A person seeking medical help already has something difficult to negotiate: how much of themselves to disclose. There may be an embarrassment to get past, a fear they have barely admitted to themselves, something they would rather their family did not know. Getting help can depend on telling someone.
That makes the care of those disclosures part of the care itself.
The HIPAA Journal’s reporting on trends in healthcare data breaches brings that responsibility into view. Without verified figures from the report, there is no basis here for declaring how quickly the problem is growing or which organisations are most exposed. The underlying human difficulty is worth considering nevertheless: information given because someone needs treatment is information they may have very little practical freedom to withhold.
We often talk about privacy as though everyone were making a purchase, free to read the terms and take their business elsewhere. That is a poor description of someone who is frightened, in pain or trying to arrange care for a parent. A signature on a form cannot carry the whole weight of what follows.
There is a complication. Medical information needs to move. Someone treating us may need to know what another professional has found, and delays can matter. Keeping everything inaccessible would hardly serve the person whose privacy we wanted to protect.
Yet necessary access does not make every use necessary. Nor does the convenience of a system settle what the people within it should be expected to surrender.
For those receiving care, asking who can see a record, and how to correct it, is reasonable. But we should resist making the anxious patient the final line of defence for an arrangement they did not design and cannot inspect.
The greater responsibility belongs with those who collect and hold the information. They need to be able to explain their choices in language a patient can understand. If the explanation requires someone to become a technical specialist before they can judge what is happening to their own medical history, the burden has already landed in the wrong place.