As extra People sidestep docs’ workplaces to order lab exams and genetic screenings on-line, privateness consultants warn that the brand new trove of delicate well being knowledge might find yourself within the fingers of firms promoting sure varieties of insurance coverage, lenders, employers, or regulation enforcement.
Sufferers’ well being knowledge are sometimes protected beneath the Well being Insurance coverage Portability and Accountability Act, or HIPAA. However that federal regulation solely applies to hospitals, doctor practices, and different entities concerned in coordinating or paying for affected person care. The brand new breed of startups that promote blood panels and genetic exams — sometimes not coated by medical health insurance — on to customers aren’t at all times thought-about medical suppliers as outlined by the regulation.
“These exams sort of really feel like medical exams, however they might not at all times be coated by HIPAA,” mentioned Anna Wexler, an assistant professor of medical ethics on the College of Pennsylvania who has studied direct-to-consumer well being firms’ privateness practices. “Many of those firms do exist outdoors of the normal medical surroundings.”
As extra individuals rush to direct-to-consumer well being exams pushed by a need to catch most cancers earlier than signs emerge or to search out out if they’re in danger for Alzheimer’s, consultants say it’s conceivable that banks and insurers might use any well being knowledge they will to mitigate their very own dangers. That might influence monetary merchandise reminiscent of loans, life insurance coverage, short-term medical health insurance utilized by gig employees and people between jobs, and long-term medical health insurance that pays for nursing residence stays.
“Should you don’t agree [to share the data], you don’t get the coverage, you don’t get the financial institution mortgage, no matter you’re making use of towards,” mentioned Mark Rothstein, director of translational bioethics at UC Irvine.
Operate Well being, for instance, which provides over 100 exams for an annual subscription payment of $365, says on its web site that it’s “not a laboratory or medical supplier.” The startup, co-founded by well being secretary Robert F. Kennedy Jr. ally Mark Hyman, says it “doesn’t supply medical recommendation, laboratory companies, a prognosis, medical remedy, or any type of medical opinion, by means of our companies or in any other case,”
If somebody’s taken a full-body scan or a genetic danger evaluation, as an illustration, it’s not far-fetched or clearly unlawful for an employer conditionally providing a job requiring sure bodily traits to “get entry to [the test results] and see that their [potential] worker, who they wish to rent, just isn’t wholesome or has some irregular scan info,” Wexler mentioned. “These could possibly be used to make employment choices.”
As extra sufferers order lab exams on-line, docs don’t know what to do with the outcomes
Operate, and different direct-to-consumer well being take a look at firms reminiscent of Prenuvo and Hims additionally say of their privateness insurance policies that they’ll share delicate well being data in response to legitimate requests from regulation enforcement like a court-ordered subpoena. (On the time of publication, these firms didn’t make clear which circumstances can be thought-about legitimate and which might be denied.)
Whereas there haven’t been any latest excessive profile situations of well being knowledge from direct-to-consumer lab exams and screenings resulting in discrimination, consultants say it’s nonetheless early days.
“We merely have no idea how these take a look at outcomes could possibly be utilized in an unintended means that might result in discrimination,” mentioned Tara Sklar, school director of the Well being Regulation and Coverage Program at College of Arizona Regulation.
How at-home exams can drive up insurance coverage
Present legal guidelines typically cease primary well being plans from ratcheting up premiums or denying protection based mostly on an individual’s medical historical past or genetic danger assessments, and federal well being knowledge privateness legal guidelines bar docs and well being plans from sharing medical knowledge outdoors the well being care system with out permission. The Genetic Data Nondiscrimination Act additionally stops primary well being plans and employers with greater than 15 staff from denying or adjusting protection based mostly on genetic knowledge.
Nevertheless, firms promoting life insurance coverage, incapacity insurance coverage, and short- and long-term medical insurance coverage are exempt from these legal guidelines, and are allowed to entry delicate well being info as a part of the coverage underwriting course of. And these firms at the moment are assessing how they will greatest use the information from shopper genetic screening and blood exams to higher handle their very own danger, mentioned Scott Leavitt, president and normal agent of Gem State Monetary Group, a vendor in Boise, Idaho, that contracts with 45 different insurance coverage firms to promote long-term care, life, and incapacity insurance coverage.
Current Congressional efforts to roll again components of the Inexpensive Care Act might additionally remove or ease privateness protections for medical health insurance, and as some states push much less restrictive privateness legal guidelines, individuals might discover their insurance coverage protection extra impacted by the well being knowledge they share with shopper firms relying on the place they stay, authorized consultants informed STAT.
“We don’t know what the longer term holds,” Leavitt informed STAT. The deluge of latest well being exams means “we’re gonna get extra knowledge, which is sweet. Nevertheless, that knowledge might additionally have an effect on you [differently] as the principles change and the states change their legal guidelines.”
Legally, particular person insurance coverage firms can set their very own insurance policies on how closely shopper well being exams influence protection for sure varieties of insurance coverage, he added. “Some firms are very proactive. Some are extra old-fashioned, and simply say, ‘We’re going to attend till the regulation tells us what we are able to and might’t do.’”
