The Next Chapter on Data Privacy06/04/2018
How many emails have you received in your inbox over the past month mentioning GDPR? While it seems like a new marketing slogan, it is actually a groundbreaking European Union Law that may change how we all think about data privacy. There is a lot of buzz today about General Data Protection Regulation (GDPR) in the business and technology media as global firms make a mad dash to ensure their compliance by May 25. What is it exactly? How are you impacted?
GDPR went into effect on May 25, 2018 after two years of preparation. Consumers around the world are starting to see impacts through notices on updated privacy policies, email requests to opt in to communication and billboards offering legal advice and action on failure to comply with GDPR.
GDPR outlines comprehensive privacy protections for persons that are subjects of the EU and goes as far as to state that these protections are a fundamental right. It applies to any firm that uses (or “processes”) EU subject data. The regulation gives people more control over their personal data. This control grants the right to:
GDPR is also opt-in rather than opt-out – meaning that a person must consent to their data being processed in accordance with GDPR guidelines, that consent needs to be plain and transparent, and the person can withdraw their consent at any time. The regulation stipulates that the use of data by firms must be “lawful, fair, transparent, and relevant to reasons why consent was given” (EUR-Lex 2016). Noncompliance with GDPR may result in reprimands, penalties, or administrative fines. Those penalties may be criminal depending on the EU country.
Although GDPR only applies to firms that process EU subject data, there are a number of ways that GDPR could impact US healthcare. Any business, healthcare organization or otherwise, that stores or uses the data of EU subjects is impacted. GDPR compliance can be a lengthy and challenging process for businesses undertaking advanced data protections, quality, and risk management for the first time. US healthcare providers such as large health systems, hospitals, and clinics could see some impact based on how their vendors react to GDPR compliance, if those vendors operate in Europe.
In addition, although many aspects of GDPR overlap with HIPAA requirements, GDPR has exclusive components as well. There is some speculation that a US general data production regulation may come in the near future and be modeled on EU law. If that happens all US healthcare providers will be heavily impacted as well and may need to look to advanced data governance processes and technologies in addition to creating new FTE positions to manage long-term compliance.
If you are a US healthcare business or a healthcare provider and you have questions about how GDPR impacts you directly, please contact us to set up a conversation.
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Fermentum leo vel orci porta non pulvinar. Luctus venenatis lectus magna fringilla urna porttitor. Sodales ut eu sem integer vitae justo eget magna. Ultrices eros in cursus turpis massa tincidunt dui. Urna duis convallis convallis tellus id. Sed elementum tempus egestas sed sed risus pretium quam. Aliquam nulla facilisi cras fermentum odio eu feugiat pretium. Tellus in metus vulputate eu scelerisque. Sem nulla pharetra diam sit. Urna et pharetra pharetra massa massa ultricies mi quis hendrerit. Sed risus ultricies tristique nulla. Euismod lacinia at quis risus sed vulputate odio ut. Mauris rhoncus aenean vel elit. Tortor posuere ac ut consequat semper viverra nam libero. Pellentesque habitant morbi tristique senectus et netus et. Sem integer vitae justo eget magna fermentum iaculis eu non. Adipiscing diam donec adipiscing tristique. Massa sapien faucibus et molestie ac feugiat sed lectus vestibulum. Id diam vel quam elementum pulvinar.
Lorem ipsum dolor sit amet. Lobortis elementum nibh tellus molestie. Blandit volutpat maecenas volutpat blandit aliquam etiam erat velit scelerisque. Tellus cras adipiscing enim eu turpis egestas pretium aenean. Feugiat nisl pretium fusce id velit ut. Auctor urna nunc id cursus. Velit dignissim sodales ut eu sem integer vitae justo. Pellentesque adipiscing commodo elit at imperdiet dui accumsan sit. Nisi vitae suscipit tellus mauris. Interdum varius sit amet mattis vulputate enim. At risus viverra adipiscing at in tellus integer. Nunc scelerisque viverra mauris in aliquam sem. Convallis posuere morbi leo urna. In vitae turpis massa sed elementum tempus. Cursus euismod quis viverra nibh cras. Eros donec ac odio tempor orci dapibus ultrices in. Augue ut lectus arcu bibendum. Eget sit amet tellus cras adipiscing enim. Tincidunt praesent semper feugiat nibh sed pulvinar proin gravida.
