Skip to main content
SpringerLink
Log in

The Internet and Electronic Transmission of Medical Records

  • Published:
Journal of Clinical Monitoring Aims and scope Submit manuscript

Abstract

Objective. To review, from a legal perspective, the potential for using the Internet for inter-institutional transfer of patient medical records. Methods. Basic issues and recent legislation that relate to protection of both medical data, and those transferring that data over public network systems is reviewed. Results. Many laws already in existence can be applied to Internet transmission, but questions of jurisdiction remain. Providing signatures on requests for information, which are in essence contracts, is a problem. Signatures must both prove the identity of the participants and provide for non-repudiation of the agreement. Cryptographic digital signatures appear secure and effective, but their use is difficult to implement. Simpler methods are fraught with risks, yet are more easily accomplished. The patient's rights of privacy must be balanced against the need for access by government, physician, or healthcare institutions to confidential information. In general, information holders must put forth reasonable efforts to keep information confidential. The development of acknowledged standards will provide guidance. Multiple laws provide some deterrence and hence some reassurance to healthcare institutions, for example, by criminalizing acts of electronic interception of patient records in transit. Conclusion. Some believe the expense of secure transfer of medical records by electronic means is a major obstacle; this is false: such transfers are now technologically quite easy. The greatest obstacle to electronic transfer of medical records at this point is the development of workable standards for signing agreements and protecting transmissions, but the perceived advantages will likely drive the necessary developments.

This is a preview of subscription content, log in via an institution to check access.

Access this article

Log in via an institution

Price excludes VAT (USA)
Tax calculation will be finalised during checkout.

Instant access to the full article PDF.

Institutional subscriptions

REFERENCES

  1. Derfler FJ Jr. PC magazine guide to linking LANs. Emeryville, California: Ziff-Davis Press, 1992: 163–182

    Google Scholar 

  2. Resuscitation Technologies, Inc. v. Continental Health Care Corp., 1997 U.S. Dist. Lexis 3523

  3. U.S. v. Robert Alan Thomas and Carleen Thomas, 74 F.3d 701 (6th Cir. 1996)

  4. Senate Bill 1360, Medical Records Confidentiality Act of 1995, 104th Congress

  5. Schneier B. Public-key algorithms, Chapter 12, pp. 273–296, Applied Cryptography. New York: John Wiley & Sons, c. 1994

    Google Scholar 

  6. Florida Board of bar Examiners Re: Applicant, 443 S0.2d 71,75 (Fla. 1984)

  7. Waters RJ. Shotwell Lynn Frendt, Licensure laws pose interstate tug-of-war. http://www.arentfox.com/tele-med/articles/interslicense.html

  8. Federal register: August 9, 1996 (Volume 61, Number 155), Notices, page 41640

  9. Senate Bill 385, The Comprehensive Telehealth Act of 1977, 105th Congress, available through http://thomas.loc.gov/home/c105query.html

  10. Kutten AJ, Reams BD, Strehle AE. Electronic contracting law EDI in business transactions. New York: Clarke Boardman Callaghan, 1993

    Google Scholar 

  11. Griswald v. Connecticut, 381 U.S. 479 (1965)

  12. Whalen v. Roe,429U.S. 589 (1977)

  13. United States v. Westinghouse Elec. Corp., 638 F. 2d 570 (3rd Cir. 1980)

  14. Murray JP. New concepts of confidentiality in family practice. J Fam Pract 1986; 23: 229–232

    Google Scholar 

  15. FLA. STAT. ch. 445. 241 (2) (1995)

  16. Olmstead v. United States, 277U.S. 438, 478 (1928) (Brandeis, J., dissenting); Cooley,Torts, 2d ed. 1888, 29

  17. 20 ILCS 301/30-5 (1994); Mass. Ann. Laws ch. 111B, §11 (1994); Minn. Stat. §144.651 (1994)

  18. Alaska Stat. §47.37.210 (1994); C.R.S. 25-1-312 (1994); Conn. Gen. Stat. §17a-630 (1992); 16 Del. C. §2214 (1994); HRS §334B-1 (1994); Idaho Code §39-308 (1994); Iowa Code §125.15 (1993); K.S.A. §65-4050 (1993); 5 M.R.S. §20047 (1994); Md. Health-General Code Ann. §8-601 (1994); Nev. Rev. Stat. Ann. §458.280 (1993); N.M. Stat. Ann. §43-2-11 (1994); ORC Ann. §3793.14 (1994); 71 P.S. §1690.108 (1994); Tenn. Code Ann. §68-24-508 (1994); Rev. Code Wash. (ARCW) §70.96A.150 (1994)

