Now the Supreme Court has overturned what data privacy would look like Roe v Wade (also Southeastern Pennsylvania Planned Parenthood v. Casey) and removed the federal constitutional protection of abortion in the case Dobbs v. Jackson Women’s HealthFor now, the exact answer will depend on how each state wants to treat abortion, how aggressively each state and at all levels officials are enforcing the new law, and how businesses with private information will respond. The Supreme Court’s majority opinion opens the door to a massive increase and continued conflict. It has not eased and should not be expected to ease the rift in the public debate as it claims longstanding precedent has intensified.
majority opinion
Before considering where data privacy is likely to go, it can be helpful to briefly summarize the majority opinion. From a very brief perspective, the Supreme Court’s majority opinion quashed the Supreme Court’s previous precedent for recognizing the constitutional protection of the right to abortion.The majority opinion is that the definition of the word “liberty” does not extend to the recognition of the right to abortion (remember Southeastern Pennsylvania Planned Parenthood v. Casey Shift analytics from privacy to freedom).When making decisions, most people rely on historical analysis and discussion roe and Casey Precedents allegedly do not work.
The point highlighted by the majority opinion is that the decision does not (at least at this point in time) provide an assessment of any other rights recognized as covered by the privacy penumbra.Supreme Court cites penumbra of privacy in many decisions before and after roe Provide constitutional protections for contraception, interracial marriage, same-sex marriage, and more. The majority opinion claimed that other privacy-related rights were not affected, but the line of reasoning used in the majority opinion may support future challenges. Disturbingly, one unanimous opinion does explicitly call for a reassessment of all other privacy rights, which may be a wake-up call to some.
back to America
Abortion is not banned or illegal at the federal level, even if the majority opinion and the precedent it has existed for nearly five decades are dismantled. The majority opinion does mean that the Constitution does not recognize any parameters or guardrails, which leaves the decision on how to regulate abortion entirely up to the states or Congress (if possible) at the federal level. Leaving the decision up to each state means 50 (or more if protectorates are taken into account) different laws that will determine whether abortion is legal or the availability of services.
Worryingly, new laws are being passed to limit abortions entirely or significantly, as well as the number of states with trigger laws. A trigger law is a previously enacted law but with a built-in clause that the law is only valid when or when the controlling precedent changes.In the case of abortion, trigger laws all look at roe be overturned or altered in such a way that strict restrictions or criminal provisions are not superseded by constitutional interpretation. These laws are now in effect.
and roe Now overturned, states with statutes criminalizing abortion will uphold specific interests in determining whether individuals violate those laws. The criminal aspect creates opportunities for criminal investigations and lays the groundwork for the use of state power in these investigations. Investigations may include subpoenas, document search warrants and related police work. All of these tools are commonly used to investigate suspected criminal conduct and gather evidence to support prosecution and/or prosecution. This boils down to gathering information using processes that utilize the formal mechanisms available.
Impact of HIPAA
What do all the cyclones mean for privacy? The shortest, most nuanced answer is that in states where abortion is criminalized, privacy is likely to be affected considerably. In the case of HIPAA, patient information can be disclosed to law enforcement upon a valid search warrant or subpoena. If a statute criminalizes the abortion of an individual undergoing the procedure or providing the service, it is not an easy task to look at the investigation request medical records to determine whether an illegal procedure took place. Disclosure based on such an investigation is one of HIPAA’s uses and disclosures and does not require an opportunity for an individual to object. This means that medical records may be turned over without the subject knowing what happened.
The same outcome may also occur in non-criminal court proceedings. If documentation is required by subpoena or other legal process, medical records may be disclosed without giving the individual an opportunity to object (assuming all elements of the HIPAA Privacy Rule requirements are met).
An open question is to what extent an entity receiving such a request would object to the request. The language in the HIPAA privacy rules is interesting because in the two examples given (law enforcement or court proceedings), entities possible Disclosure of Protected Health Information. The use of the word may imply that a decision can be made, since “may” is not a mandatory word. Will an organization make a decision to deny a request based on the word “may”? It’s certainly a potential argument to watch, although the outlook isn’t necessarily far-fetched.
Non-HIPAA Scenarios
For all direct-to-consumer-based solutions based on new technology, the privacy picture is even more ambiguous. Direct-to-consumer solutions are generally not covered by HIPAA. If HIPAA does not apply, any privacy protections may depend on state law. There is no guarantee that state laws will be applied directly to an organization. Many of the new privacy laws being passed have the necessary thresholds for compliance.
Regardless of whether state privacy laws apply, the same considerations or exemptions may apply to law enforcement seeking access to data. It is highly unlikely that the law will completely prevent law enforcement from accessing data. The law may require jumping through certain hoops, but eventually data may be squeezed out.
The terms of use or privacy policy of the service are also important. When HIPAA does not apply, the main limitation is just being honest and transparent about how data is used. Data may be used in these ways if it describes how it will be used and disclosed. While there may be some nuances, this is a pretty solid baseline.
How to enhance privacy?
Given that privacy is not absolute, what can be done to enhance protection? A new law that protects or restricts access could be a good start. If some well-defined datasets are more worrisome than others, legislation can create the necessary protections. Another outcome will be for organizations to take a stance on how the data collected is disclosed or whether there will be a fight. The nature of this posture may affect usage.
The Supreme Court’s majority opinion Dobbs There will be a lot of confusion about what data will be disclosed and the impact of getting it. When everything is figured out, the individual will bear the brunt.
Photo: JuSun, Getty Images
