Re: MyFamilyHealth is a great Web 2.0 health site

Alex — Mon, 13 Oct 2008 09:41:41 -0000

My family is affected by sugar problem. it is most affecting Indians.

Re: MyFamilyHealth is a great Web 2.0 health site

Health History — Thu, 18 Sep 2008 18:52:06 -0000

I need to find a great health site. This one sounds like it offers exactly what I need. I look forward to using it in the future!

Re: MyFamilyHealth is a great Web 2.0 health site

peter — Thu, 14 Aug 2008 15:53:09 -0000

One final concern are the health care/insurance companies themselves 'reviewing' these sites to determine of someone is too much of a risk. 'Oh Sally here says that her family has a history of cancer - she's too much of a risk, let's drop her.'

No thanks.

Re: MyFamilyHealth is a great Web 2.0 health site

peter — Thu, 14 Aug 2008 15:20:26 -0000

Now I'm sure your intentions were good but I have to wonder about a few things:

First HIPAA and if Social Networking sites in which I choose to supply with sensitive health information, are covered? HIPAA describes a 'covered entity' as

* a health care provider that conducts certain transactions in electronic form
(called here a "covered health care provider").
* a health care clearinghouse.
* a health plan

But at the same time the regulations clarify that facilitation should be of a ‘transaction’, which means, just accepting data and historical information is not a covered transaction under HIPAA and thus not necessarily regulated. However, personally identifiable health information which, if shared, could constitute facilitation of a transaction under HIPAA and thus require the business (site) to comply.

So a couple questions need to be asked:

Q1: “Does the business or agency process, or facilitate the processing of, health information from nonstandard format or content into standard format or content or from standard format or content into nonstandard format or content?” Yes.

Q2:” Does the business or agency perform this function for another legal entity?” Technically, yes as the individual is a legal entity.

If the site provides the means by which you can designate who can/cannot see the data, that should be enough for HIPAA compliance regardless, as HIPAA defaults to a deny all/whitelist policy for sharing of information. I would think that if these type of sites start integrating (as in Web 2.0) with actual health care providors, then I would think they MUST comply.

But I'm the one who choose to put it out there in the first place.

One of the problems I have with your blog is you talks about all the great benefits of putting your health info for the family to see but nothing about the Security of that data or any cautions about the type of data you supply. So I went to check it out.

Which brings me to issue number two:

so to logon, it's http: http://www.myfamilyhealth.c... "email/pw"

https://www.myfamilyhealth....

gives you: CERTIFICATE WARNING

123genes.com takes you the same myfamilyhealth.com
look, except http://www.123genes.com/home is the path.

https://www.123genes.com/ac... takes me to the same logon, without cert prompt in SSL. Shahid should've, especially now, talked a little about the security of the site. Not only holding sensitive info (or at least caution about putting actual prescription numbers in a site like this, along with pharmacy, docs names, etc) Potentially, even the above issue. This re-enforces the bad behavior of users just clicking thru these warnings (see Lori's blog about FF3 warnings here). Add to that, in IE, you get the; There is a problem with this website's security certificate error/message & then what? You'll either be reinforcing bad behavior or driving people AWAY from the site since IE is telling them, 'do not continue.'

They say, 'MyFamilyHealth takes extensive and proactive measures to ensure privacy and
security,' but doesn't even have a https logon. They say that only members of your family tree can see your tree but it's only http. I'm sure this site is good for consolidating important health info and allowing others to see it but with recent malicious attempts (both successful and not) against Facebook, Myspace and other social sites - do you really want your sensitive health info just 'out there' especially when their privacy policy states:
BY SUBMITTING YOUR SENSITIVE PERSONAL DATA TO US AND/OR CLICKING TO ACCEPT THE TERMS OF THIS PRIVACY POLICY AND THE DATA PROTECTION NOTICE, YOU CONSENT TO ALLOWING US TO PROCESS THIS SENSITIVE
PERSONAL DATA IN ACCORDANCE WITH THIS PRIVACY POLICY.

Re: MyFamilyHealth is a great Web 2.0 health site

Dwight — Wed, 13 Aug 2008 07:45:40 -0000

I am always amazed how naive people are when yit comes to medical records and data security. Why on earth would I allow a comercial provider access to my very own medical history, the risks of online publishing aside. Could someone please tell me why one the one hand people are afraid to be scrutinized to the bone by official bodies, but when there is a fancy online hype, they hand out their privacy like free candy...

Re: MyFamilyHealth is a great Web 2.0 health site

wisdom — Sat, 09 Aug 2008 19:58:03 -0000

The site myfamilyhealth.com seems like a good idea. Knowing your family health history is important.

Re: MyFamilyHealth is a great Web 2.0 health site

Scott Smith — Thu, 31 Jul 2008 12:40:47 -0000

Readers who have an interest in electronic medical records are invited to take a 30-day free trial of our patient record that is very easy to use, easy for doctors to send records to, and very secure. Go to MyMedicalRecords.com and use the code TRYMMR.
Scott Smith

The Healthcare IT Guy - Latest Comments in MyFamilyHealth is a great Web 2.0 health site

Re: MyFamilyHealth is a great Web 2.0 health site

Re: MyFamilyHealth is a great Web 2.0 health site

Re: MyFamilyHealth is a great Web 2.0 health site

Re: MyFamilyHealth is a great Web 2.0 health site

Re: MyFamilyHealth is a great Web 2.0 health site

Re: MyFamilyHealth is a great Web 2.0 health site

Re: MyFamilyHealth is a great Web 2.0 health site