform. Ass\u2019n Open"},{"key":"362_CR87","doi-asserted-by":"publisher","first-page":"2091","DOI":"10.1056\/NEJMp1809643","volume":"379","author":"R Platt","year":"2018","unstructured":"Platt, R. et al. The FDA sentinel initiative\u2013an evolving national resource. N. Engl. J. Med. 379, 2091\u20132093 (2018).","journal-title":"N. Engl. J. Med."},{"key":"362_CR88","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1197\/jamia.M1356","volume":"11","author":"KD Mandl","year":"2004","unstructured":"Mandl, K. D. et al. Implementing syndromic surveillance: a practical guide informed by the early experience. J. Am. Med. Inform. Ass\u2019n 11, 141\u2013150 (2004).","journal-title":"J. Am. Med. Inform. Ass\u2019n"},{"key":"362_CR89","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1038\/s41746-019-0090-4","volume":"2","author":"A Coravos","year":"2019","unstructured":"Coravos, A., Khozin, S. & Mandl, K. Developing and adopting safe and effective digital biomarkers to improve patient outcomes. NPJ Digital Med. 2, 14 (2019).","journal-title":"NPJ Digital Med."},{"key":"362_CR90","unstructured":"Hale, C. Fitbit Posts Early Findings Showing Its Trackers Can Identify Cases Of Covid-19 Before Symptoms Take Hold. Fierce Biotech. https:\/\/www.rarediseasesnetwork.org\/researchers\/nih-data-sharing. Accessed 19 Aug 2020."},{"key":"362_CR91","doi-asserted-by":"publisher","first-page":"360","DOI":"10.1038\/nbt.3180","volume":"33","author":"KD Mandl","year":"2015","unstructured":"Mandl, K. D. & Kohane, I. S. Federalist principles for healthcare data networks. Nat. Biotechnol. 33, 360\u2013363 (2015).","journal-title":"Nat. Biotechnol."},{"key":"362_CR92","unstructured":"Quinn, M. The future of healthcare is outside the doctor\u2019s office. https:\/\/www.governing.com\/topics\/health-human-services\/gov-community-health-workers.html (2017). Accessed 7 Apr 2020."},{"key":"362_CR93","doi-asserted-by":"publisher","first-page":"416","DOI":"10.1377\/hlthaff.28.2.416","volume":"28","author":"D McGraw","year":"2009","unstructured":"McGraw, D., Dempsey, J. X., Harris, L. & Goldman, J. Privacy as enabler, not an impediment: building trust into healthcare information exchange. Health Aff. 28, 416\u2013427 (2009).","journal-title":"Health Aff."},{"key":"362_CR94","first-page":"682","volume":"72","author":"F Pasquale","year":"2013","unstructured":"Pasquale, F. Grand Bargains for Big Data: The Emerging Law of Health Information. Md. Law Rev. 72, 682\u2013772 (2013).","journal-title":"Md. Law Rev."},{"key":"362_CR95","doi-asserted-by":"crossref","unstructured":"Faden R. R. et al. An Ethics Framework for a Learning Health Care System: A Departure from Traditional Research Ethics and Clinical Ethics. Hastings Ctr Special Report: Ethical Oversight of Learning Health Care Systems S16\u2013S27 (Jan\u2013Feb 2013).","DOI":"10.1002\/hast.134"},{"key":"362_CR96","unstructured":"FTC Report. Protecting Consumer Privacy In An Era Of Rapid Change: Recommendations For Businesses And Policymakers. https:\/\/www.ftc.gov\/sites\/default\/files\/documents\/reports\/federal-trade-commission-report-protecting-consumer-privacy-era-rapid-change-recommendations\/120326privacyreport.pdf. Accessed Mar 2012."},{"key":"362_CR97","unstructured":"Gellman, R. Fair Information Practices: A Basic History. https:\/\/bobgellman.com\/rg-docs\/rg-FIPshistory.pdf. Accessed 07 Oct 2019."},{"key":"362_CR98","unstructured":"Millenson, M. Big Data on Social Determinants: Improved Health and Unaddressed Privacy Concerns. https:\/\/catalyst.nejm.org\/doi\/full\/10.1056\/CAT.18.0161. Accessed 05 Jun 2018."},{"key":"362_CR99","unstructured":"S.3744. Data Care Act of 2018. https:\/\/www.congress.gov\/bill\/115th-congress\/senate-bill\/3744. Accessed 12 Dec 2018."},{"key":"362_CR100","unstructured":"Farr, C. Hospital Execs Say They Are Getting Flooded With Requests For Your Health Data. CNBC. https:\/\/www.cnbc.com\/2019\/12\/18\/hospital-execs-say-theyre-flooded-with-requests-for-your-health-data.html. Accessed 18 Dec 2019."