  19. Code of Ala. §22-11A-22 (1994); Code of Ala. §34-26-2 (1994); Alaska Stat. §47.30.590 (1994); C.R.S. 27-10-120.5 (1994); Conn. Gen. Stat. §17a-451 (1992); Fla. Stat. §394.459 (1994); 740 ILCS 110/5 (1994); Burns Ind. Code Ann. x16-39-2-3 (1994); K.S.A. §59-2929 (1993); §630.110 R.S.Mo. (1993); Title XL; §630.140 R.S.Mo. (1993), Title XL; NY CLS Men Hyg §23.05 (1994); NY CLS Men Hyg §33.13 (1994); N.C. Gen. Stat. §122C-53 (1994); ORC Ann. §5122.31; 24 L.P.R.A. §5003 (1991); R.I. Gen. Laws §40.1-4-13 (1994); R.I. Gen. Laws §40.1-5-5 (1994);Tenn. Code Ann. §33-3-104 (1994); Tex. Health & Safety Code §611.002 (1995); Utah Code Ann. §62A-12-247 (1994); Rev. Code Wash. (ACRW) §71.05.630 (1994);W.Va. Code §27-3-1 (1994)

  20. Code of Ala. §22-21-30 (1994); Ark. Stat. Ann. §20-13-806 (1994); Fla. Stat. §395.3025 (1994); Fla. Stat. §395.0193 (1994); Fla. Stat. §400.605 (1994); Idaho Code §39-1392b (1994); Miss. Code Ann. §41-9-67 (1993); Wyo. Stat. §35-2-601 (1994)

  21. Cal. Civ. Code §56.11 (1995); La. R.S. 37: 1278.1 (1993); 5 M.R.S. §19203-D (1994); MSA §14.15 (5131) & (6112) (1993); R.R.S. Neb. §81-668 (1994); N.C. Gen. Stat. §130A-12 (1994); R.I. Gen. Laws §5-37.3-4 (1994); S.C. Code Ann. §44-6-180 (1993); S.C. Code Ann. §44-115-10 (1993); Tenn. Code Ann. §63-2-101 (1994);Wis. Stat. §146.82 (1993)

  22. 410 ILCS 70/6.1 (1994)

  23. C.R.S. 25-1-122 (1994); Fla. Stat. §381.004 (1994); Fla. Stat. §384.22 (1994); 410 ILCS 310/7 (1994); La. R.S. 40: 1300.14 (1993); 5 M.R.S. §19203 (1994); §191.656 R.S.Mo. (1993); N.J. Stat. §26: 5C-10 (1993); N.D. Cent. Code, §23-07.5-02 (1993); 35 P.S. §7606 (1994); Rev. Code Wash. (ARCW) §70.24.105 (1994)

  24. U.S.C. §7332; 42 U.S.C. §242 (a) (1994); 42 U.S.C. §254 (c) (1994); 42 U.S.C. §290dd-2 (1994)

  25. Florida Board of Bar Examiners Re: Applicant, 443 So.2d 71,75 (Fla. 1984)

  26. Frawley KA. The computerized patient record and con-fidentiality. In Confidence (Newsletter of the American Health Information Managemnt Association), March 1993; 1(2): 1–3

    Google Scholar 

  27. Department of Defense, US Government. Automated information systems security program handbook. IRM Manual, Part 6 (also known as the ORANGE BOOK). Washington DC: Government Printing Office, 1989

    Google Scholar 

  28. Dallas Semiconductor: http://www.dalsemi.com/ Prodinfo/AutoID/index.html

  29. Phillips K. In-your-face security: Innovative TrueFace CyberWatch uses a neural network approach to recognize authorized users and reject the rest. PC-WEEK. March 26, 1997. http://www.pcweek.com/reviews/0324/24face.html

  30. 47 U.S.C. §605 (as amended in 1988)

  31. 18 U.S.C. §§2510 et seq (1994)

  32. 18 U.S.C. §1030 (2)(A) & (B) (1994)

