Islamic Jurisprudence on Harm Versus Harm Scenarios in Medical Confidentiality

Although medical confidentiality is widely recognized as an essential principle in the therapeutic relationship, its systematic and coherent practice has been an ethically challenging duty upon healthcare providers due to various concerns of clinical, moral, religious, social, ethical and legal natures. Medical confidentiality can be breached to protect the patient and/or others if maintaining confidentiality causes serious harm. Healthcare professionals may encounter complicated situations whereby the divulgence of a patient's confidential information may pose a threat to one party whereas the concealment of such information may cause harm to another. After deliberating on the Islamic concept of harm (ḍarar), this paper focuses on the dual duty and conflicts of interests faced by healthcare professionals in the practice of medical confidentiality. Referring to serious infectious diseases with a special mention of AIDS, this study also provides discourse on how healthcare professionals deal with difficult scenarios of conflicts of interests and ethical dilemmas.

Confidentiality in the Care of Adolescents: Technical Report

Confidentiality is a foundational element of high-quality, accessible, and equitable health care. Despite strong grounding in federal and state laws, professional guidelines, and ethical standards, health care professionals and adolescent patients face a range of complexities and barriers to seeking and providing confidential care to adolescents across different settings and circumstances. The dynamic needs of adolescents, the oftentimes competing interests of key stakeholders, the rapidly evolving technological context of care, and variable health care billing and claims requirements are all important considerations in understanding how to optimize care to focus on and meet the needs of the adolescent patient. The following assessment of the evolving evidence base offers a view of the current state and best practices while pointing to numerous unmet needs and opportunities for improvement in the care experiences of youth as well as their health outcomes.

Confidentiality in the Care of Adolescents: Policy Statement

Confidentiality is an essential component of high-quality health care for adolescents and young adults and can have an impact on the health care experiences and health outcomes of youth. Federal and state laws, professional guidelines, and ethical standards provide a core framework for guidance in the implementation of confidentiality protections in clinical practice. This policy statement provides recommendations for pediatricians and other pediatric health care professionals, clinics, health systems, payers, and electronic health record developers to optimize confidentiality practices and protections for adolescents and young adults across the spectrum of care.

Health Care AI and Patient Privacy-Dinerstein v Google

This Viewpoint summarizes a recent lawsuit alleging that a hospital violated patients’ privacy by sharing electronic health record (EHR) data with Google for development of medical artificial intelligence (AI) and discusses how the federal court’s decision in the case provides key insights for hospitals planning to share EHR data with for-profit companies developing medical AI.

Fotografie in der Dermatologie - ein Scoping Review: Praktiken, Skin of Color, Patientenpräferenzen und medizinisch-rechtliche Überlegungen

Die klinische Fotografie ist essentiell für die Dermatologie. Es gibt jedoch keine umfassende Aufarbeitung der Literatur zur Fotografie in der Dermatologie. Dieser Scoping Review soll die Literatur zu fotografischen Praktiken in der Dermatologie, der Fotografie stark pigmentierter Haut (Skin of Color), Patientenpräferenzen und medizinisch‐rechtlichen Überlegungen zusammenfassen. Die Datenbanken Embase, MEDLINE, PubMed und Evidence Based Medicine wurden im Einklang mit der PRISMA‐Erweiterung für Scoping Reviews durchsucht. Insgesamt wurden 33 Studien zusammengefasst. Die klinische Fotografie wird häufig für die Markierung von Biospiestellen, Beurteilung, Diagnostik, Krankheitsüberwachung, Bewertung des Ansprechens auf die Behandlung, medizinische Ausbildung, Forschung, das Einholen kollegialer Ratschläge und in der Teledermatologie eingesetzt. Obwohl es in der dermatologischen Fotografie weiterhin kaum Darstellungen von Skin of Color gibt, sind fotografische Überlegungen für dunklere Hauttypen verfügbar. Die meisten Patienten unterstützen die medizinische Fotografie. Dabei besteht der Wunsch, dass klinische Fotografien vom eigenen Arzt aufgenommen und bevorzugt klinikeigene Kameras und keine persönlichen Geräte verwendet werden. Relevante medizinisch‐rechtliche Fragestellungen umfassen Bedenken hinsichtlich des Datenschutzes, der Verwendung persönlicher Geräte und der Dokumentation der Einwilligung. Die Fotografie in der Dermatologie entwickelt sich ständig weiter und findet immer breitere Anwendung. Verbesserte Verfahren und Innovationen werden Menschen aller Hautfarben zugute kommen. Die Einhaltung der Zustimmung und des Datenschutzes muss gewährleistet werden, um die zunehmende Einfachheit der Bildaufnahme und ‐freigabe aufrechtzuerhalten.