},{"key":"362_CR101","doi-asserted-by":"publisher","first-page":"1493","DOI":"10.1056\/NEJMp1816373","volume":"380","author":"E Parasidis","year":"2019","unstructured":"Parasidis, E., Pike, E. & McGraw, D. A Belmont Report for Health Data. N. Engl. J. Med 380, 1493\u20131495 (2019).","journal-title":"N. Engl. J. Med"},{"key":"362_CR102","unstructured":"U.S. Department of Health and Human Services, Office for Human Research Protections. Federal Policy for the Protection of Human Subjects (\u2018Common Rule\u2019). https:\/\/www.hhs.gov\/ohrp\/regulations-and-policy\/regulations\/common-rule\/index.html. Accessed 18 Mar 2016."},{"key":"362_CR103","doi-asserted-by":"publisher","first-page":"613","DOI":"10.1056\/NEJMp1700736","volume":"375","author":"J Menikoff","year":"2017","unstructured":"Menikoff, J., Kaneshiro, J. & Pritchard, I. The Common Rule, Updated. N. Engl. J. Med. 375, 613\u2013615 (2017).","journal-title":"N. Engl. J. Med."},{"key":"362_CR104","unstructured":"Facebook Oversight Board Charter. https:\/\/about.fb.com\/wp-content\/uploads\/2019\/09\/oversight_board_charter.pdf. Accessed 23 Jun 2020."},{"key":"362_CR105","unstructured":"Thomas, V. C., Duda, J. P. & Maurer, T. G. Independence With A Purpose: Facebook\u2019s Creative Use Of Delaware\u2019s Purpose Trust Statute To Establish Independent Oversight. https:\/\/businesslawtoday.org\/2019\/12\/independence-purpose-facebooks-creative-use-delawares-purpose-trust-statute-establish-independent-oversight\/. Accessed 17 Dec 2019."},{"key":"362_CR106","unstructured":"Sullivan, M. Facebook Has A Huge Truth Problem. A High-priced \u2018Oversight Board\u2019 Won\u2019t Fix It. Wash Post. https:\/\/www.washingtonpost.com\/lifestyle\/media\/facebook-has-a-huge-truth-problem-a-high-priced-oversight-board-wont-fix-it\/2020\/05\/14\/c5b53cba-95d9-11ea-9f5e-56d8239bf9ad_story.html?utm_campaign=wp_post_most&utm_medium=email&utm_source=newsletter&wpisrc=nl_most. Accessed 14 May 2020."},{"key":"362_CR107","unstructured":"Piper, K. Exclusive: Google Cancels Ai Ethics Board In Response To Outcry. Vox. https:\/\/www.vox.com\/future-perfect\/2019\/4\/4\/18295933\/google-cancels-ai-ethics-board. Accessed 04 Apr 2019."},{"key":"362_CR108","unstructured":"McDonald, S. The Civic Trust. Medium. https:\/\/medium.com\/@McDapper\/the-civic-trust-e674f9aeab43. Accessed 04 Aug 2015."},{"key":"362_CR109","unstructured":"Siftung Neue Verantwortung. Designing Data Trusts\u2014Why We Need to Test Consumer Data Trusts Now. https:\/\/www.stiftung-nv.de\/en\/publication\/designing-data-trusts-why-we-need-test-consumer-data-trusts-now. Accessed 23 Jun 2020."},{"key":"362_CR110","unstructured":"Information and Privacy Commissioner\/Ontario. A Guide to the Personal Health Information Protection Act. https:\/\/www.ipc.on.ca\/wp-content\/uploads\/Resources\/hguide-e.pdf. Accessed Dec 2004."},{"key":"362_CR111","unstructured":"Code of Federal Regulations, title 45 \u00a7 164.514(e)(4)."},{"key":"362_CR112","unstructured":"Schaub, F., Balebako, R., Durity, A. L., & Cranor, L. F. A Design Space For Effective Privacy Notices. 2015 Symposium On Usable Privacy and Security (SOUPS). https:\/\/www.ftc.gov\/system\/files\/documents\/public_comments\/2015\/10\/00038-97832.pdf. Accessed 22\u201324 Jul 2015,"},{"key":"362_CR113","doi-asserted-by":"crossref","unstructured":"Kay, M. & Terry, M. Textured Agreements: Re-envisioning Electronic Consent. 2010 Symposium On Usable Privacy And Security (SOUPS). http:\/\/hci-web.cs.uwaterloo.ca\/sites\/default\/files\/soups_2010_textured.pdf. Accessed 14\u201316 Jul 2010.","DOI":"10.1145\/1837110.1837127"},{"key":"362_CR114","unstructured":"National Research Council of the National Academies. Toward Precision Medicine: Building a Knowledge Network for Biomedical Research and a New Taxonomy of Disease (National Academies Press, Washington, DC, 2011)."},{"key":"362_CR115","first-page":"2097","volume":"56","author":"JL Roberts","year":"2015","unstructured":"Roberts, J. L. Protecting Privacy to Prevent Discrimination. Wm. Mary L. Rev. 56, 2097\u20132174 (2015).","journal-title":"Wm. Mary L. Rev."},{"key":"362_CR116","unstructured":"Genetic Information Nondiscrimination Act. Pub. L. 110-233, 122 Stat. 881 (21 May 2008)."