The Experts below are selected from a list of 20463 Experts worldwide ranked by ideXlab platform
Mun-kee Choi - One of the best experts on this subject based on the ideXlab platform.
-
ATC - System architecture and economic value-chain models for healthcare Privacy and security control in large-scale wireless sensor networks
Lecture Notes in Computer Science, 2006Co-Authors: W J Song, Mun-kee ChoiAbstract:In this paper, we have designed and modeled the ubiquitous RFID healthcare system architecture and framework workflow, which are described by six classified core players or subsystems, and have also analyzed by an economic value-chain model. They consist of the patient and wearable ECG sensor, network service, healthcare service, emergency service, and PKI service providers. To enhance the security level control for the patient’s Medical Privacy, individual private and public keys should be stored on smart cards. All the patient and service providers in the proposed security control architecture should have suitable secure private and public keys to access Medical data and diagnosis results with RFID/GPS tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and service providers, the patient’s ECG data can be protected and effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system using the smart card terminal is appropriate to build up Medical Privacy policies in future ubiquitous sensor networking and home networking environments. In addition, we have analyzed an economic value-chain model based on the proposed architecture consisting of RFID, GPS, PDA, ECG sensor, and smart card systems in large-scale wireless sensor networks and have also derived customer needs in the proposed service architecture using the value-chain model. Therefore, we also conclude that the business and technology issues for the service providers should exist in the networks.
-
System architecture and economic value-chain models for healthcare Privacy and security control in large-scale wireless sensor networks
Lecture Notes in Computer Science, 2006Co-Authors: W J Song, Mun-kee ChoiAbstract:In this paper, we have designed and modeled the ubiquitous RFID healthcare system architecture and framework workflow, which are described by six classified core players or subsystems, and have also analyzed by an economic value-chain model. They consist of the patient and wearable ECG sensor, network service, healthcare service, emergency service, and PKI service providers. To enhance the security level control for the patient's Medical Privacy, individual private and public keys should be stored on smart cards. All the patient and service providers in the proposed security control architecture should have suitable secure private and public keys to access Medical data and diagnosis results with RFID/GPS tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and service providers, the patient's ECG data can be protected and effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system using the smart card terminal is appropriate to build up Medical Privacy policies in future ubiquitous sensor networking and home networking environments. In addition, we have analyzed an economic value-chain model based on the proposed architecture consisting of RFID, GPS, PDA, ECG sensor, and smart card systems in large-scale wireless sensor networks and have also derived customer needs in the proposed service architecture using the value-chain model. Therefore, we also conclude that the business and technology issues for the service providers should exist in the networks.
-
SAFECOMP - Healthcare system architecture, economic value, and policy models in large-scale wireless sensor networks
Lecture Notes in Computer Science, 2006Co-Authors: W J Song, Moon Kyo Cho, Mun-kee ChoiAbstract:In this paper, we have designed and modeled the ubiquitous RFID healthcare system architecture and framework workflow, which are described by six classified core players or subsystems, and have also analyzed by an economic value-chain model. They consist of the patient and wearable ECG sensor, network service, healthcare service, emergency service, and PKI service providers. To enhance the security level control for the patient's Medical Privacy, individual private and public keys should be stored on smart cards. All the patient and service providers in the proposed security control architecture should have suitable secure private and public keys to access Medical data and diagnosis results with RFID/GPS tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and service providers, the patient's ECG data can be protected and effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system using the smart card terminal is appropriate to build up Medical Privacy policies in future ubiquitous sensor networking and home networking environments. In addition, we have analyzed an economic value-chain model based on the proposed architecture consisting of RFID, GPS, PDA, ECG sensor, and smart card systems in large-scale wireless sensor networks and have also analyzed two market derivers – customer demands and technology – in the proposed service architecture using the value-chain model. Finally, policy modeling for Privacy and security protection for customers, service providers, and regulatory agency is considered to promote beneficial utilization of the collected healthcare data and derived new business of healthcare applications.