[When quality improvement clashes with privacy regulations]

Continuity in patient care is crucial but is not a 'given' in complex circumstances when several health care professionals are involved in a clinical trajectory. Discontinuity may make it difficult to follow a patient's clinical course, which can be instructive and providing useful feedback on professional performance. Hence, it is a good clinical habit to check on patients after the care has been taken over by others. However, too strict interpretation of privacy laws and regulation may hamper this valuable practice. Obviously, protection of medical information and patients' privacy is vital, however, this should not apply to health care professionals that were involved in earlier phases of a patient's care as they should be considered having a continuing care relationship with the patient. Interestingly, a vast majority of patients themselves have no concern at all when professionals that were involved in earlier phases of their care access their information.

The European Genome-phenome Archive in 2021

The European Genome-phenome Archive (EGA - https://ega-archive.org/) is a resource for long term secure archiving of all types of potentially identifiable genetic, phenotypic, and clinical data resulting from biomedical research projects. Its mission is to foster hosted data reuse, enable reproducibility, and accelerate biomedical and translational research in line with the FAIR principles. Launched in 2008, the EGA has grown quickly, currently archiving over 4,500 studies from nearly one thousand institutions. The EGA operates a distributed data access model in which requests are made to the data controller, not to the EGA, therefore, the submitter keeps control on who has access to the data and under which conditions. Given the size and value of data hosted, the EGA is constantly improving its value chain, that is, how the EGA can contribute to enhancing the value of human health data by facilitating its submission, discovery, access, and distribution, as well as leading the design and implementation of standards and methods necessary to deliver the value chain. The EGA has become a key GA4GH Driver Project, leading multiple development efforts and implementing new standards and tools, and has been appointed as an ELIXIR Core Data Resource.

Signalling Standards for Progress: Bridging the Divide Between a Valid Consent to Use Patient Data Under Data Protection Law and the Common Law Duty of Confidentiality

In this article, we analyse the legal components of disclosing confidential patient information under the UK's common law duty of confidentiality (CLDoC) and processing personal (health) data under the UK's General Data Protection Regulation (GDPR) and Data Protection Act 2018. We describe the ostensible divide between the CLDoC and data protection law when it comes to the requirements of a valid signal of consent by a patient to use and disclose patient information, obtained by a health professional in the context of direct care, for health care and health research purposes. Ultimately, our analysis suggests that we are saddled, at least in the medium term, with two regimes operating with different standards of a valid consent-while putatively protecting similar interests. There is, however, opportunity for progress. It is possible to improve professional guidance on the interaction between the regimes and to achieve significant normative alignment without aligning the signalling standard for consent; this would promote consistent protection of reasonable expectations of patients across both regimes. Further coherence would require aligning not only the standard, but also the role played by consent under each regime. Here we argue that, in relation to direct care, any such shift should be away from consent as the normal justification. In relation to health research, on the contrary, it should be toward consent as the normal justification for use and disclosure of patient information under both the CLDoC and data protection law.

A Normative Framework for the Reconciliation of EU Data Protection Law and Medical Research Ethics

EU data protection law and medical research ethics overlap in scope and content in numerous instances in which personal data are processed in medical research. It is not always the case, however, that the conditions outlined by the two rule-sets precisely coincide. In the past few years, this lack of confluence has led to confusion as to how the two rule-sets should best relate to one another. This confusion has led to different approaches to the relationship being taken, on occasion leading to counter-intuitive conclusions. Unfortunately, there has hitherto been little effort to provide clarity to this confusion. In this regard, this article attempts to provide a general normative framework aimed at facilitating optimally cogent and just reconciliations of EU data protection law and medical research ethics.

