{"id":10453,"date":"2013-12-18T18:40:31","date_gmt":"2013-12-18T23:40:31","guid":{"rendered":"http:\/\/www.poweryourpractice.com\/?p=10453"},"modified":"2025-07-01T11:30:31","modified_gmt":"2025-07-01T11:30:31","slug":"patient-data-ownership-debate","status":"publish","type":"post","link":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/","title":{"rendered":"Moving Beyond the Patient Data Ownership Debate"},"content":{"rendered":"

\u00a0In an era where electronic health records are permeating all aspects of clinical care, who really owns patient data is the question on everybody\u2019s mind. In reality, providers, patients, and health IT vendors<\/a> all have some \u2018justifiable\u2019 proprietorship over health information.\u00a0<\/span><\/p>\n

But who has the final say when it comes to the extremely private information patients entrust to their doctors?\u00a0<\/span><\/p>\n

All three have a reasonable stake, so perhaps the more valuable question to focus on shouldn\u2019t be who owns the data, but how this data should be used. And then, what kind of privacy controls are in place to stop them from abusing it?<\/p>\n

Today we take a look at the highly contested issue of patient data and what providers can and can\u2019t do with health information.\u00a0<\/span><\/p>\n

Patient Data Use
\n<\/strong><\/h2>\n

Ethically speaking, EHRs should grant patients the greatest degree of ownership. With\u00a080% of Americans concerned about EHR privacy, it\u2019s no surprise patients sometimes want to control and claim ownership of the intimate information housed in their electronic records.\u00a0<\/span><\/p>\n

Likewise, hospitals, practices and other healthcare vendors may do the same, which creates conflicts between economic and personal value, as well as a struggle between professional and patient autonomy.\u00a0<\/span><\/p>\n

The notion of ownership is an inadequate concept for health information because each proprietor has a unique set of privileges that do not line up exactly with any conventional understanding of \u201cpossession.\u201d\u00a0\u00a0<\/span><\/p>\n

For example, while medical providers can obviously change the contents of an EHR, they are not allowed make any edits without maintaining a log of modifications. This is why most EHRs contain the functionality to \u201csign\u201d EHR data, which establishes a record of any changes made to patient information.\u00a0<\/span><\/p>\n

On the other hand, patients probably share the least amount of control over their health information data<\/a>. Even though they are allowed to comment on and amend health files, these can only be suggested updates to the clinical version of the patient record.\u00a0<\/span><\/p>\n

However, patients are allowed to access their electronic records at a moment\u2019s notice to view lab results or check treatment summary documents.\u00a0<\/span><\/p>\n

Ironically, it is neither the patient nor the provider who is closest to owning data. Health IT vendors have the most complete access to EHR information. But the situations in which they can access patient data are very limited.\u00a0<\/span><\/p>\n

Patient data can only be used by health IT vendors when it\u2019s been approved by the physician or for purposes of software updates and repairs.\u00a0<\/span><\/p>\n

Privacy Controls<\/strong><\/h2>\n

Data ownership is a security concern, so beginning with a set of security standards could keep entities from abusing patient information for personal gain.\u00a0<\/span><\/p>\n

The new HIPAA omnibus rule<\/a> tries to do that, to a certain extent. Under the new rule, health IT vendors become directly responsible for patient security in their systems.\u00a0This means practices can no longer be held accountable for vendor mistakes leading to security breaches.\u00a0<\/span><\/p>\n

The omnibus rule also sets limits on how personal health information (PHI) can be used for marketing purposes. Before vendors or providers can market a third-party service based on personal health information (PHI), or sell\/provide access to this data for payment, they must first get permission from each patient whose PHI will be used.\u00a0<\/span><\/p>\n

\u00a0<\/span>Providers, patients and vendors all need to work together to guarantee a smooth and secure flow of health information.\u00a0 If each segment follows the guidelines set forth by HHS, then true \u201cownership\u201d will be inconsequential in light of better, more transparent medical treatment plans.<\/p>\n","protected":false},"excerpt":{"rendered":"

