Epic Systems, the largest provider of software for managing medical records, says a venture-backed startup called Particle Health is using patient data in unauthorized and unethical ways that have nothing to do with treatment.
Epic told customers in a notice on Thursday that it cut off its connection to Particle, hindering the company's ability to tap a system with more than 300 million patient records.
Particle is one of several companies that acts as a sort of middleman between Epic and the organizations — typically hospitals and clinics — that need the data.
Patient data is inherently sensitive and valuable, and it's protected by the Health Insurance Portability and Accountability Act, or HIPAA, a federal law that requires a patient's consent or knowledge for third-party access.
To join the network, organizations are vetted and have to agree to abide by clear "Permitted Purposes" for the exchange of patient data.
Persons:
Carequality
Organizations:
Systems, Health, CNBC, KLAS Research, Oracle
Locations:
Wisconsin, U.S