1 of 4

Roundtable on Balancing Privacy with �Health Data Access

Lisa Schlager

Vice President, Public Policy

July 15, 2019

2 of 4

Genetic Information Nondiscrimination Act

Health Insurers may not:

    • Consider genetic information a preexisting condition
    • Make enrollment or premium decisions based on genetic info
    • Request/require that an individual take a genetic test
    • Pursue or be provided predictive genetic information prior to enrollment

Employers cannot:

    • Use genetic info to make decisions involving hiring, firing, job assignments, salary, or promotions
    • Request, require, or purchase genetic information about employees or their family members

3 of 4

Employer-Sponsored Wellness Programs

    • Ask questions about personal and family health history
      • Responses must be VOLUNTARY
    • Encourage health-risk assessment and/or genetic testing
      • Cannot be REQUIRED
  • Utilize financial “incentives”
      • ACA and EEOC allow inducements of up to 50% of one’s health premium
      • Workers and spouses feel pressured into providing health history information and undergoing medical exams
    • Many wellness vendors are not bound by GINA or ADA—�and sometimes HIPAA

4 of 4

Corporate Wellness Programs

    • Privacy policies consist of legal jargon, references to �waiving one’s privacy rights, and ways info can be �reused, e.g. research & selling data to commercial entities
      • Allow plan administrators to:
        • “access detailed reports with granular view of participant data”
        • “automatically pull participant HRA data directly into their database…�as often as they would like”
    • Employee privacy and workplace discrimination safeguards �may be compromised

ALL parties should be required to abide by laws �to protect patient privacy and health data.