Sharing ICU Patient Data Responsibly Under the Society of Critical Care Medicine/European Society of Intensive Care Medicine Joint Data Science Collaboration: The Amsterdam University Medical Centers Database (AmsterdamUMCdb) Example

OBJECTIVES

Critical care medicine is a natural environment for machine learning approaches to improve outcomes for critically ill patients as admissions to ICUs generate vast amounts of data. However, technical, legal, ethical, and privacy concerns have so far limited the critical care medicine community from making these data readily available. The Society of Critical Care Medicine and the European Society of Intensive Care Medicine have identified ICU patient data sharing as one of the priorities under their Joint Data Science Collaboration. To encourage ICUs worldwide to share their patient data responsibly, we now describe the development and release of Amsterdam University Medical Centers Database (AmsterdamUMCdb), the first freely available critical care database in full compliance with privacy laws from both the United States and Europe, as an example of the feasibility of sharing complex critical care data.

SETTING

University hospital ICU.

SUBJECTS

Data from ICU patients admitted between 2003 and 2016.

INTERVENTIONS

We used a risk-based deidentification strategy to maintain data utility while preserving privacy. In addition, we implemented contractual and governance processes, and a communication strategy. Patient organizations, supporting hospitals, and experts on ethics and privacy audited these processes and the database.

MEASUREMENTS AND MAIN RESULTS

AmsterdamUMCdb contains approximately 1 billion clinical data points from 23,106 admissions of 20,109 patients. The privacy audit concluded that reidentification is not reasonably likely, and AmsterdamUMCdb can therefore be considered as anonymous information, both in the context of the U.S. Health Insurance Portability and Accountability Act and the European General Data Protection Regulation. The ethics audit concluded that responsible data sharing imposes minimal burden, whereas the potential benefit is tremendous.

CONCLUSIONS

Technical, legal, ethical, and privacy challenges related to responsible data sharing can be addressed using a multidisciplinary approach. A risk-based deidentification strategy, that complies with both U.S. and European privacy regulations, should be the preferred approach to releasing ICU patient data. This supports the shared Society of Critical Care Medicine and European Society of Intensive Care Medicine vision to improve critical care outcomes through scientific inquiry of vast and combined ICU datasets.

Therapeutic Privilege: Variation on the Theme of Informed Consent

Since 1980. the Supreme Court of Canada has handed down two judgments which have had a major impact on the law of informed consent in this country. These are Reibl v. Hughes and Hopp v. Lepp. The doctrine of therapeutic privilege, the subject of this article, was discussed in both cases. But, in order to examine this doctrine, first, a brief explanation of the Court's more fundamental ruling on the doctrine of informed consent is needed.

The Basic Structure of Informed Consent and Therapeutic Privilege

Citing and relying on the United States case of Canterbury v. Spence, the Supreme Court of Canada changed the reference point for establishing the standard to be used to determine the legally required scope of disclosure of information to a patient in order to obtain his or her informed consent. Previously, this standard had been set according to the information that “the reasonable physician in the same circumstances” would disclose. It became what “the reasonable patient in those circumstance? would want to know, which encompasses information concerning “the nature of the proposed operation, its gravity, any material risks and any special or unusual risks attendant upon the performance of the operation.”

How US law will evaluate artificial intelligence for covid-19

Daniel E Ho and colleagues explore the legal implications of using artificial intelligence in the response to covid-19 and call for more robust evaluation frameworks

Medical and Legal Aspects of the Practice of Teledermatology in Spain

Teledermatology is now fully incorporated into our clinical practice. However, after reviewing current legislation on the ethical aspects of teledermatology (data confidentiality, quality of care, patient autonomy, and privacy) as well as insurance and professional responsibility, we observed that a specific regulatory framework is still lacking and related legal aspects are still at a preliminary stage of development. Safeguarding confidentiality and patient autonomy and ensuring secure storage and transfer of data are essential aspects of telemedicine. One of the main topics of debate has been the responsibilities of the physicians involved in the process, with the concept of designating a single responsible clinician emerging as a determining factor in the allocation of responsibility in this setting. A specific legal and regulatory framework must be put in place to ensure the safe practice of teledermatology for medical professionals and their patients.

