PrivacySignal
Healthcare

Health data privacy protections must extend beyond individuals, microbiome researchers argue

Medical Xpress · · International · Healthcare Privacy

Microbiome researchers are calling for health data privacy frameworks to go beyond protecting individual patients, arguing that biological data from one person can reveal sensitive information about family members, communities, or populations who never consented to share anything.

Why this matters: Most privacy law is built around one person, one record. Microbiome data breaks that model. Your gut bacteria can carry signals about your relatives, your household, even your ethnic background. That means someone else's data can expose you, and you had no say in it. Current frameworks were not designed for that. If researchers are flagging this, it means the gap is real and it is not being addressed yet.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Healthcare
HIPAA Journal · · US Federal

Healthcare Providers Discover Unauthorized PHI Disclosures to AI Tools

At least two healthcare providers have reported data privacy incidents in which patient health information was uploaded to AI tools without authorization. The disclosures were announced separately and involve protected health information shared outside approved channels.

Who should care: Healthcare professionals · Privacy officers · Compliance · AI governance · Lawyers · Administrators · General readers · Policy

#healthcare#ai-governance#ai#privacy Read original →
Healthcare
C CBC · · International

Critics warn of health data privacy concerns as Ottawa ramps up AI strategy

Canada's federal government is advancing its artificial intelligence strategy, and critics are raising concerns about how health data may be collected, used, or shared in that process.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · AI governance · Policy

#healthcare#ai#privacy Read original →
Healthcare
The Guardian — Tech · · International

British people don’t trust Palantir – it’s not too late to reverse the NHS’s dependence on it | Ben Coleman

A Labour MP and health committee member is calling on UK ministers to let Palantir's £330 million NHS data platform contract expire next March rather than renew it, arguing the NHS should not remain dependent on a US tech company for control of patient data.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
The Record · · International

Medical services company settles with 4 states over 2023 hack of sensitive patient records

Perry Johnson Companies, a Nevada-based medical services firm, has reached a settlement with attorneys general in Connecticut, New Jersey, New York, and Michigan over a 2023 breach that exposed sensitive patient records held by its medical transcription, coding, and imaging subsidiaries.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Security Incident at EHR Vendor Affects Patients of New York Counselling Practices

A security incident at an electronic health records vendor has led to the exposure of personal and health information belonging to patients of Hispanic Counseling Center and Brooklyn Counseling Services, two New York-based mental health practices. Both organizations have begun notifying affected patients.

Who should care: Healthcare professionals · Privacy officers · Compliance

#healthcare Read original →
Healthcare
HIPAA Journal · · US Federal

Judge Certifies Classes in Meta Platforms Healthcare Data Privacy Litigation

A federal judge has certified plaintiff classes in consolidated litigation against Meta over allegations that the company collected health-related data through its tracking tools embedded on healthcare websites. Class certification is a significant procedural step that allows the case to proceed on behalf of a large group of affected individuals.

Who should care: Healthcare professionals · Privacy officers · Compliance · General readers · Policy

#healthcare#privacy Read original →