Privacy Is Critical to Paper or Computerized Immunization Records

Although privacy and confidentiality issues are not unique to computerized immunization registries, registry developers have demonstrated that these systems protect the privacy of confidentiality and children and families. They accomplish this through a variety of technical and administrative safeguards that prevent inappropriate sharing of information.

Policies and Technology Protect Confidentiality and Security of Data

All registries have technical safeguards - encryption, passwords, or firewalls - in place to protect security of data, and the majority have written confidentiality policies and security plans in place.

Privacy Specifications Are Consistent with Developing National Legislation

The 1999 NVAC report on development of immunization registries recommended developing stringent specifications to protect privacy and confidentiality in immunization registries. The resultant specifications, developed by a CDC-led implementation team, are consistent with Department of Health and Human Services Secretary Shalala's recommendations to Congress for privacy legislation and with the proposed federal regulations as required by the 1996 Health Insurance Portability and Accountability Act (HIPAA).

Privacy Specifications Provide a Standard of Protection

Registries must meet the specifications to be in compliance with national confidentiality policies for immunization registries. The specifications address:

• Confidentiality policies and agreements to protect confidentiality.
  
  
• Notification of patients, parents or legal guardians about the registry and the information it contains, as well as how to exercise choice regarding participation in the registry.
  
  
• Use of, access to and disclosure of immunization registry information.
  
  
• Penalties for unauthorized disclosure of immunization information.

The specifications document also addresses administrative, technical and physical safeguards to ensure the security of data.