Please DM me all criticisms privately. I am a fragile Victorian child living in a health policy professional's body.

TYSM.

Policy recommendations from the blog: require PETs like tokenization in high risk data sharing, move toward a unified federal de identification standard grounded in expert determination, and build PET expectations into grants, contracts, and procurement to make privacy operational.

We describe #tokenization as one practical PET. Direct identifiers stay behind the firewall and are converted to irreversible tokens, with site specific keys and bilateral approval for cross organization linkage. That enables record linkage for care and research *without* exposing identifiers / PII.

In the piece, we also focus on surveillance risk. Aggregated health data can be repurposed in ways that feel deeply intrusive, including underwriting, employment/hiring, or even legal proceedings. Privacy by design has to be engineered into technical infrastructure, not left to notice and consent.

One core issue we highlight is the HIPAA gap. HIPAA protects data held by covered entities and business associates. Once data moves to third party apps, devices, or other non-HIPAA regulated entities, it often falls under weaker or fragmented rules, even for highly sensitive information.

##

What I'm grateful for on LinkedIn: www.linkedin.com/feed/update/...

IMHO, the webinar offers one of the most comprehensive overviews--including challenges & opportunities from policy, operational, AND technical perspectives--of the health data privacy and consent landscape.

You can watch the recording at the the link: www.youtube.com/watch?v=gJd_...

This webinar recap is part of a weeklong series for #HealthDataWeek where we’re highlighting the power of health data to drive better care and outcomes for patients.

👇 Check out the key takeaways from the conversation I co-led with Kyle Probst on the evolving state policy landscape and what it means for the use of health data.

www.datavant.com/hipaa-privac...

10/ 📅 Register here: webinar.datavant.com/datavant/sta...

#HealthPrivacy #HealthAI #HealthcareCompliance #HealthIT #DataPrivacy #AIinHealthcare #RegulatoryCompliance #HealthPolicy

9/ For all of my tired and overused self-deprecation, it’s a serious topic that deserves serious attention. I hope you can join us.
#HealthPolicy #DataPrivacy

8/ 🧭 Practical strategies for tracking and responding to a rapidly evolving landscape
#RegulatoryCompliance #HealthPrivacy

7/ 📣 Best practices for communicating state-level changes to staff, leadership, and customers
#HealthcareCompliance #HealthIT

6/ 🏛️ Topics to monitor across states: AI, sensitive data segmentation, record retrieval pricing, and consumer privacy
#HealthPolicy #AIinHealthcare

5/ ❓ Common areas of uncertainty—like how states define “health data” and treat de-identified data
#HealthIT #DataPrivacy

4/ 🔐 How emerging privacy laws impact health data both within and beyond HIPAA
#HealthPrivacy #RegulatoryCompliance

3/ 📜 Key state legislative trends, including consumer privacy laws and efforts to regulate AI in healthcare
#HealthAI #AIinHealthcare

2/ If you want to understand how state legislatures are reshaping the future of health data privacy (and can tolerate me getting a smidge too excited about policy), join me and my much more qualified colleague Kyle Probst for a webinar on:
#DataPrivacy #HealthcareCompliance