System and method for managing access control of sensitive data
Methods and systems for managing access and control of data are disclosed. To manage access and control, data management system may require registration and verification of devices associated with an individual or other individuals to which control over access may be granted. Data management system may vest control over access to data to the device associated with the individual for which data is stored and progressively vest control over access to data to other devices associated with other individuals as an increasing amount of information indicating the lack of capacity of the individual to authorize access to data.
1. A method for managing access to privately held health information, the method comprising:
obtaining a request for medical data for a patient, the medical data being part of the privately held health information;
in response to obtaining the request:
identifying a patient device that is designated by the patient;
performing a first consent resolution action with the patient device to attempt to gain a first authorization to disclose the medical data;
in a first instance of the first consent resolution action where the first authorization to disclose the medical data was not obtained:
identifying a verified designee device that is designated by the patient;
performing a second consent resolution action with the verified designee device to attempt to gain a second authorization to disclose the medical data;
in a first instance of the second consent resolution action where the second authorization to disclose the medical data was not obtained:
identifying a verified provider designee device that is designated by the patient;
performing a third consent resolution action with the verified provider designee device to attempt to gain a third authorization to disclose the medical data; and
in a first instance of the third consent resolution action where the third authorization to disclose the medical data was not obtained:
denying access to the medical data to service the request; and
in a second instance of the third consent resolution action where the third authorization to disclose the medical data was obtained:
providing the medical data to service the request.
2. The method of claim 1 , wherein performing the third consent resolution action comprises:
requesting the third authorization to disclose the medical data, the request being made to the verified provider designee device;
obtaining a first response indicating whether the third authorization is partially granted by the verified provider designee device;
in an instance of the first response where the third authorization is partially granted by the verified provider designee device:
identifying a second provider designee device designated by the verified provider designee device;
obtaining a second response indicating whether the third authorization is also partially granted by the second provider designee device; and
determining whether the third authorization to disclose the medical data has been granted based on the first response and the second response.
3. The method of claim 2 , wherein verified provider designee device is associated with a primary care physician for the patient, and the second provider designee device is associated with another professional that provides care to the patient.
4. The method of claim 3 , wherein performing the first consent resolution action comprises:
requesting the first authorization to disclose the medical data, the request being made to the patient device;
obtaining a third response indicating whether the first authorization is granted by the patient device; and
determining whether the first authorization to disclose the medical data has been granted based on the third response.
5. The method of claim 4 , wherein performing the second consent resolution action comprises:
requesting the second authorization to disclose the medical data, the request being made to the verified designee device;
obtaining a fourth response indicating whether the second authorization is granted by the verified designee device; and
determining whether the second authorization to disclose the medical data has been granted based on the fourth response.
6. The method of claim 5 , further comprising:
in a second instance of the first consent resolution action where the first authorization to disclose the medical data was obtained:
providing the medical data to service the request.
7. The method of claim 6 , further comprising:
in a second instance of the second consent resolution action where the second authorization to disclose the medical data was obtained:
providing the medical data to service the request.
8. The method of claim 1 , wherein the privately held health information is stored in a private data management system.
9. The method of claim 8 , wherein the request for medical data is obtained from a data consumer system, the data consumer system providing data management services for a healthcare service provider that provides healthcare services for the patient, and the private data management system not being operated for the healthcare service provider.
10. The method of claim 9 , further comprising:
identifying, based on the request, a potential condition that may be afflicting the patient; and
identifying, based on the potential condition, at least one portion of data managed by the data management system that is usable in part for diagnosis of the potential condition.
11. The method of claim 10 , wherein identifying the at least one portion of the data comprises:
performing a look up using a type of the potential condition as a key to obtain an identifier for the at least one portion of the data,
wherein the data is stored in a searchable format keyed to different types of potential conditions.
