Medical information is arguably the most personal and private sources of data about us. Because we believe vehemently in patient ownership of personal health data, and because we value confidentiality and security when it comes to collection or sharing of personal health data, yesterday, Shenna and I went before Maine's Health Information Steering Committeeo to provide public comment on the Maine Statewide Health Information Exchange Strategic and Operational Plans

Read our testimony and check out the Plan.

Make no mistake about it - for the over 50% of Maine patients enrolled in Maine's Health Information Exchange, the interest is great.

A Health Information Exchange (or HIE), like HealthInfoNet, provides a system for electronically communicating and transferring individualized healthcare information across providers.

And while it’s true that technology can do great things, here at the ACLU of MAINE, we try not to forget the accompanying risks. And the electronic storage and transfer of highly personal health information is no exception. (Read more on our blog).

The anticipated benefits of an electronic health record exchange are reduced medical error, improved patient care and monetary savings through increased coordination and communication among providers. However, both doctors and patients worry that their personally identifiable medical data will not be protected.

This fear is valid.

The familial and professional ramifications of exposing sensitive health information could be devastating and, as we’ve learned, even highly protected databases can be breached (see, for example, the Veterans Administration database in 2006, or more locally, the 2008 breach at Hannaford’s).

While we appreciate efforts by the State and its designated health information exchange, Healthinfonet [HIN] to include consumer advocates, including the Maine Civil Liberties Union, in this process, we strongly recommend strengthening the State’s commitment to privacy, confidentiality and security in the Maine Statewide Health Information Exchange Strategic and Operation Plans [the Plan]. Privacy must be a higher priority in Maine’s electronic health information system, and the Plan must go further in demonstrating meaningful commitments to patient privacy.