Why HIPAA doesn’t always protect abortion information

A journalist reviews close to a crowd of abortion-rights activists in entrance of the US Supreme Court docket after the Court docket introduced a ruling within the Dobbs v Jackson Ladies’s Well being Group case on June 24, 2022 in Washington, DC.

Nathan Howard | Getty Photos

The Supreme Court docket’s resolution to overturn Roe v. Wade final month raised issues that information collected by tech corporations and clinics could possibly be used to criminally cost individuals who search abortions or expertise being pregnant loss.

Though the federal legislation often called the Well being Insurance coverage Portability and Accountability Act, or HIPAA, protects affected person privateness, health-care suppliers can nonetheless be compelled to reveal affected person information beneath particular circumstances, reminiscent of a subpoena or a court docket order.

There’s additionally loads of information that buyers generate of their on a regular basis lives that may not be thought of topic to HIPAA and could possibly be used as proof in court docket in opposition to individuals who allegedly sought abortions that violate state legal guidelines or in opposition to their suppliers. Authorized consultants be aware that search historical past, textual content messages, location information, and period-tracker apps might all doubtlessly be utilized in court docket and in some circumstances have already got been.

Whereas some expertise corporations, reminiscent of Google and the menstrual-cycle monitoring app Flo, have introduced steps to raised shield their customers’ reproductive health-related information, the safety of customers’ information largely stays on the whims of the companies they use within the absence of federal digital privateness legislation.

Nonetheless, some states, together with California and Illinois, have already got digital privateness legal guidelines that may assist safe client information extra usually. Extra state-level proposals purpose to guard reproductive well being information specifically, reminiscent of Connecticut’s Reproductive Freedom Protection Act. That invoice might assist fill in some gaps in HIPAA whereas legislators in Congress proceed to push for nationwide privateness protections.

Right here is an outline of some present legal guidelines and proposals that might shield the knowledge of pregnant individuals each on and off the web.

Well being Insurance coverage Portability and Accountability Act (HIPAA)

What it does: HIPAA is a federal affected person privateness legislation handed in 1996 that prohibits health-care suppliers and insurers from disclosing affected person info. It’s overseen by the Workplace for Civil Rights inside the Division of Well being and Human Companies.

Usually, HIPAA doesn’t permit abortion clinics or health-care suppliers to disclose to legislation enforcement officers whether or not an individual has had an abortion. If the state legislation prohibits abortion however doesn’t “expressly require” individuals to report it, an abortion clinic that reviews affected person info to others could be in violation of HIPAA.

What info is not protected beneath HIPAA: HIPAA can not resolve all privateness issues associated to reproductive rights. In response to latest steerage revealed by HHS, the legislation permits an abortion clinic to reveal who acquired an abortion in response to a court docket order or summons, which might turn into much more frequent within the post-Roe period.

HIPAA solely applies to sure forms of companies and professionals. It may possibly regulate solely well being insurers, health-care suppliers, information clearinghouses and enterprise associates.

HIPAA cannot shield some affected person info gathered by anti-abortion organizations, reminiscent of so-called disaster being pregnant facilities, that try to draw and redirect abortion-seekers. There are about 2,500 facilities throughout the nation, based on Disaster Being pregnant Middle Map, a undertaking led by lecturers on the College of Georgia.

My Physique, My Knowledge Act

What it could do: The My Physique, My Knowledge Act is a federal privateness proposal that targets corporations that acquire reproductive well being info. It might require corporations to get consumer consent earlier than amassing, retaining or disclosing reproductive well being information until the info is “strictly wanted” to offer a service or product the consumer has requested. It might additionally require corporations to delete customers’ info upon request. The Federal Commerce Fee would have the ability to implement the rules.

What gaps it could fill: Whereas HIPAA primarily covers health-care suppliers, this invoice focuses on regulating expertise corporations and apps that acquire reproductive well being information.

Rep. Sara Jacobs, D-Calif., a co-sponsor of the invoice, advised The Washington Put up that because it stands, with out such a legislation, it is attainable for “a right-wing nonprofit group [to] purchase all of this information from the assorted period-tracking apps” and pinpoint each consumer “who needs to be pregnant proper now however is just not.”

How probably is it to go? Jacobs appeared to concede in her interview with the Put up that the invoice is unlikely to turn into federal legislation, given the Republican opposition to increasing abortion protections. However, she mentioned, the federal invoice might encourage and be a mannequin for state-level actions.

