theDataMap

Documenting all the places
personal data goes.

healthDataMap


Legend: with your name, without your name.
Click on a circle above for names of organizations and details of data shared.


Pharmacy Benefits Managers receive prescription billing information from pharmacies, and provides data to health insurance companies for payment of prescriptions on behalf of the pharmacies.

Laws require a prescription as a condition of acquiring controlled medications. The information on a prescription includes your name, date of birth, and address, the date, and the name of the physician and kind and dosage of the medication.

Examples

Equi Script purchases statewide personal hospital discharge data from at least FL [source]. See more information about the fields of data shared, an example of matching real names to the records in statewide discharge data, and which states use standards less than the HIPAA standard.

  

Express Scripts, Ernst & Young had a data breach in 2013, in Missouri. A partner at Ernst & Young is accused of sneaking into the headquarters of Express Scripts Holding Co. It is not clear how the Ernst & Young partner got into the headquarters, but it is believed that he emailed over 20,000 pages of data to a personal account. Express Scripts Holding Co. accused Ernst & Young of stealing the information in order to develop its health care division. Express Scripts Holding filed a lawsuit; the accused partner is no longer employed by Ernst & Young. [source].

  
  

(return to health DataMap)



Copyright © 2012-2016 President and Fellows Harvard University.