},{"key":"362_CR117","unstructured":"U.S. Department of Justice, Civil Rights Division, Disability Rights Section. A Guide to Disability Rights Laws. https:\/\/www.ada.gov\/cguide.htm#:~:text=Americans%20with%20Disabilities%20Act%20(ADA,to%20the%20United%20States%20Congress. Accessed Feb 2020."},{"key":"362_CR118","unstructured":"Code of Federal Regulations, title 45 \u00a7164.512(f)(1)(C)."},{"key":"362_CR119","unstructured":"Code of Federal Regulations, title 45 \u00a7164.512(f)(2)."},{"key":"362_CR120","doi-asserted-by":"publisher","unstructured":"Guerini, C. J., Robinson, J. O., Petersen, D., & McGuire, A. L. Should police have access to genetic genealogy databases? Capturing the Golden State Killer and other criminals using a controversial new forensic technique. PLOS Biol. https:\/\/doi.org\/10.1371\/journal.pbio.2006906 (2018).","DOI":"10.1371\/journal.pbio.2006906"},{"key":"362_CR121","first-page":"737","volume":"96","author":"D Solove","year":"2018","unstructured":"Solove, D. & Citron, D. K. Risk and anxiety: a theory of data-breach harms. Tex. Law Rev. 96, 737\u2013786 (2018).","journal-title":"Tex. Law Rev."},{"key":"362_CR122","unstructured":"Code of Federal Regulations, title 45 \u00a7160.408(b)."},{"key":"362_CR123","doi-asserted-by":"publisher","first-page":"313","DOI":"10.1080\/1360086042000276762","volume":"18","author":"L Edwards","year":"2004","unstructured":"Edwards, L. Reconstructing consumer privacy protection on-line: a modest proposal. Int. Rev. Law Comput. Technol. 18, 313\u2013344 (2004).","journal-title":"Int. Rev. Law Comput. Technol."},{"key":"362_CR124","doi-asserted-by":"publisher","first-page":"366","DOI":"10.1055\/s-0040-1710392","volume":"11","author":"D McGraw","year":"2020","unstructured":"McGraw, D. & Petersen, C. From Commercialization to Accountability: Responsible Health Data Collection Use, and Disclosure for the 21st Century. Appl. Clin. Inform. 11, 366\u2013373 (2020).","journal-title":"Appl. Clin. Inform."},{"key":"362_CR125","doi-asserted-by":"publisher","first-page":"2072","DOI":"10.1056\/NEJMp1915298","volume":"382","author":"K Spector-Bagdady","year":"2020","unstructured":"Spector-Bagdady, K., Hutchinson, R., Kaleba, E. O. & Kheterpal, S. Sharing Health Data and Biospecimens with Industry - A Principle-Driven, Practical Approach. N. Engl. J. Med. 382, 2072\u20132075 (2020).","journal-title":"N. Engl. J. Med."}],"container-title":["npj Digital Medicine"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.nature.com\/articles\/s41746-020-00362-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41746-020-00362-8","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41746-020-00362-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,3]],"date-time":"2022-12-03T19:09:24Z","timestamp":1670094564000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.nature.com\/articles\/s41746-020-00362-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,4]]},"references-count":125,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2021,12]]}},"alternative-id":["362"],"URL":"https:\/\/doi.org\/10.1038\/s41746-020-00362-8","relation":{},"ISSN":["2398-6352"],"issn-type":[{"value":"2398-6352","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,1,4]]},"assertion":[{"value":"6 November 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"30 October 2020","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 January 2021","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"D.M. is employed by and has stock in Ciitizen, a personal health record platform () that helps individuals collect, use, and disclose their health information to meet their needs. Ciitizen is a Board member of the CARIN Alliance, which advances the ability of individuals to get copies of their health information. K.D.M. chairs the scientific advisory Board for Medal, Inc. Boston Children\u2019s Hospital receives corporate philanthropic support for K.D.M.\u2019s laboratory from SMART Advisory Committee members which include the American Medical Association, the BMJ Group, Eli Lilly and Company, First Databank, Google Cloud, Hospital Corporation of America, Microsoft, Optum, Premier Inc, and Quest Diagnostics.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"2"}}