  33. United States v. Morris, 928 F2d 504 (2d Cir. 1991)

  34. Code of Ala. 13A-8-100 (1994), Title 13A, Criminal Code, Ch. 8, Offses Involving Theft, Art. 5, Alabama Computer Crime Act, 13A-8-100; Ark. Stat. 5-41-101 (1994), Title 5, Criminal Offenses, Subtitle 4, O¡enses Against Property, Ch. 41, Computer-Related Crimes, 5-41-101; C.R.S. 18-5.5-101 (1994), Title 18, Criminal Code, Art 5.5, Computer Crime, 18-5.5-101; Fla. Stat. 815.01 (1994), Title XLVI, Crimes, Ch. 815 Computer-Related Crimes, 815.01; HRS 708-890 (1994); Div. 5, Crimes and Criminal Proceedings,Title 37, Hawaii Penal Code, Ch. 708, Offenses Against Property Rights, [Part IX], Computer Crime, 708-890; Idaho Code 18-2201 (1994), Penal Code, Title 18, Crimes and Punishments, Ch. 22, Computer Crime, 18-2201; 720 ILCS 5/16D-1 (1994), Ch. 720, Criminal Offenses, Criminal Code, Criminal Code of 1961, Title III, Specific Offenses, Part C, Offenses Directed Against Property, Art. 16D, Computer Crime, 720 ILCS5/16D-1 (Illinois); Iowa Code 716A.1 (1993), Title XVI, Criminal Law and Procedure, Subtitle 1, Crime Control and Criminal Acts, Ch. 716A, Computer Crime, 716A.1; La. R.S. 14: 73.1 (1993), Loui-siana Revised Statutes, Title 14, Criminal Law, Ch. 1, Criminal Code, Part III, Offenses Against Property, Sub-part D, Computer Related Crime, 73.1; 17-A M.R.S. 431 (1994), Title 17-A, Maine Criminal Code, Part 2, Substantive Offenses, Ch. 18, Computer Crimes, 431; Miss. Code Ann. 97-45-1 (1993), Title 97 Crimes, Ch. 45, Computer Crimes, 97-45-1; RSA 638: 16 (1993), Title LXII, Criminal Code, Ch. 638, Fraud, Computer Crime, 638: 16 (New Hampshire); N.J. Stat. 2C: 20-23 (1993), Title 2C, The New Jersey Code of Criminal Justice, Subtitle 2, Definition of Specific Offenses, Part 2, Offences Against Property, Ch. 20,Theft and Related Offenses, II, Computer-Related Crimes, 2C: 20-23; N.M. Stat. Ann. 30-45-1 (1994), Ch. 30, Criminal Offenses, Art. 45, Computer Crimes, 30-45-1; N.C. Gen. Stat. 14-453 (1994), Ch. 14, Criminal Law, Subch. XI, General Police Regulations, Art. 60, Computer-Related Crime, 14-453; 21 Okl. St. 1951 (1994), Title 21, Crimes and Punish-ments, Part VII, Crimes Against Property, Ch. 70, Other Offenses Against Property Rights, Computer Crimes Act, 1951; R.I. Gen Laws 11-52-1 (1994), Title 11, Crim-inal Offenses, Ch. 52, Computer Crime, 11-52-1; S.C. Code Ann. 16-16-10 (1993), Title 16, Crimes and Of-fenses, Ch. 16, Computer Crime Act, 16-16-10; Tex. Penal Code 33.01 (1995), Penal Code, Title 7, O¡enses Against Property, Ch. 33, Computer Crimes, 33.01; Utah Code Ann. 76-6-701 (1994), Title 76, Criminal Code, Ch. 6, Offenses Against Property, Part 7. Computer Crimes, 76-6-701;Va. Code Ann. 18.2-152.1 (1994),Title 18.2, Crimes and Offenses Generally, Ch. 5, Crimes Against Property, Art. 7.1, Computer Crimes, 18.2-152.1; W. Va. Code 61-3C-1 (1994), Ch. 61, Crimes and Their Punishment, Art. 3C. West Virginia Computer Crime and Abuse Act, 61-3C-1;Wyo. Stat. 6-3-501 (1994),Title 6, Crimes and Offenses, Ch. 3, Offenses against Property, Art. 5, Computer Crimes, 6-3-501

  35. Ark. Stat. Ann. §5-41-104 (1994); Ind. Code Ann.@35-43-2-3 (1994); NY CLS Penal §156.10 (1994); Va. Code Ann. §18.2-152.4 (1994); Rev. Code Wash. (ARCW) §9A.52.110, 9A.52.120, 9A.52.130 (1994)

  36. http://www.cdt.org

  37. http://www.ahima.org

  38. http://www.eff.org

Download references

Author information

Authors and Affiliations

  1. Townsend and Townsend and Crew, University of Florida, USA

    Sam Campbell

  2. departments of Anesthesiology and, Medicine, University of Florida, USA

    Gordon L. Gibby

  3. College of Medicine, University of Florida, USA

    Susan Collingwood

Authors
  1. Sam Campbell
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Gordon L. Gibby
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Susan Collingwood
    View author publications

    You can also search for this author in PubMed Google Scholar

Rights and permissions

Reprints and permissions

About this article

Cite this article

Campbell, S., Gibby, G.L. & Collingwood, S. The Internet and Electronic Transmission of Medical Records. J Clin Monit Comput 13, 325–334 (1997). https://doi.org/10.1023/A:1007404806312

Download citation

  • Issue Date:

  • DOI: https://doi.org/10.1023/A:1007404806312

Search

Navigation