Health Information Privacy Laws in the Digital Age: HIPAA Doesn't Apply

The notion of health information privacy has evolved over time as the healthcare industry has embraced technology. Where once individuals were concerned about the privacy of their conversations and financial information, the digitization of health data has created new challenges for those responsible for ensuring that patient information remains secure and private. Coupled with the lack of updated, overarching legislation, a critical gap exists between advancements in technology, consumer informatics tools and privacy regulations. Almost twenty years after the HIPAA (Health Insurance Portability and Accountability Act) compliance date, the healthcare industry continues to seek solutions to privacy challenges absent formal contemporary law. Since HIPAA, a few attempts have been made to control specific aspects of health information including genetic information and use of technology however none were visionary enough to address issues seen in today's digital data focused healthcare environment. The proliferation of digital health data, trends in data use, increased use of telehealth applications due to COVID-19 pandemic and the consumer's participatory role in healthcare all create new challenges not covered by the existing legal framework. Modern efforts to address this dilemma have emerged in state and international law though the United States healthcare industry continues to operate under a law written two decades ago. As technology continues to advance at a rapid pace along with consumers playing a greater role in the management of their healthcare through digital health the privacy guidance provided by federal law must also shift to reflect the new reality.

Addressing Ethical Challenges in US-Based HIV Phylogenetic Research

In recent years, phylogenetic analysis of HIV sequence data has been used in research studies to investigate transmission patterns between individuals and groups, including analysis of data from HIV prevention clinical trials, in molecular epidemiology, and in public health surveillance programs. Phylogenetic analysis can provide valuable information to inform HIV prevention efforts, but it also has risks, including stigma and marginalization of groups, or potential identification of HIV transmission between individuals. In response to these concerns, an interdisciplinary working group was assembled to address ethical challenges in US-based HIV phylogenetic research. The working group developed recommendations regarding (1) study design; (2) data security, access, and sharing; (3) legal issues; (4) community engagement; and (5) communication and dissemination. The working group also identified areas for future research and scholarship to promote ethical conduct of HIV phylogenetic research.

Fourth Amendment Protections of Prescription Drug Monitoring Programs: Patient Privacy in the Opioid Crisis

The opioid crisis is one of the largest public health problems in the history of the United States. Prescription drug monitoring programs ("PDMPs")-state databases containing the records of all prescriptions for controlled substances written in the state-have emerged as a means to track opioid prescribing and use. While PDMPs are typically used as a tool for physicians to inform their prescribing practices, many states also permit law enforcement to access PDMPs when investigating controlled substance distribution, often without prior judicial approval. Such law enforcement use of PDMPs raises serious questions of patient privacy. The Fourth Amendment protects individuals from unreasonable searches and seizures where they have a reasonable expectation of privacy and has been interpreted to require law enforcement have probable cause and a search warrant before infringing upon an individual's reasonable expectation of privacy. Several courts have held that patients have no reasonable expectation of privacy, or a severely diminished expectation of privacy, in their prescription drug records held in PDMPs. As support, courts rely on the third-party doctrine because the information is disclosed to physicians and then held by the state; the highly regulated nature of the prescription drug industry; and the statutory framework of the Controlled Substances Act. Such analysis disregards patients' expectation of privacy in their personal health information, the confidentiality in the physician-patient relationship, and the resulting patient incentives not to seek care. Therefore, this Article argues that law enforcement must have probable cause and a search warrant to access PDMPs because the exceptions to the Fourth Amendment's probable cause and warrant requirements do not apply.

Data protection during the coronavirus crisis

Smartphone apps to track SARS-CoV 2 infections need to fulfill certain minimal requirements to guarantee privacy and justify their use under data protection laws.

