The Costs and Rewards of Patient Data in the New Era of Telemedicine

12 April 2022 Health Care Law Today Blog
Author(s): Aaron T. Maguregui

This article originally appeared in Entrepreneur and is republished here with permission.

The promise (and peril) of actionable and monetizable patient data in digital health has never been higher.

On the one hand, the overnight acceptance and adoption of telemedicine during the pandemic turned what had been a niche into a juggernaut, and with it transformed millions of valuable patient interactions and disclosures into searchable, actionable intelligence that can be mined.

On the other hand, patient health data is notably different from other forms of online information. Patient data is protected in ways that, say, cursor pauses, scrolls or clicks on social media browsers are not. Following the growing frustration that federal lawmakers have shown with Big Tech’s use of consumer data, the government is poised to make big moves to sanction improper uses of patient data.

Therein lies both the problem and the potential. The waters in which rapidly growing direct-to-consumer or other online health companies now find themselves will likely get murkier from here.

The problems are easier to spot. Mostly because consumers, lawmakers and journalists have been spotting them for years now.

A closer look at the burgeoning world of online genetic testing companies revealed that health data collected on patients and a patient's family was often shared in ways that may unnecessarily compromise consumer privacy. A similar report on dieting apps revealed that many shared personal details on medical history and mental health with third parties.

HIPAA Compliance is an Imperative

The problems get most of the headlines. It's the promise that is harder to find, in part because it rarely makes news. That promise begins with handling sensitive information in a way that's HIPAA compliant. Those are table stakes. No company, big or small, should consider itself above that standard. After all, the data concerns the most important asset of these companies: their customer base.

Once that barrier is cleared, however, the challenge changes. Presuming a company follows regulatory mandates, the goal is to differentiate every person coming to them online and, also in a compliant fashion, follow the activity that allows them to improve service by increasing the quality of care while lowering costs.

This is, of course, the ultimate goal for health care providers. But it feels more attainable online, where we, as patients and consumers, increasingly spend the majority of time and increasingly divulge the most important information in our and our family's lives.

How to obtain visibility to that vital information is another challenge. Perhaps an absolute privacy policy that may aggravate marketers or anyone focused on user experience could work. The consequences are only likely to increase.

The complexities and ironies in this space are expanding as fast as the field itself. And they're only going to become more acute as the pandemic hopefully winds down — and with it, the flexibility afforded by the Department of Health and Human Services’ Office for Civil Rights to telemedicine companies found to be accidentally violating HIPAA.

Don't mistake those caveats for pessimism. The push toward direct-to-consumer health care and telemedicine is and will remain a potential landmark event for patient care and the bottom lines of companies that can execute. The elusive goal of end-to-end data, starting when a patient is merely a curious consumer and extending far into the horizon, is more attainable now than it's ever been before.

Figuring out how to get there will always be the hardest question to answer. But the destination is at least within sight.

This blog is made available by Foley & Lardner LLP (“Foley” or “the Firm”) for informational purposes only. It is not meant to convey the Firm’s legal position on behalf of any client, nor is it intended to convey specific legal advice. Any opinions expressed in this article do not necessarily reflect the views of Foley & Lardner LLP, its partners, or its clients. Accordingly, do not act upon this information without seeking counsel from a licensed attorney. This blog is not intended to create, and receipt of it does not constitute, an attorney-client relationship. Communicating with Foley through this website by email, blog post, or otherwise, does not create an attorney-client relationship for any legal matter. Therefore, any communication or material you transmit to Foley through this blog, whether by email, blog post or any other manner, will not be treated as confidential or proprietary. The information on this blog is published “AS IS” and is not guaranteed to be complete, accurate, and or up-to-date. Foley makes no representations or warranties of any kind, express or implied, as to the operation or content of the site. Foley expressly disclaims all other guarantees, warranties, conditions and representations of any kind, either express or implied, whether arising under any statute, law, commercial use or otherwise, including implied warranties of merchantability, fitness for a particular purpose, title and non-infringement. In no event shall Foley or any of its partners, officers, employees, agents or affiliates be liable, directly or indirectly, under any theory of law (contract, tort, negligence or otherwise), to you or anyone else, for any claims, losses or damages, direct, indirect special, incidental, punitive or consequential, resulting from or occasioned by the creation, use of or reliance on this site (including information and other content) or any third party websites or the information, resources or material accessed through any such websites. In some jurisdictions, the contents of this blog may be considered Attorney Advertising. If applicable, please note that prior results do not guarantee a similar outcome. Photographs are for dramatization purposes only and may include models. Likenesses do not necessarily imply current client, partnership or employee status.