-
Ubiquitous RFID Healthcare Systems Analysis on PhysioNet Grid Portal Services Using Petri Nets
2005 Fifth International Conference on Information Communications and Signal Processing, 2005Co-Authors: Sae Sol Choi, Mun-kee Choi, W J Song, S.h. SonAbstract:In this paper, we have studied ubiquitous personal healthcare systems using radio frequency identification (RFID) tag, wearable electrocardiogram (ECG) sensor, smart card, PQRM grid computing, PhysioNet, wired/wireless network, and public-key infrastructure (PKI) technologies. For research and development of these systems, we have also designed and modeled the system architecture and framework workflow, which are described by six classified core players or subsystems. They are consisting of the patient area network and wearable sensor provider, network service provider, healthcare service provider, emergency service provider, and PKI service providers, whose individual private and public keys should be stored on their smart card and be used to enhance security level control for the patient's Medical Privacy. All ECG measured data in wearable ECG sensor and analyzed data in grid computing with PhysioNet should be encrypted by using an individually generated one-time secure key with expire-time by the patient's and healthcare service provider's private keys, respectively. These encrypted Medical data and encrypted secure keys should be also transferred to the network service provider via secured communication channels in wired/wireless networks. In addition, these encrypted data and keys should be stored on the secured database directory of network service provider. Therefore, all of the patient and providers need suitable secure private and public keys in order to access to ECG Medical raw data, diagnosis results and tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and providers, the patient's ECG data can be successfully protected and be effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system is appropriate to build up Medical Privacy policies. Further, the system architecture workflow is modeled and verified using Pe- - tri nets
-
Privacy and security control architecture for ubiquitous RFID healthcare system in wireless sensor networks
2006 Digest of Technical Papers International Conference on Consumer Electronics, 1Co-Authors: W J Song, Mun-kee Choi, S.h. Son, Minho KangAbstract:In this paper, we have designed and modeled the ubiquitous RFID healthcare system architecture and framework workflow, which are described by six classified core players or subsystems. They are consisting of the patient and wearable ECG sensor, network service, healthcare service, emergency service, and PKI service providers, whose individual private and public keys should be stored on their smart card and be used to enhance security level control for the patient's Medical Privacy. All of the patient and providers in the proposed security control architecture need suitable secure private and public keys in order to access to ECG Medical raw data and diagnosis results with RFID/GPS tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and providers, the patient's ECG data can be successfully protected and be effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system is appropriate to build up Medical Privacy policies in ubiquitous sensor networking environments.
W J Song - One of the best experts on this subject based on the ideXlab platform.
-
ATC - System architecture and economic value-chain models for healthcare Privacy and security control in large-scale wireless sensor networks
Lecture Notes in Computer Science, 2006Co-Authors: W J Song, Mun-kee ChoiAbstract:In this paper, we have designed and modeled the ubiquitous RFID healthcare system architecture and framework workflow, which are described by six classified core players or subsystems, and have also analyzed by an economic value-chain model. They consist of the patient and wearable ECG sensor, network service, healthcare service, emergency service, and PKI service providers. To enhance the security level control for the patient’s Medical Privacy, individual private and public keys should be stored on smart cards. All the patient and service providers in the proposed security control architecture should have suitable secure private and public keys to access Medical data and diagnosis results with RFID/GPS tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and service providers, the patient’s ECG data can be protected and effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system using the smart card terminal is appropriate to build up Medical Privacy policies in future ubiquitous sensor networking and home networking environments. In addition, we have analyzed an economic value-chain model based on the proposed architecture consisting of RFID, GPS, PDA, ECG sensor, and smart card systems in large-scale wireless sensor networks and have also derived customer needs in the proposed service architecture using the value-chain model. Therefore, we also conclude that the business and technology issues for the service providers should exist in the networks.
-
System architecture and economic value-chain models for healthcare Privacy and security control in large-scale wireless sensor networks
Lecture Notes in Computer Science, 2006Co-Authors: W J Song, Mun-kee ChoiAbstract:In this paper, we have designed and modeled the ubiquitous RFID healthcare system architecture and framework workflow, which are described by six classified core players or subsystems, and have also analyzed by an economic value-chain model. They consist of the patient and wearable ECG sensor, network service, healthcare service, emergency service, and PKI service providers. To enhance the security level control for the patient's Medical Privacy, individual private and public keys should be stored on smart cards. All the patient and service providers in the proposed security control architecture should have suitable secure private and public keys to access Medical data and diagnosis results with RFID/GPS tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and service providers, the patient's ECG data can be protected and effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system using the smart card terminal is appropriate to build up Medical Privacy policies in future ubiquitous sensor networking and home networking environments. In addition, we have analyzed an economic value-chain model based on the proposed architecture consisting of RFID, GPS, PDA, ECG sensor, and smart card systems in large-scale wireless sensor networks and have also derived customer needs in the proposed service architecture using the value-chain model. Therefore, we also conclude that the business and technology issues for the service providers should exist in the networks.
