In The News...

In November 2007, on my humor blog, I posted an news article about how Microsoft had recently created HealthVault and other companies had done something similar.

I noted my concern at the top of the article: "Aren't these the people who invented 'Patch Tuesday'?".

To sum up what's most important from that article:

"From the consumer's point of view, Microsoft's HealthVault site is part filing cabinet, part library and part fax machine for an individual's or a family's medical records and notes.

The free site can store medical histories, immunization and other records from doctors' offices and hospital visits, including data from devices like heart monitors. It is also tied to a health information search engine the software maker launched last month.

Users can dole out access to different slices of their health data via e-mailed invitations to doctors, family members and other people as the need arises.

Microsoft has been kicking around the idea of a health site since at least 2000, when Chief Executive Steve Ballmer described a "health vault" in a speech to financial professionals in New York.

The software maker isn't the first to jump into the ring. Across the country, groups of providers are starting "regional health information organizations" to share data electronically.

Insurance providers and private companies market their own flavors of patient-controlled storehouses of records, and employers including Wal-Mart Stores Inc. offer such tools to workers.

Steve Case, co-founder of AOL, has launched Revolution Health, an information Web site that offers a records management tool for paying members, and Google Inc. has indicated it will launch its own service."

Now, we have this:
Health Data Storage Sites Might Not Be Secure

"The World Privacy Forum is warning consumers about the potential pitfalls of using newly popular services that consolidate personal health records - especially when they're kept by companies that are not subject to current federal regulations on privacy and security.

"Consumers need to know that not all (vendors) protect privacy in the same way," said Pam Dixon, executive director of the San Diego nonprofit group, which is issuing its report today. "Some can undermine consumer privacy in serious and unexpected ways."

To protect yourself, know your rights:

"-- Study privacy policies carefully. Don't use a vendor if it doesn't have one or if it's not readily available.

-- If a company says it is "HIPAA-compliant," that may not mean it's covered by the Health Insurance Portability and Accountability Act. Find out what your rights are from that vendor.

-- For more information on your rights under the Health Insurance Portability and Accountability Act, go to www.hhs.gov/ocr/hipaa.

-- Find the World Privacy Forum report at www.worldprivacyforum.org."

This is looking more and more like a medical identity theft train wreck waiting to happen. Unless and until the medical info people get their individual and collective acts together, I wouldn't sign up with anything online with respect to my medical records. YMMV!