US Senator Mark R. Warner, D-Va., raised concerns this week about the tracking and collection of patient health data by parent company Facebook Meta.
WHY IT IMPORTANT
20 letter to Meta CEO Mark Zuckerberg, Senator Warner posed a series of questions about patient privacy and the company’s collection practices.
Specifically, Warner said he was concerned about a particular small piece of code that had raised concerns in recent months about its use in healthcare websites and apps.
“I am writing to you today to express my concerns about Meta’s collection of sensitive health information through the Meta Pixel tracking tool without user consent,” Warner wrote.
“As you know, I have long worked to protect user privacy and increase transparency about how user data is collected and shared,” he said. “This task is more urgent than ever as the past two years have shown us the importance of healthcare technology, with many people relying on electronic health records, online appointment booking and portals. trust virtual patients for care during the pandemic.”
Warner stated its concern over recent allegations that healthcare consumer data collected by Meta Pixel helped deploy user-targeted advertisements on Meta’s platform.
“The use of Meta Pixel is widespread, as the tool is already installed in the systems of 33 of the top 100 hospitals in the country and inside the patient portals of seven health systems,” Warner said. at the time of investigation.
“It’s important for tech companies like Meta to take their role in protecting users’ health data seriously,” he said. “Without meaningful action, I fear that these continued privacy violations and harmful uses of health data could become the new status quo in healthcare and public health.” copper.”
As a result, the senator asked Zuckerberg to answer seven questions by November 3:
-
Does Meta have access to or receive information directly from Meta Pixel, current or former?
-
How does Meta store information received via Meta Pixel?
-
Has Meta information received from Meta Pixel ever been used to inform targeted advertisements on Meta’s platform?
-
How does Meta handle sensitive information it receives from third parties in violation of its business guidelines?
-
What steps is Meta taking to protect sensitive health information, especially with third-party providers? Since the release of The Markup’s report in June, what additional steps have been taken?
-
According to a report released by the New York State Department of Financial Services last year, Meta stated that the filtering system “has not yet operated with complete accuracy”. What improvements have been made to make the filtration system more efficient? How does Meta test and evaluate the filtering system’s ability to identify sensitive health information?
-
Where required by law, does Meta always comply with any and all notice requirements when Meta Pixel processes or transmits protected information, in the manner and for the time required by law?
TREND TO BIGGER WOMAN
Senator Warner’s letter comes the same week as news broke of a potential data breach at Illinois- and Wisconsin-based Advocate Aurora Health, which reportedly involved pixel tracking technology . The breach could affect up to 3 million people.
“We are aware that pixels or similar technologies installed on our patient portal are available through the MyChart and LiveWell websites and apps, as well as on some of our scheduling utilities. , has transmitted certain patient information to third-party vendors who provided pixel technology to us,” Advocate Aurora officials said in a data breach notice.
They told patients that different users could be affected in different ways, depending on “their browser choice; their browser configuration; blocking, deleting or using cookies; they whether or not they have a Facebook or Google account; are they logged in to Facebook or Google; and specific actions taken by users on the platform.”
In response, the health system “disabled and/or removed pixels from our platform and conducted an internal investigation to better understand what patient information was transmitted to providers.” ours.”
Warner has prioritized patient protection around user data and privacy, and enacted bipartisan Capitol Hill legislation, the DASHBOARD Act of 2019, that aims to increase transparency in data collection. Whether.
Other bills he co-responded to include the DETOUR Act of 2021, which would ban companies like Meta from using so-called “dark models” to manipulate users into sharing their data.
And the Public Health Emergencies Privacy Act of 2021 will strengthen data privacy protections and rights around contact tracing, home testing, online appointment booking, and more. online and more.
ON PROFILE
Senator Warner wrote: “I am troubled by the recent revelation that the Meta Pixel was installed on several hospital websites – including a password-protected patient portal – and sent sensitive health information to Meta when patients schedule appointments online.
“This data includes highly personal health data, including the patient’s medical condition, appointment subject, doctor’s name, email address, phone number, IP address and other details about patient’s appointment.”
In the new era of telehealth and virtual care, patient-generated health data, digital therapies, and other consumer-focused innovations, concerns such as That’s very real, he said.
“As we increasingly move healthcare online, we must ensure there are strong safeguards in place around the use of these technologies to protect sensitive health information,” Warner said. cold.
Twitter: @MikeMiliardHITN
Email the writer: [email protected]
Healthcare IT News is a HIMSS publication.