\u00a0In an era where electronic health records are permeating all aspects of clinical care, who really owns patient data is the question on everybody\u2019s mind. In reality, providers, patients, and health IT vendors all have some \u2018justifiable\u2019 proprietorship over health information.\u00a0 But who has the final say when it comes to the extremely private information […]<\/p>\n","protected":false},"author":1,"featured_media":32787,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-10453","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-growth"],"yoast_head":"\nPatient Data Ownership Debate - CareCloud<\/title>\n<meta name=\"description\" content=\"Who owns patient data and how should it be used? We discuss highly contested issue of PHI and what providers can and can\u2019t do with health information possess.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Patient Data Ownership Debate - CareCloud\" \/>\n<meta property=\"og:description\" content=\"Who owns patient data and how should it be used? We discuss highly contested issue of PHI and what providers can and can\u2019t do with health information possess.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/\" \/>\n<meta property=\"og:site_name\" content=\"Continuum\" \/>\n<meta property=\"article:published_time\" content=\"2013-12-18T23:40:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-01T11:30:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/carecloud.com\/continuum\/wp-content\/uploads\/2015\/10\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png\" \/>\n\t<meta property=\"og:image:width\" content=\"400\" \/>\n\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"cc_continuum\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"cc_continuum\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/\"},\"author\":{\"name\":\"cc_continuum\",\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/#\\\/schema\\\/person\\\/6af17e75a684cc5cd23741e014351348\"},\"headline\":\"Moving Beyond the Patient Data Ownership Debate\",\"datePublished\":\"2013-12-18T23:40:31+00:00\",\"dateModified\":\"2025-07-01T11:30:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/\"},\"wordCount\":590,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/wp-content\\\/uploads\\\/2015\\\/10\\\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png\",\"articleSection\":[\"Growth\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/\",\"url\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/\",\"name\":\"Patient Data Ownership Debate - CareCloud\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/wp-content\\\/uploads\\\/2015\\\/10\\\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png\",\"datePublished\":\"2013-12-18T23:40:31+00:00\",\"dateModified\":\"2025-07-01T11:30:31+00:00\",\"description\":\"Who owns patient data and how should it be used? We discuss highly contested issue of PHI and what providers can and can\u2019t do with health information possess.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/#primaryimage\",\"url\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/wp-content\\\/uploads\\\/2015\\\/10\\\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png\",\"contentUrl\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/wp-content\\\/uploads\\\/2015\\\/10\\\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png\",\"width\":400,\"height\":350},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/patient-data-ownership-debate\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Moving Beyond the Patient Data Ownership Debate\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/#website\",\"url\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/\",\"name\":\"Continuum\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/#organization\",\"name\":\"Continuum\",\"url\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/cc-logo-header-2021-1-2.png\",\"contentUrl\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/cc-logo-header-2021-1-2.png\",\"width\":218,\"height\":57,\"caption\":\"Continuum\"},\"image\":{\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/carecloud.com\\\/continuum\\\/#\\\/schema\\\/person\\\/6af17e75a684cc5cd23741e014351348\",\"name\":\"cc_continuum\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8b6d796be6337a9688b6e065532f1be27bf69a98f06ddc7a6dda2c9cbbcf4078?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8b6d796be6337a9688b6e065532f1be27bf69a98f06ddc7a6dda2c9cbbcf4078?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8b6d796be6337a9688b6e065532f1be27bf69a98f06ddc7a6dda2c9cbbcf4078?s=96&d=mm&r=g\",\"caption\":\"cc_continuum\"},\"sameAs\":[\"https:\\\/\\\/carecloud.com\\\/continuum\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Patient Data Ownership Debate - CareCloud","description":"Who owns patient data and how should it be used? We discuss highly contested issue of PHI and what providers can and can\u2019t do with health information possess.