-
SAFECOMP - Healthcare system architecture, economic value, and policy models in large-scale wireless sensor networks
Lecture Notes in Computer Science, 2006Co-Authors: W J Song, Moon Kyo Cho, Mun-kee ChoiAbstract:In this paper, we have designed and modeled the ubiquitous RFID healthcare system architecture and framework workflow, which are described by six classified core players or subsystems, and have also analyzed by an economic value-chain model. They consist of the patient and wearable ECG sensor, network service, healthcare service, emergency service, and PKI service providers. To enhance the security level control for the patient's Medical Privacy, individual private and public keys should be stored on smart cards. All the patient and service providers in the proposed security control architecture should have suitable secure private and public keys to access Medical data and diagnosis results with RFID/GPS tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and service providers, the patient's ECG data can be protected and effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system using the smart card terminal is appropriate to build up Medical Privacy policies in future ubiquitous sensor networking and home networking environments. In addition, we have analyzed an economic value-chain model based on the proposed architecture consisting of RFID, GPS, PDA, ECG sensor, and smart card systems in large-scale wireless sensor networks and have also analyzed two market derivers – customer demands and technology – in the proposed service architecture using the value-chain model. Finally, policy modeling for Privacy and security protection for customers, service providers, and regulatory agency is considered to promote beneficial utilization of the collected healthcare data and derived new business of healthcare applications.
-
Ubiquitous RFID Healthcare Systems Analysis on PhysioNet Grid Portal Services Using Petri Nets
2005 Fifth International Conference on Information Communications and Signal Processing, 2005Co-Authors: Sae Sol Choi, Mun-kee Choi, W J Song, S.h. SonAbstract:In this paper, we have studied ubiquitous personal healthcare systems using radio frequency identification (RFID) tag, wearable electrocardiogram (ECG) sensor, smart card, PQRM grid computing, PhysioNet, wired/wireless network, and public-key infrastructure (PKI) technologies. For research and development of these systems, we have also designed and modeled the system architecture and framework workflow, which are described by six classified core players or subsystems. They are consisting of the patient area network and wearable sensor provider, network service provider, healthcare service provider, emergency service provider, and PKI service providers, whose individual private and public keys should be stored on their smart card and be used to enhance security level control for the patient's Medical Privacy. All ECG measured data in wearable ECG sensor and analyzed data in grid computing with PhysioNet should be encrypted by using an individually generated one-time secure key with expire-time by the patient's and healthcare service provider's private keys, respectively. These encrypted Medical data and encrypted secure keys should be also transferred to the network service provider via secured communication channels in wired/wireless networks. In addition, these encrypted data and keys should be stored on the secured database directory of network service provider. Therefore, all of the patient and providers need suitable secure private and public keys in order to access to ECG Medical raw data, diagnosis results and tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and providers, the patient's ECG data can be successfully protected and be effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system is appropriate to build up Medical Privacy policies. Further, the system architecture workflow is modeled and verified using Pe- - tri nets
-
Privacy and security control architecture for ubiquitous RFID healthcare system in wireless sensor networks
2006 Digest of Technical Papers International Conference on Consumer Electronics, 1Co-Authors: W J Song, Mun-kee Choi, S.h. Son, Minho KangAbstract:In this paper, we have designed and modeled the ubiquitous RFID healthcare system architecture and framework workflow, which are described by six classified core players or subsystems. They are consisting of the patient and wearable ECG sensor, network service, healthcare service, emergency service, and PKI service providers, whose individual private and public keys should be stored on their smart card and be used to enhance security level control for the patient's Medical Privacy. All of the patient and providers in the proposed security control architecture need suitable secure private and public keys in order to access to ECG Medical raw data and diagnosis results with RFID/GPS tracking information for emergency service. By enforcing the requirements of necessary keys among the patient and providers, the patient's ECG data can be successfully protected and be effectively controlled over the open Medical directory service. Consequently, the proposed architecture for ubiquitous RFID healthcare system is appropriate to build up Medical Privacy policies in ubiquitous sensor networking environments.
