Serving Harris, Brazoria, Fort Bend and Montgomery Counties
HOUSTON
Volume 10 | Issue 6
Inside This Issue
Pandemic Highlights the Plight of Female Health-CareWorkers See pg. 10
INDEX Mental Health...................... pg.5 Oncology Research......... pg.6 Healthy Heart....................... pg.8 Hospital News......................pg.11
Travel Safely During Summer Vacation Season See pg. 13
June Edition 2020
Reopening the Economy And Getting Back To Business: Privacy Concerns with Health Data Collection and Contact Tracing
By Frank T. Spano, JD Kathy A. Hardee, JD Polsinelli, PC
M
any of the reopening guidelines require businesses to screen individuals who have COVID-19 and communicate such data to public health authorities for the purpose of contact tracing. In their screening efforts prompted by these guidelines, many businesses will take the temperatures of employees, customers and visitors, or start tracking attributes of “wellness� such as who reports in sick. As time goes on, technology will play a greater role. Facial recognition and other biometric technologies may offer solutions for identifying individuals who have tested positive or need to be quarantined based on contact tracing more broadly. The increasing use of biometric and geolocation technologies was raising privacy concerns before COVID-19. Presently, there are a number of laws that address private sector usage of facial recognition or biometric data.
These laws may soon be modified or in some cases preempted by legislation that is specific to the COVID-19 pandemic. Although it is too early to predict the contents of any legislation, it is fair to assume it will provide individuals with some measure of control over how their personal health, geolocation and proximity data are being collected and used to combat the pandemic. The common thread in all of these initiatives is the balancing of concerns for the safety and privacy for personal data on the one hand, and the critically important public health need for screening and contact tracing on the other. Practical Tips for Businesses Requirements for COVID-19 screening and contact tracing are rapidly evolving, and will undoubtedly vary from place to place depending on the overlay of federal, state and local laws, regulations and executive orders. Nevertheless, there are a few basic privacy principles that will help companies implement effective screening and contact tracing and minimize exposure to potential liability.
1. Privacy Notice. Companies should ensure that they provide clear notice to individuals (including employees) describing the personal data that will be collected, the means used to collect it, and how the data will be used, shared and stored. The privacy notices should be transparent and in a concise, easy to read format. Avoid technical and legal jargon that will make the notice difficult to read and understand. 2. Consent. Businesses should consult local and state laws for the inclusion of consents and disclosures. Where consent is required, it should be clear and unambiguous, and should encompass all forms of processing of COVID-19 screening data. If the company is considering requesting access to health information directly from health care providers, there are separate authorization and consent requirements under state and federal law that the company should follow, including HIPAA, regarding how such consent must
see Economy... page 14
PRSRT STD US POSTAGE PAID PERMIT NO 1 HOUSTON TX