Not the doctor's business: Privacy, personal responsibility and data rights in medical settings

This paper argues that assessing personal responsibility in healthcare settings for the allocation of medical resources would be too privacy-invasive to be morally justifiable. In addition to being an inappropriate and moralizing intrusion into the private lives of patients, it would put patients' sensitive data at risk, making data subjects vulnerable to a variety of privacy-related harms. Even though we allow privacy-invasive investigations to take place in legal trials, the justice and healthcare systems are not analogous. The duty of doctors and healthcare professionals is to help patients as best they can-not to judge them. Patients should not be forced into giving up any more personal information than what is strictly necessary to receive an adequate treatment, and their medical data should only be used for appropriate purposes. Medical ethics codes should reflect these data rights. When a doctor asks personal questions that are irrelevant to diagnose or treat a patient, the appropriate response from the patient is: 'none of your business'.

Machine Learning Systems Applied to Health Data and System

The use of machine learning (ML) in medicine is becoming increasingly fundamental to analyse complex problems by discovering associations among different types of information and to generate knowledge for medical decision support. Many regulatory and ethical issues should be considered. Some relevant EU provisions, such as the General Data Protection Regulation, are applicable. However, the regulatory framework for developing and marketing a new health technology implementing ML may be quite complex. Other issues include the legal liability and the attribution of negligence in case of errors. Some of the above-mentioned concerns could be, at least partially, resolved in case the ML software is classified as a 'medical device', a category covered by EU/national provisions. Concluding, the challenge is to understand how sustainable is the regulatory system in relation to the ML innovation and how legal procedures should be revised in order to adapt them to the current regulatory framework.

Ethical, Legal and Regulatory Issues of Paediatric Translational Research. Call for an Adequate Model of Governance

The lack of paediatric medicines, including innovative and advanced ones, is a long-lasting and well-known problem at European and international levels. Despite the existing legal frameworks and incentives, children remain deprived of many kinds of therapy because of challenges faced in appropriately study and tailoring medicinal and other products for them. In this context, the necessity to foster paediatric research addressing unsolved and uncovered issues within a 'translational approach' has appeared. This article, after having clarified the concept of translational research in the perspective of the establishment of a European paediatric research infrastructure (RI), will identify and point out ethical, legal and regulatory issues particularly relevant in a children's rights perspective. It concludes asking for the setting up of an adequate model of governance within a future RI, including adequate and independent ethical oversight and a pluridisciplinary common service dealing with ethical, legal and societal issues relevant for children.

Introducing Key Elements Regarding Access to Personal Data for Scientific Research in the Perspective of Developing Innovative Medicines

This article aims at opening discussions and promoting future research about key elements that should be taken into account when considering new ways to organise access to personal data for scientific research in the perspective of developing innovative medicines. It provides an overview of these key elements: the different ways of accessing data, the theory of the essential facilities, the Regulation on the Free Flow of Non-personal Data, the Directive on Open Data and the re-use of public sector information, and the General Data Protection Regulation (GDPR) rules on accessing personal data for scientific research. In the perspective of fostering research, promoting innovative medicines, and having all the raw data centralised in big databases localised in Europe, we suggest to further investigate the possibility to find acceptable and balanced solutions with complete respect of fundamental rights, as well as for private life and data protection.

Consent and Privacy in the Era of Precision Medicine and Biobanking Genomic Data

"Big Data represents a challenge that points to the need for collective and political approaches to self-protection rather than solely individual, atomistic approaches."- Anita Allen, "Protecting One's Own Privacy in a Big Data Economy".

When information is the treatment? Precision medicine in healthcare

Profoundly more data-intensive than conventional medicine, precision medicine's distinctive informational needs present new challenges for healthcare management. Data protection and privacy law are key determinants in precision medicine's future. This article examines legal and regulatory barriers to the incorporation of precision medicine into healthcare. Specific attention is paid to analyzing recent health privacy laws, court cases, and medical device regulations. Considering the challenges identified, recommendations and guidance are crafted for health leaders with reference to domestic and international initiatives.

Confidentiality and Capacity

This article focuses on confidentiality and capacity issues affecting patients receiving care in the emergency department. The patient-physician relationship begins with presumed confidentiality. The article also clarifies instances where a physician may be required to break confidentiality for the safety of patients or others. This article then discusses risk management issues relevant to determining a patient's capacity to accept or decline medical care in the emergency department setting. Situations pertaining to refusal of care and discharges against medical advice are examined in detail, and best practices for mitigating risk in informed consent and barriers to consent are reviewed.