Well being and Location Knowledge Safety Act

What it could do: This federal invoice, launched by Sen. Elizabeth Warren, D-Mass., and different Democrats in June, would ban information brokers from promoting location and health-care information.

The invoice would give the FTC energy to implement the requirements round promoting well being and site info. It might additionally give state attorneys common and people the ability to sue over alleged violations. The invoice additionally guarantees $1 billion in funding to the FTC over the following decade to hold out its work, together with the enforcement of this legislation.

What gaps it could fill: Whereas the My Physique, My Knowledge Act primarily offers with the gathering of well being information, Warren’s invoice focuses on regulating the sale of location information. The proposal got here after Vice reported that information brokers reminiscent of SafeGraph have been promoting location information of people that visited abortion clinics.

How probably is it to go? The invoice would probably want some Republicans on board to have an opportunity at passing, which is a tall order given the celebration’s common opposition to increasing abortion protections.

State legal guidelines and proposals

Pennsylvania’s Safety of Pregnant People’ Info Act

What it could do: This invoice, launched in Could by Democratic state Rep. Mary Jo Daley, would prohibit so-called disaster being pregnant facilities from disclosing nonpublic well being info they’ve collected with out specific authorization.

What gaps it could fill: Current reviews have highlighted the info dangers concerned in visiting a disaster being pregnant middle. Some pregnant individuals searching for abortions do not realize the facilities might not provide abortion companies and as a substitute attempt to dissuade guests from ending their pregnancies.

Federal lawmakers have known as on Google to make it clearer to customers that such facilities, which regularly have web sites designed to appear to be these of abortion clinics, don’t provide abortions. Since these facilities are sometimes not licensed medical suppliers and provide free companies, they aren’t certain to federal well being privateness legal guidelines, Time reported, based mostly on conversations with privateness legal professionals.

The Pennsylvania invoice might make it tougher for these anti-abortion facilities to reveal info that in any other case falls on this unprotected space.

How efficient would it not be? The invoice nonetheless permits clinics to reveal nonpublic well being info with out authorization if the clinic is required to adjust to nationwide, state or native legal guidelines, or a court docket order or investigation. This might doubtlessly undermine the effectiveness of the protections.

Sanctuary state legal guidelines and proposals

What they’d do: Most of these payments, handed or launched in a number of Democratic stronghold states, would make it simpler for pregnant individuals searching for abortions exterior of their very own states to take action by safeguarding their info inside so-called sanctuary states. Meaning if an individual in Texas seeks a authorized abortion in Connecticut, for instance, it could possibly be tougher for Texas authorities to acquire info on that process.

The laws differs barely from state to state. Usually, a majority of these payments search to forestall sure companies or suppliers of their states from having at hand over delicate reproductive well being info to a different state searching for to prosecute an alleged abortion beneath its personal legal guidelines.

Which states have them: Two such proposals which have already been signed into legislation by Democratic governors are Connecticut’s Reproductive Freedom Protection Act and New Jersey’s Meeting Invoice 3975 / Senate Invoice 2633.

Comparable payments have been launched in California, Massachusetts and New York.

What gaps they’d fill: As of July 7, 9 states have already outlawed abortion, and 4 states might quickly go legal guidelines to ban abortion, based on Politico. Many individuals in these states might select to obtain abortion companies in secure harbor states reminiscent of Connecticut whereas nonetheless dealing with authorized dangers of their house states.

Meaning such a laws might protect vacationers from states which have outlawed abortion from legal responsibility for receiving such companies in a state that has authorized abortion companies and safeguard legal guidelines.

How efficient they’d be? Whereas these legal guidelines will shield info on authorized procedures that occur within the states the place they exist, sufferers who reside in states with restrictive abortion legal guidelines will nonetheless should be aware of the place else their medical information could also be held.

“Think about that you’re in Alabama, and also you come to Connecticut and get an abortion, and then you definitely go see another physician in Alabama. We’re more and more in a world the place your medical document may sort of observe you again to Alabama, ” Carly Zubrzycki, a well being legislation professor on the College of Connecticut College of Regulation, advised the Verge.

Additionally, a number of the measures embrace sure exceptions that might permit info to be handed over. For instance, New Jersey’s legislation permits exceptions beneath legitimate court docket orders or in circumstances the place youngster or elder abuse is suspected in good religion. However within the latter case, it says reproductive health-care companies which are authorized in New Jersey shouldn’t be thought of abuse.

WATCH: Bipartisan lawmakers debate new framework for privateness laws

Sharing Is Caring:

Leave a Comment