Protect yourself!
I recently had to undergo major surgery at a Harvard teaching hospital in the Boston area. During the pre-op preparations, I was given a link to an online medical database (one not affiliated directly, as far as I could discern, with the hospital or with Harvard University) and told to enter my entire medical history there. Like a good little doobie, I visited the site — but after reading the organization’s terms of service and privacy policy, I left without leaving so much as a comma.
Medical organizations are, in my opinion, a long way from readiness to handle information as private, and as deeply personal, as our own medical data. If retailers whose online revenues depend upon the trust of the their customers can’t always manage to keep the credit-card information of those customers perfectly secure, how can we expect better management of even more-personal information by organizations for whom online “privacy” and “security” are only theoretical constructs?
Me, I’m keeping my medical data to myself. At least, I will do that to whatever extent is not pre-empted by the growing state and federal rush to mandate electronic record-keeping of individuals’ medical information.
(Noted privacy advocate Lauren Weinstein addresses this very issue in a newsletter sent today, archived at http://lauren.vortex.com/archive/000497.html.)