Development of computer-based patient record systems can afford a level of confidentiality control never before possible with a traditional paper health record. With a concerted commitment, including education and enactment of federal legislation, the benefit of computer-based patient record systems can be appreciated in the not too distant future. The right of privacy is a personal and fundamental right protected by the Constitution of the United States. Individuals have a right to privacy of their health information. Health care providers have an ethical and legal obligation to protect the confidentiality of all patient identifiable information.
Patients have the right to review the information contained in their health records.
Federal preemptive legislation should be enacted to address standard methodologies for the creation, authentication, retention, storage, access, disclosure and admissibility of computer-based patient information. This legislation should also define and impose penalties for unauthorized use or disclosure of patient information. Levels of access to computer-based patient records must be controlled through standardized computer security measures, business policies, procedures, access audit trails, penalties and user education. Standards governing access to patient data should be developed. These standards must include not only to whom and at what level access may be granted, but also must define the purposes for which the information may be used.