Meredith Wadman - One of the best experts on this subject based on the ideXlab platform.
-
curbs on research dropped from us Medical Privacy bill
Nature, 1998Co-Authors: Meredith WadmanAbstract:washington A republican senator has introduced a bill that does not impose heavy restrictions on researchers and industry seeking access to identifiable patient information.
-
Privacy bill under fire from researchers.
Nature, 1998Co-Authors: Meredith WadmanAbstract:washington A Congressional effort to write a comprehensive law protecting Medical Privacy was launched publicly last week.
Jennifer Kulynych - One of the best experts on this subject based on the ideXlab platform.
-
the new hipaa health insurance portability and accountability act of 1996 Medical Privacy rule help or hindrance for clinical research
Circulation, 2003Co-Authors: Jennifer Kulynych, David KornAbstract:This article was prepared and accepted in 2002. The Federal Policy for Protection of Human Research Subjects, adopted by 17 federal agencies as a common regulatory framework (the “Common Rule”) for most federally sponsored human subjects research, acknowledges the centrality of Privacy and confidentiality to the ethical conduct of research by mandating, both implicitly and explicitly, that institutional review boards (IRBs) address these concerns.1 Regulations adopted by the US Food and Drug Administration (FDA) require IRBs to assess protections for Privacy and confidentiality in a similar manner.2 Implicit in the requirement (of both the Common Rule and FDA regulations) that IRBs weigh the risks and benefits of proposed research is the expectation that risks to Privacy and confidentiality will be among those the IRB considers. Moreover, both the Common Rule and FDA regulations require IRBs to make an explicit finding that a researcher has proposed adequate protections to minimize the possibility of a breach of Privacy or confidentiality and the attendant risk that subjects could suffer embarrassment, stigmatization, or discrimination.3 Despite these regulatory mandates, critics state that the existing system of IRB oversight does not ensure that subjects’ Privacy rights are respected fully and their confidentiality protected adequately. It is argued that heavily burdened IRBs, particularly those in academic settings, may devote insufficient attention to, and may lack the expertise to evaluate, risks to Privacy and confidentiality in an electronic age in which barriers to data transmission are low and in which data stripped of names and other facial identifiers may yet be re-identified for questionable purposes through the use of computer algorithms and diverse databases publicly available from private and governmental sources.4 Claims that some commercially sponsored research may be little more than thinly disguised marketing have further heightened anxiety about an erosion of health …
-
The new federal Medical-Privacy rule.
The New England journal of medicine, 2002Co-Authors: Jennifer Kulynych, David KornAbstract:On August 9, 2002, the Department of Health and Human Services released the final version of the federal Medical-Privacy rule (Federal Register 67: 53182–53273, 2002). The release ended a tortuous ...
-
The effect of the new federal Medical-Privacy rule on research.
The New England journal of medicine, 2002Co-Authors: Jennifer Kulynych, David KornAbstract:The American people generally support and encourage Medical research, but they also place a high priority on the Privacy of personal Medical information. The Health Insurance Portability and Accoun...
-
Legal and ethical issues in neuroimaging research: human subjects protection, Medical Privacy, and the public communication of research results
Brain and cognition, 2002Co-Authors: Jennifer KulynychAbstract:Abstract Humans subjects research entails significant legal and ethical obligations. Neuroimaging researchers must be familiar with the requirements of human subjects protection, including evolving standards for the protection of Privacy and the disclosure of risk in “non-therapeutic” research. Techniques for creating veridical surface renderings from volumetric anatomical imaging data raise new Privacy concerns, particularly under the federal Medical Privacy regulation. Additionally, neuroimaging researchers must consider their obligation to communicate research results responsibly. The emerging field of neuroethics should strive to raise awareness of these issues and to involve neuroimaging researchers in the legal, ethical, and policy debates that currently surround human subjects research.