The American Academy of Actuaries informed STAT that life insurance coverage firms might have entry to at-home testing outcomes, together with by means of databases that testing firms might share with insurance coverage firms with permission from prospects. Life insurance coverage firms don’t at present use at-home genetic exams for coverage underwriting, however any genetic info talked about in medical data — which might embrace discussions prospects had with their docs about business take a look at outcomes — might probably be used, the group mentioned. (That group additionally emphasised that life insurance coverage underwriting solely takes under consideration knowledge accessible on the time of utility, and that solely knowledge that was hidden or misrepresented can change a coverage after it’s issued.)
Kelly Loussedes, a senior vice chairman for public relations for the Nationwide Affiliation of Advantages and Insurance coverage Professionals, which represents long-term care insurance coverage professionals, informed STAT it was “monitoring the rising use of direct-to-consumer genetic and biomarker testing and encourages a considerate strategy that prioritizes shopper protections, privateness, and transparency whereas guaranteeing protection choices stay truthful and evidence-based.”
A number of different well being, incapacity, and life insurance coverage trade teams STAT reached out to, reminiscent of AHIP, which incorporates some incapacity, life, and short- and long-term medical health insurance plans, both didn’t touch upon using direct-to-consumer exams in specialty insurance coverage, or directed inquiries to particular person firms and commerce teams for particulars on their insurance policies. As of publication, most of these different firms and commerce teams had not responded to requests for remark, together with Metlife, New York Life, Massachusetts Mutual, and Aflac. Prudential Monetary declined to remark, and a John Hancock spokesperson mentioned the corporate “doesn’t require completion of any direct-to-consumer take a look at as a prerequisite of providing any of its merchandise.”
Hims and Prenuvo clarified that they solely share knowledge with employers or insurers when licensed by prospects.
Newer varieties of exams additional complicate privateness protections.
As firms mix genetic and non-genetic info into proprietary, built-in danger stories and predictions (Operate Well being, as an illustration, sells danger stories for coronary heart and mind well being, combining blood biomarkers with genetic assessments) “shopper protections develop into murkier,” as a result of they’re not explicitly outlined in current knowledge safety legal guidelines, that means enterprising life, incapacity, or short-term insurers and a few employers might probably make a case for demanding them from the shoppers, or the businesses promoting them, Sklar mentioned. Whereas Operate mentioned it doesn’t straight share knowledge with third-party insurers, it didn’t reply to STAT’s request for clarification on privateness protections for danger scores.
STAT Plus: Wellness startup Operate Well being raises $300 million as shopper lab testing picks up steam
“We stay in a quickly altering authorized panorama” for well being privateness, mentioned Sara Geoghegan, senior counsel on the Digital Privateness Data Heart, a analysis and privateness advocacy group. Federal court docket rulings rejecting extra protections for reproductive care knowledge, as an illustration, already represent an “assault on well being care and well being privateness,” she added. In June, the U.S. District Courtroom for the Northern District of Texas declared illegal some Biden-era HIPAA modifications that might have particularly restricted knowledge sharing about reproductive well being.
Weighing medical advantages in opposition to dangers
Of their privateness insurance policies and phrases and situations, Operate, Prenuvo, and Hims all say that they aren’t thought-about medical suppliers in all circumstances and subsequently not legally “coated entities” beneath HIPAA — that means they aren’t required to adjust to the strict knowledge sharing restrictions outlined in that regulation. (A few of these firms have established their very own medical teams which can be ruled by HIPAA, however the on-line platforms that prospects order from should not legally thought-about medical suppliers. Hims additionally informed STAT the corporate is technically not thought-about a coated entity as a result of customers pay for his or her companies utilizing money slightly than medical health insurance.)
Whereas in addition they emphasised that they prioritized prospects’ privateness, their insurance policies all specified situations through which knowledge could also be shared outdoors the corporate: Operate Well being mentioned psychological and bodily historical past, medical notes, biomarkers, genetic knowledge, and different delicate elements could also be shared with company associates, and by way of lawful requests from regulation enforcement or authorities companies when acceptable. Hims and Prenuvo had comparable insurance policies. (Well being plans and conventional medical suppliers are additionally allowed to share delicate knowledge with outdoors teams in sure circumstances, together with some regulation enforcement requests.)
Taken along with open questions concerning the validity and accuracy of direct-to-consumer exams — particularly danger predictions for situations like Alzheimer’s or most cancers, and which frequently contain proprietary calculations that aren’t clinically validated — genetic counselors and docs inform STAT they’re advising customers to weigh the advantages of ordering their very own well being exams in opposition to the potential insurance coverage influence.
Tyler Stokes, a genetic counselor on the College of Maryland Medical Heart’s Greenebaum Complete Most cancers Heart mentioned she sometimes informs sufferers contemplating companies like 23andMe that specialty insurance coverage can at present use genetic exams to find out eligibility. “For somebody who’s wholesome, who doesn’t have most cancers or doesn’t have this elevated, heightened danger, it could be price taking that into consideration previous to doing a genetic take a look at,” she mentioned.
“Will you be OK for those who can’t purchase extra life insurance coverage as a result of one thing is discovered?” mentioned Carolyn Applegate, a genetic counselor on the Johns Hopkins Faculty of Medication. “Precisely how far these protections go, and precisely what’s and isn’t allowed beneath completely different circumstances” hasn’t actually “been examined,” she added.
This story is a part of a reporting fellowship managed by the Affiliation of Well being Care Journalists, with help from The Commonwealth Fund.
