Securing Patient Privacy in Healthcare: A Case Study of M.D. Anderson Cancer Center

The University of Texas M.D. Anderson Cancer Center, one of the world’s most respected centers devoted exclusively to cancer patient care, research, education and prevention, faced a significant challenge in maintaining patient privacy. The center, which handles approximately 65,000 patients annually, has always prioritized patient privacy, even before federal and state regulations made it mandatory. As part of their Code of Ethics, patient information is confidential and cannot be disclosed to third parties without patient consent. However, with the advent of the internet and the opportunities it presented, such as telemedicine, remote access to patient records, remote consultation with a patient’s primary physician and mobile healthcare services, the center had to find a way to balance these technological advancements with the stringent requirements of HIPAA. The challenge was not only substantial due to the sheer number of patients but also because of the large number of employees, volunteers, students, postdoctoral fellows, and others who needed access to the information for educational and distance-learning opportunities.

The University of Texas M.D. Anderson Cancer Center is located on the sprawling campus of the Texas Medical Center in Houston, Texas. It is one of the world’s most respected centers devoted exclusively to cancer patient care, research, education, and prevention. The center was originally created by the Texas Legislature in 1941 and has since grown to become one of the nation’s original three Comprehensive Cancer Centers designated by the National Cancer Act of 1971. Today, M.D. Anderson is one of 40 such centers and has been awarded the prestigious “Accreditation with Commendation”—the highest rating given by the Joint Commission on Accreditation of Healthcare Organizations. M.D. Anderson pioneered multi-disciplinary cancer treatment and prides itself on protecting its patients’ privacy.