-
use and disclosure of health information in genetic research weighing the impact of the new federal Medical Privacy rule
American Journal of Law & Medicine, 2002Co-Authors: Jennifer Kulynych, David KornAbstract:I. INTRODUCTION Perceived threats to Medical Privacy arouse intense emotion, even among those who might otherwise approach complex health policy issues with academic dispassion. The author of an August 2001 editorial in the New England Journal of Medicine describes Medical records as "sacred secrets," and decries the use of Medical information for purposes unrelated to patient care as "an abridgement of individual rights" and "an unfolding American tragedy."1 A like-minded commentator in the Journal of the American Medical Association strikes a more apocalyptic note, warning that with respect to Medical Privacy, "[t]here is, increasingly, no place to hide."2 Not surprisingly, Privacy advocates also depict a full-blown crisis in Medical Privacy, one that Janlori Goldman of the Georgetown Health Privacy Project asserts has led consumers "to withdraw from full participation in their own healthcare" for fear of "discrimination, loss of benefits, stigma and unwanted exposure."3 The distraught tenor of such rhetoric only amplifies consumer fears about the potential misuse of personal health information and has engendered strong support for increased government oversight of Medical Privacy. Potential threats to the Privacy of genetic test results have been a particular source of public anxiety. Public IMAGE FORMULA95 reaction has stimulated legislative initiatives at both the state and federal levels targeted toward the amorphous category of "genetic information."4 It is inarguable that basic safeguards for the Privacy and confidentiality of genetic information and, for that matter, all other types of Medical information are essential. Consumers perceive themselves to be at significant risk when third parties such as employers or commercial entities enjoy unfettered access to Medical records and other confidential health data. The anticipated risks may be psychological, including annoyance at becoming the target of an intrusive marketing scheme for a Medical product and embarrassment if a stigmatizing condition is revealed, or they may extend to the loss of health insurance or employment upon disclosure of a genetic predisposition to serious diseases.5 Whatever the actual magnitude of these Privacy risks,6 a thoughtful, measured response on the part of policymakers is necessary and appropriate. Yet, problems arise when the response overreaches, attempting a utopian ideal of Medical Privacy that may ultimately do more harm than good. This is especially so when new limits on the use or disclosure of health information are adopted in haste (or fear). Such measures may prove costly and difficult to implement and threaten to constrict the flow of essential health data to researchers who develop insights into the determinants of health and disease, as well as new Medical products, therapies and disease prevention strategies. Amidst the strident demands of Privacy advocates for near absolute individual control over Medical information, the challenge for policymakers has been to keep the broader, more "communitarian" goals in sight-namely, the advancement of Medical knowledge and improvement of public health through research that cannot be accomplished without ready, albeit controlled, access to Medical information.7 Across the nation, the stored clinical records and archived tissues of generations of patients-a veritable library of human encounters with illness and responses to therapies-has proved over decades to be a unique, irreplaceable source of new knowledge about diseases and their treatment. Researchers recount this new IMAGE FORMULA97 knowledge in Medical literature; healthcare providers turn to the literature to inform decisions about diagnosis and treatment. Consequently, every patient has a direct and personal stake in preserving researchers' ready access to Medical information accumulated in archived clinical records and tissue samples. …
David Korn - One of the best experts on this subject based on the ideXlab platform.
-
the new hipaa health insurance portability and accountability act of 1996 Medical Privacy rule help or hindrance for clinical research
Circulation, 2003Co-Authors: Jennifer Kulynych, David KornAbstract:This article was prepared and accepted in 2002. The Federal Policy for Protection of Human Research Subjects, adopted by 17 federal agencies as a common regulatory framework (the “Common Rule”) for most federally sponsored human subjects research, acknowledges the centrality of Privacy and confidentiality to the ethical conduct of research by mandating, both implicitly and explicitly, that institutional review boards (IRBs) address these concerns.1 Regulations adopted by the US Food and Drug Administration (FDA) require IRBs to assess protections for Privacy and confidentiality in a similar manner.2 Implicit in the requirement (of both the Common Rule and FDA regulations) that IRBs weigh the risks and benefits of proposed research is the expectation that risks to Privacy and confidentiality will be among those the IRB considers. Moreover, both the Common Rule and FDA regulations require IRBs to make an explicit finding that a researcher has proposed adequate protections to minimize the possibility of a breach of Privacy or confidentiality and the attendant risk that subjects could suffer embarrassment, stigmatization, or discrimination.3 Despite these regulatory mandates, critics state that the existing system of IRB oversight does not ensure that subjects’ Privacy rights are respected fully and their confidentiality protected adequately. It is argued that heavily burdened IRBs, particularly those in academic settings, may devote insufficient attention to, and may lack the expertise to evaluate, risks to Privacy and confidentiality in an electronic age in which barriers to data transmission are low and in which data stripped of names and other facial identifiers may yet be re-identified for questionable purposes through the use of computer algorithms and diverse databases publicly available from private and governmental sources.4 Claims that some commercially sponsored research may be little more than thinly disguised marketing have further heightened anxiety about an erosion of health …
-
The new federal Medical-Privacy rule.
