“Last week, ProPublica published an interesting article (link) about how health insurers are using personal data to supplant a patient’s medical data in order to carry out a risk assessment of the individual and use this as a basis for determining, amongst other things, a risk score concerning the individual — ultimately deriving risk-adjusted pricing for the individual’s health insurance based on factors other than the individual’s actual health.


While legislation concerning health data is strong in many countries, including the US (the target of the article), it is interesting to note that as personal data falls outside the classification of health data, this kind of use of personal data by an industry already under regulation provides a convenient, if unintentional, side-step mechanism by which the safeguards provided health data can be bypassed by leveraging (relatively) less-restricted personal data in ways not anticipated by the individual….”


The full article by Adaptant continues here