Disclosure of Patients’ Genetic Information Without Their Consent–Is the “Public Interest” Really a Sufficient Justification?
New guidance issued by the U.K. General Medical Council (GMC) regarding a physician’s ability to disclose to a patient’s relatives the diagnosis of such patient’s genetic illness1 has recently been a hot topic of discussion on several online forums.2 The guidance, which became effective on October 12, 2009 and addresses medical privacy issues in a variety of contexts (not just genetic information sharing), recognizes that the diagnosis of a patient’s genetic illness may indicate the likelihood of the same illness in the patient’s close blood relatives. The GMC suggests that a physician’s first obligation after diagnosing a genetic illness is to explain to the patient the likelihood that close relatives are also at risk and to encourage the patient to discuss his or her illness with relatives. However, should the patient refuse to voluntarily disclose the illness to at risk family members, the physician may disclose such information if disclosure would be “justified in the public interest.” Physicians are instructed to balance their duty to provide care to the patient against their duty to protect others from serious harm.3
Federal Privacy Regulation and the Financially Troubled DTC Genomics Company
Last month, the Genomics Law Report prepared a three-part series entitled What Happens if a DTC Genomics Company Goes Belly Up? The series, which was originally published on Genetic Future (see Parts 1, 2 and 3), reviewed the privacy policies of several genomics companies to determine whether they prohibit the transfer of private data to third parties. We also discussed the fact that a bankruptcy court may approve such a transfer notwithstanding a policy to the contrary. In this post, we examine whether federal regulations may restrict the dissemination of private genomic data—including the new rules proposed earlier this month under the Genetic Information Nondiscrimination Act of 2008.
1. Is DTC Getting HIPAA? The Health Insurance Portability and Accountability Act of 1996 (HIPAA), the most prominent federal regulation governing the privacy of medical records, established the Privacy Rule to provide national standards for protected medical records. HIPAA’s Privacy Rule currently applies only to “covered entities” and business associates of covered entities. A covered entity is a health plan, health care clearinghouse, or a health care provider. Since a company providing genomic sequencing services is not a health plan or a health care clearinghouse, HIPAA will apply only if such a company is determined to be a health care provider or a business associate of a covered entity.
Read the rest of this entry »