COVID-19 and patient-doctor confidentiality

Given the increasing numbers of ethical and legal issues arising from the COVID-19 epidemic, particularly in respect of patient-doctor confidentiality, doctors must explain to patients how the measures taken to combat the spread of the virus impact on their confidentiality. Patients must be reassured that doctors are ethically bound to continue to respect such confidentiality, but it should be made clear to them that doctors must also comply with the demands of the law. While the Constitution, statutory law and the common law all recognise a person's right to privacy, during extraordinary times such as the COVID-19 pandemic, confidentiality must be breached to a degree to halt the spread of the virus.

[The New General Data Protection Regulation and Its Implications Regarding Clinical Information Requests to Healthcare Professionals]

N/a.

How GDPR Enhances Transparency and Fosters Pseudonymisation in Academic Medical Research

The European General Data Protection Regulation (GDPR) has dotted the i's and crossed the t's in the context of academic medical research. One year into GDPR, it is clear that a change of mind and the uptake of new procedures is required. Research organisations have been looking at the possibility to establish a code-of-conduct, good practices and/or guidelines for researchers that translate GDPR's abstract principles to concrete measures suitable for implementation. We introduce a proposal for the implementation of GDPR in the context of academic research which involves the processing of health related data, as developed by a multidisciplinary team at the University Hospitals Leuven. The proposal is based on three elements, three stages and six specific safeguards. Transparency and pseudonymisation are considered key to find a balance between the need for researchers to collect and analyse personal data and the increasing wish of data subjects for informational control.

The Perils of Parity: Should Citizen Science and Traditional Research Follow the Same Ethical and Privacy Principles?

The individual right of access to one's own data is a crucial privacy protection long recognized in U.S. federal privacy laws. Mobile health devices and research software used in citizen science often fall outside the HIPAA Privacy Rule, leaving participants without HIPAA's right of access to one's own data. Absent state laws requiring access, the law of contract, as reflected in end-user agreements and terms of service, governs individuals' ability to find out how much data is being stored and how it might be shared with third parties. Efforts to address this problem by establishing norms of individual access to data from mobile health research unfortunately can run afoul of the FDA's investigational device exemption requirements.

To What Extent Does the EU General Data Protection Regulation (GDPR) Apply to Citizen Scientist-Led Health Research with Mobile Devices?

In this article, we consider the possible application of the European General Data Protection Regulation (GDPR) to "citizen scientist"-led health research with mobile devices. We argue that the GDPR likely does cover this activity, depending on the specific context and the territorial scope. Remaining open questions that result from our analysis lead us to call for lex specialis that would provide greater clarity and certainty regarding the processing of health data by for research purposes, including these non-traditional researchers.

A Right to Privacy and Confidentiality: Ethical Medical Care for Patients in United States Immigration Detention

Recently, John Doe, an undocumented immigrant who was detained by United States Immigration and Customs Enforcement (ICE), was admitted to a hospital off-site from a detention facility. Custodial officers accompanied Mr. Doe into the exam room and refused to leave as physicians examined him. In this analysis, we examine the ethical dilemmas this case brings to light concerning the treatment of patients in immigration detention and their rights to privacy. We analyze what US law and immigration detention standards allow regarding immigration enforcement or custodial officers' presence in medical exams and documentation of detainee health information. We describe the ethical implications of the presence of officers in medical exam rooms, including its effects on the quality of the patient-provider relationship, patient privacy and confidentiality, and provider's ability to provide ethical care. We conclude that the presence of immigration enforcement or custodial officers during medical examination of detainees is a breach of the right to privacy of detainees who are not an obvious threat to the public. We urge ICE and the US Department of Homeland Security to clarify standards for and tighten enforcement around when officers are legally allowed to be stationed in medical exam rooms and document detainees' information.