The New England journal of medicine, 2002Co-Authors: Jennifer Kulynych, David KornAbstract:On August 9, 2002, the Department of Health and Human Services released the final version of the federal Medical-Privacy rule (Federal Register 67: 53182–53273, 2002). The release ended a tortuous ...
-
The effect of the new federal Medical-Privacy rule on research.
The New England journal of medicine, 2002Co-Authors: Jennifer Kulynych, David KornAbstract:The American people generally support and encourage Medical research, but they also place a high priority on the Privacy of personal Medical information. The Health Insurance Portability and Accoun...
-
use and disclosure of health information in genetic research weighing the impact of the new federal Medical Privacy rule
American Journal of Law & Medicine, 2002Co-Authors: Jennifer Kulynych, David KornAbstract:I. INTRODUCTION Perceived threats to Medical Privacy arouse intense emotion, even among those who might otherwise approach complex health policy issues with academic dispassion. The author of an August 2001 editorial in the New England Journal of Medicine describes Medical records as "sacred secrets," and decries the use of Medical information for purposes unrelated to patient care as "an abridgement of individual rights" and "an unfolding American tragedy."1 A like-minded commentator in the Journal of the American Medical Association strikes a more apocalyptic note, warning that with respect to Medical Privacy, "[t]here is, increasingly, no place to hide."2 Not surprisingly, Privacy advocates also depict a full-blown crisis in Medical Privacy, one that Janlori Goldman of the Georgetown Health Privacy Project asserts has led consumers "to withdraw from full participation in their own healthcare" for fear of "discrimination, loss of benefits, stigma and unwanted exposure."3 The distraught tenor of such rhetoric only amplifies consumer fears about the potential misuse of personal health information and has engendered strong support for increased government oversight of Medical Privacy. Potential threats to the Privacy of genetic test results have been a particular source of public anxiety. Public IMAGE FORMULA95 reaction has stimulated legislative initiatives at both the state and federal levels targeted toward the amorphous category of "genetic information."4 It is inarguable that basic safeguards for the Privacy and confidentiality of genetic information and, for that matter, all other types of Medical information are essential. Consumers perceive themselves to be at significant risk when third parties such as employers or commercial entities enjoy unfettered access to Medical records and other confidential health data. The anticipated risks may be psychological, including annoyance at becoming the target of an intrusive marketing scheme for a Medical product and embarrassment if a stigmatizing condition is revealed, or they may extend to the loss of health insurance or employment upon disclosure of a genetic predisposition to serious diseases.5 Whatever the actual magnitude of these Privacy risks,6 a thoughtful, measured response on the part of policymakers is necessary and appropriate. Yet, problems arise when the response overreaches, attempting a utopian ideal of Medical Privacy that may ultimately do more harm than good. This is especially so when new limits on the use or disclosure of health information are adopted in haste (or fear). Such measures may prove costly and difficult to implement and threaten to constrict the flow of essential health data to researchers who develop insights into the determinants of health and disease, as well as new Medical products, therapies and disease prevention strategies. Amidst the strident demands of Privacy advocates for near absolute individual control over Medical information, the challenge for policymakers has been to keep the broader, more "communitarian" goals in sight-namely, the advancement of Medical knowledge and improvement of public health through research that cannot be accomplished without ready, albeit controlled, access to Medical information.7 Across the nation, the stored clinical records and archived tissues of generations of patients-a veritable library of human encounters with illness and responses to therapies-has proved over decades to be a unique, irreplaceable source of new knowledge about diseases and their treatment. Researchers recount this new IMAGE FORMULA97 knowledge in Medical literature; healthcare providers turn to the literature to inform decisions about diagnosis and treatment. Consequently, every patient has a direct and personal stake in preserving researchers' ready access to Medical information accumulated in archived clinical records and tissue samples. …