Documenting all the places
personal data goes.


Legend: with your name, without your name.
Click on a circle above for names of organizations and details of data shared.

Education includes childcare, primary, secondary and college educational institutions. This excludes research or healthcare provider divisions at universities. The families of children in school are required to submit vaccine and allergy information and often encouraged to share medical conditions and medications with the staff at the school.


Caduceus Therapeutics purchases statewide personal hospital discharge data from at least WA [source]. See more information about the fields of data shared, an example of matching real names to the records in statewide discharge data, and which states use standards less than the HIPAA standard.


Essex Youth Commision Summer Program had a data breach in 2010, in Massachusetts. Paper records and digital files with personal health and personally identifiable information from youth participants, parents and staff were reported missing. [source].


(return to health DataMap)

Copyright © 2012-2016 President and Fellows Harvard University.