Skip to main page content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Access keys NCBI Homepage MyNCBI Homepage Main Content Main Navigation
. 2017 Jan 15;4(1):94-132.
doi: 10.1093/jlb/lsw061. eCollection 2017 Apr.

Clinical genomics, big data, and electronic medical records: reconciling patient rights with research when privacy and science collide

Affiliations

Clinical genomics, big data, and electronic medical records: reconciling patient rights with research when privacy and science collide

Jennifer Kulynych et al. J Law Biosci. .

Abstract

Widespread use of medical records for research, without consent, attracts little scrutiny compared to biospecimen research, where concerns about genomic privacy prompted recent federal proposals to mandate consent. This paper explores an important consequence of the proliferation of electronic health records (EHRs) in this permissive atmosphere: with the advent of clinical gene sequencing, EHR-based secondary research poses genetic privacy risks akin to those of biospecimen research, yet regulators still permit researchers to call gene sequence data 'de-identified', removing such data from the protection of the federal Privacy Rule and federal human subjects regulations. Medical centers and other providers seeking to offer genomic 'personalized medicine' now confront the problem of governing the secondary use of clinical genomic data as privacy risks escalate. We argue that regulators should no longer permit HIPAA-covered entities to treat dense genomic data as de-identified health information. Even with this step, the Privacy Rule would still permit disclosure of clinical genomic data for research, without consent, under a data use agreement, so we also urge that providers give patients specific notice before disclosing clinical genomic data for research, permitting (where possible) some degree of choice and control. To aid providers who offer clinical gene sequencing, we suggest both general approaches and specific actions to reconcile patients' rights and interests with genomic research.

Keywords: HIPAA; big data; de-identification; electronic medical records; genomics; privacy; research.

PubMed Disclaimer

Figures

Figure 1.
Figure 1.
Comparison of computer rendered facial images predicted from genomic data to subject's actual photograph. Methodology described in Claes et al., Modeling 3D Facial Shape from DNA, 10 PLoS Genet (2014). Image provided by and used with the permission of Dr. Mark Shriver, Pennsylvania State University Department of Anthropology