Mobile Research Applications and State Data Protection Statutes

This article focuses on state privacy, security, and data breach regulation of mobile-app mediated health research, concentrating in particular on research studies conducted or participated in by independent scientists, citizen scientists, and patient researchers. Prior scholarship addressing these issues tends to focus on the lack of application of the HIPAA Privacy and Security Rules and other sources of federal regulation. One article, however, mentions state law as a possible source of privacy and security protections for individuals in the particular context of mobile app-mediated health research. This Article builds on this prior scholarship by: (1) assessing state data protection statutes that are potentially applicable to mobile app-mediated health researchers; and (2) suggesting statutory amendments that could better protect the privacy and security of mobile health research data. As discussed in more detail below, all fifty states and the District of Columbia have potentially applicable data breach notification statutes that require the notification of data subjects of certain informational breaches in certain contexts. In addition, more than two-thirds of jurisdictions have potentially applicable data security statutes and almost one-third of jurisdictions have potentially applicable data privacy statutes. Because all jurisdictions have data breach notification statutes, these statutes will be assessed first.

General-Purpose Privacy Regulation and Translational Genomics

At one time, specialized health privacy laws represented the bulk of the rules regulating genetic privacy, Today, however, as both the field of genomics and the content of privacy law change rapidly, a new generation of general-purpose privacy laws may impose new restrictions on collection, storage, and disclosure of genetic data. This article surveys these laws and considers implications.

Teaching Forensic Concepts to Residents Using Interactive Online Modules

Psychiatrists without specialty forensic training routinely encounter forensic questions and treat justice-involved patients, which underscores the importance of adequate forensic training in general psychiatry residency. Some programs may face challenges providing adequate forensic instruction due to a lack of local forensic psychiatrists or other forensic resources. Novel training approaches are needed to fill this gap. This article describes the development, dissemination, and preliminary impact of two online learning modules designed to teach general psychiatry residents about basic forensic psychiatry principles: confidentiality and the duty to third parties. The modules are based on adult learning theory and synthesize clinically relevant vignettes from historically significant legal cases. We disseminated the modules nationally with built-in pre-tests and post-tests. The module responses demonstrate three significant themes: the modules reached learners across the United States; even advanced residents had relatively low subject matter knowledge prior to module completion; and module completion was associated with a significant improvement in resident learners' knowledge of these two topics. This work shows one potential avenue for filling gaps in forensic education within general psychiatry training, although further studies are needed to appreciate the impact of such educational interventions on clinical practice.

Title X Regulatory Changes and Their Impact on Adolescent Health

Title X of the Public Health Act has provided access to confidential reproductive care for low-income adolescents and adults since 1970, helping to bring adolescent pregnancy rates to historic lows. Recent regulatory changes in program funding eligibility and provider counseling options may reverse this trend. This policy brief will address the history and impact of Title X funding on adolescent access to reproductive health care, explain the implications of these recent regulatory changes in Title X implementation, and encourage advocacy to protect health care provider practice and adolescent access to confidential care.

Protecting Participants in Genomic Research: Understanding the "Web of Protections" Afforded by Federal and State Law

Researchers now commonly collect biospecimens for genomic analysis together with information from mobile devices and electronic health records. This rich combination of data creates new opportunities for understanding and addressing important health issues, but also intensifies challenges to privacy and confidentiality. Here, we elucidate the "web" of legal protections for precision medicine research by integrating findings from qualitative interviews with structured legal research and applying them to realistic research scenarios involving various privacy threats.

Privacy and Security Issues with Mobile Health Research Applications

This article examines the privacy and security issues associated with mobile application-mediated health research, concentrating in particular on research conducted or participated in by independent scientists, citizen scientists, and patient researchers. Building on other articles in this issue that examine state research laws and state data protection laws as possible sources of privacy and security protections for mobile research participants, this article focuses on the lack of application of federal standards to mobile application-mediated health research. As discussed in more detail below, the voluminous and diverse data collected by some independent scientists who use mobile applications to conduct health research may be at risk for unregulated privacy and security breaches, leading to dignitary, psychological, and economic harms for which participants have few legally enforceable rights or remedies under current federal law. Federal lawmakers may wish to consider enacting new legislation that would require otherwise unregulated health data holders to implement reasonable data privacy, security, and breach notification measures.