12. A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing access to privately held health information, the operations comprising:
obtaining a request for medical data for a patient, the medical data being part of the privately held health information;
in response to obtaining the request:
identifying a patient device that is designated by the patient;
performing a first consent resolution action with the patient device to attempt to gain a first authorization to disclose the medical data;
in a first instance of the first consent resolution action where the first authorization to disclose the medical data was not obtained:
identifying a verified designee device that is designated by the patient;
performing a second consent resolution action with the verified designee device to attempt to gain a second authorization to disclose the medical data;
in a first instance of the second consent resolution action where the second authorization to disclose the medical data was not obtained:
identifying a verified provider designee device that is designated by the patient;
performing a third consent resolution action with the verified provider designee device to attempt to gain a third authorization to disclose the medical data; and
in a first instance of the third consent resolution action where the third authorization to disclose the medical data was not obtained:
denying access to the medical data to service the request; and
in a second instance of the third consent resolution action where the third authorization to disclose the medical data was obtained:
providing the medical data to service the request.
13. The non-transitory machine-readable medium of claim 12 , wherein performing the third consent resolution action comprises:
requesting the third authorization to disclose the medical data, the request being made to the verified provider designee device;
obtaining a first response indicating whether the third authorization is partially granted by the verified provider designee device;
in an instance of the first response where the third authorization is partially granted by the verified provider designee device:
identifying a second provider designee device designated by the verified provider designee device;
obtaining a second response indicating whether the third authorization is also partially granted by the second provider designee device; and
determining whether the third authorization to disclose the medical data has been granted based on the first response and the second response.
14. The non-transitory machine-readable medium of claim 13 , wherein verified provider designee device is associated with a primary care physician for the patient, and the second provider designee device is associated with another professional that provides care to the patient.
15. The non-transitory machine-readable medium of claim 14 , wherein performing the first consent resolution action comprises:
requesting the first authorization to disclose the medical data, the request being made to the patient device;
obtaining a third response indicating whether the first authorization is granted by the patient device; and
determining whether the first authorization to disclose the medical data has been granted based on the third response.
16. The non-transitory machine-readable medium of claim 12 , wherein the operations further comprise:
identifying, based on the request, a potential condition that may be afflicting the patient; and
identifying, based on the potential condition, at least one portion of data managed by a data management system that is usable in part for diagnosis of the potential condition.
17. A data processing system, comprising:
a processor; and
a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations for managing access to privately held health information, the operations comprising:
obtaining a request for medical data for a patient, the medical data being part of the privately held health information;
in response to obtaining the request:
identifying a patient device that is designated by the patient;
performing a first consent resolution action with the patient device to attempt to gain a first authorization to disclose the medical data;
in a first instance of the first consent resolution action where the first authorization to disclose the medical data was not obtained:
identifying a verified designee device that is designated by the patient;
performing a second consent resolution action with the verified designee device to attempt to gain a second authorization to disclose the medical data;
in a first instance of the second consent resolution action where the second authorization to disclose the medical data was not obtained:
identifying a verified provider designee device that is designated by the patient;
performing a third consent resolution action with the verified provider designee device to attempt to gain a third authorization to disclose the medical data; and
in a first instance of the third consent resolution action where the third authorization to disclose the medical data was not obtained:
denying access to the medical data to service the request; and
in a second instance of the third consent resolution action where the third authorization to disclose the medical data was obtained:
providing the medical data to service the request.
18. The data processing system of claim 17 , wherein performing the third consent resolution action comprises:
requesting the third authorization to disclose the medical data, the request being made to the verified provider designee device;
obtaining a first response indicating whether the third authorization is partially granted by the verified provider designee device;
in an instance of the first response where the third authorization is partially granted by the verified provider designee device:
identifying a second provider designee device designated by the verified provider designee device;
obtaining a second response indicating whether the third authorization is also partially granted by the second provider designee device; and
determining whether the third authorization to disclose the medical data has been granted based on the first response and the second response.
19. The data processing system of claim 18 , wherein verified provider designee device is associated with a primary care physician for the patient, and the second provider designee device is associated with another professional that provides care to the patient.
20. The data processing system of claim 19 , performing the first consent resolution action comprises:
requesting the first authorization to disclose the medical data, the request being made to the patient device;
obtaining a third response indicating whether the first authorization is granted by the patient device; and
determining whether the first authorization to disclose the medical data has been granted based on the third response.