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/","og_locale":"en_US","og_type":"article","og_title":"Patient Data Ownership Debate - CareCloud","og_description":"Who owns patient data and how should it be used? We discuss highly contested issue of PHI and what providers can and can\u2019t do with health information possess.","og_url":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/","og_site_name":"Continuum","article_published_time":"2013-12-18T23:40:31+00:00","article_modified_time":"2025-07-01T11:30:31+00:00","og_image":[{"width":400,"height":350,"url":"https:\/\/carecloud.com\/continuum\/wp-content\/uploads\/2015\/10\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png","type":"image\/png"}],"author":"cc_continuum","twitter_card":"summary_large_image","twitter_misc":{"Written by":"cc_continuum","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/#article","isPartOf":{"@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/"},"author":{"name":"cc_continuum","@id":"https:\/\/carecloud.com\/continuum\/#\/schema\/person\/6af17e75a684cc5cd23741e014351348"},"headline":"Moving Beyond the Patient Data Ownership Debate","datePublished":"2013-12-18T23:40:31+00:00","dateModified":"2025-07-01T11:30:31+00:00","mainEntityOfPage":{"@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/"},"wordCount":590,"commentCount":0,"publisher":{"@id":"https:\/\/carecloud.com\/continuum\/#organization"},"image":{"@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/#primaryimage"},"thumbnailUrl":"https:\/\/carecloud.com\/continuum\/wp-content\/uploads\/2015\/10\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png","articleSection":["Growth"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/","url":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/","name":"Patient Data Ownership Debate - CareCloud","isPartOf":{"@id":"https:\/\/carecloud.com\/continuum\/#website"},"primaryImageOfPage":{"@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/#primaryimage"},"image":{"@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/#primaryimage"},"thumbnailUrl":"https:\/\/carecloud.com\/continuum\/wp-content\/uploads\/2015\/10\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png","datePublished":"2013-12-18T23:40:31+00:00","dateModified":"2025-07-01T11:30:31+00:00","description":"Who owns patient data and how should it be used? We discuss highly contested issue of PHI and what providers can and can\u2019t do with health information possess.","breadcrumb":{"@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/#primaryimage","url":"https:\/\/carecloud.com\/continuum\/wp-content\/uploads\/2015\/10\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png","contentUrl":"https:\/\/carecloud.com\/continuum\/wp-content\/uploads\/2015\/10\/dummy-2-paigl6zusafxfmk55j3mhrce0nfw5zrnw9chmopqcs.png","width":400,"height":350},{"@type":"BreadcrumbList","@id":"https:\/\/carecloud.com\/continuum\/patient-data-ownership-debate\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/carecloud.com\/continuum\/"},{"@type":"ListItem","position":2,"name":"Moving Beyond the Patient Data Ownership Debate"}]},{"@type":"WebSite","@id":"https:\/\/carecloud.com\/continuum\/#website","url":"https:\/\/carecloud.com\/continuum\/","name":"Continuum","description":"","publisher":{"@id":"https:\/\/carecloud.com\/continuum\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/carecloud.com\/continuum\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/carecloud.com\/continuum\/#organization","name":"Continuum","url":"https:\/\/carecloud.com\/continuum\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/carecloud.com\/continuum\/#\/schema\/logo\/image\/","url":"https:\/\/carecloud.com\/continuum\/wp-content\/uploads\/2025\/03\/cc-logo-header-2021-1-2.png","contentUrl":"https:\/\/carecloud.com\/continuum\/wp-content\/uploads\/2025\/03\/cc-logo-header-2021-1-2.png","width":218,"height":57,"caption":"Continuum"},"image":{"@id":"https:\/\/carecloud.com\/continuum\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/carecloud.com\/continuum\/#\/schema\/person\/6af17e75a684cc5cd23741e014351348","name":"cc_continuum","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/8b6d796be6337a9688b6e065532f1be27bf69a98f06ddc7a6dda2c9cbbcf4078?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8b6d796be6337a9688b6e065532f1be27bf69a98f06ddc7a6dda2c9cbbcf4078?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8b6d796be6337a9688b6e065532f1be27bf69a98f06ddc7a6dda2c9cbbcf4078?s=96&d=mm&r=g","caption":"cc_continuum"},"sameAs":["https:\/\/carecloud.com\/continuum"]}]}},"_links":{"self":[{"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/posts\/10453","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/comments?post=10453"}],"version-history":[{"count":1,"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/posts\/10453\/revisions"}],"predecessor-version":[{"id":42729,"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/posts\/10453\/revisions\/42729"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/media\/32787"}],"wp:attachment":[{"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/media?parent=10453"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/categories?post=10453"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/carecloud.com\/continuum\/wp-json\/wp\/v2\/tags?post=10453"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}