Law Commons^™

Improving Hipaa Enforcement And Protecting Patient Privacy In A Digital Healthcare Environment, Roger Hsieh

Loyola University Chicago Law Journal

Electronic medical records (“EMRs”) have helped healthcare organizations improve patient care, but EMRs are susceptible to exposing the confidentiality of patients’ medical records to identity thieves and members of the general public. The federal enforcement of patient privacy law—notably the Health Insurance Portability and Accountability Act (“HIPAA”), which was designed to deter and punish breaches of patient privacy—has failed to keep pace with new privacy risks posed by healthcare technology. Although federal legislation now allows state Attorneys General to file suit under HIPAA, for reasons explained in this Article, they too will not enforce HIPAA effectively. Because institutional enforcement of …