Just Accepted
Threat Modeling Healthcare Privacy in the United States
Authors: 
Nora McDonald, 
Alan Luo, Phoebe Moh, Michelle L. Mazurek, Nazanin AndalibiAuthors Info & Claims
Accepted on 26 September 2024
Abstract
The landscape of digital privacy risks faced by individuals seeking abortions has grown increasingly complex following the overturn of Roe v. Wade. Reproductive healthcare providers are uniquely positioned to offer critical privacy guidance. We conducted interviews with 22 reproductive healthcare providers across the U.S. to explore their perceptions of privacy threats for abortion-seeking patients and the types of guidance they provide. Our findings show that providers are most concerned about privacy risks for vulnerable patients—minors, individuals seeking gender-affirming care, and those in abusive relationships—particularly regarding information that could be intercepted by people close to them, such as partners or relatives. However, providers generally do not perceive government surveillance or hostile actors as major threats to abortion-seeking patients. We conclude with an updated notion of informed consent and preliminary recommendations for ways healthcare providers can revise their threat models to better support the privacy of abortion-seeking patients.
References
[1]
2021. Standard Technology Presents Opportunities for Medical Record Data Extraction. Pew (2021). https://pew.org/2LSl3Xk
[2]
2022. Better protection from invasive data requests for victims of rape. https://www.gov.uk/government/news/better-protection-from-invasive-data-requests-for-victims-of-rape
[3]
2022. Washington D.C. B24-0808 | 2021-2022 | 24th Council. https://legiscan.com/DC/bill/B24-0808/2021
[4]
2023. 19 GOP Attorneys General Seek Private Medical Records of Patients Who Obtain Out-of-State Abortions. https://www.democracynow.org/2023/7/25/tamarra_wieder_abortion_rights_planned_parenthood
[5]
2023. Abortion Laws by State. https://reproductiverights.org/maps/abortion-laws-by-state/
[6]
2023. Governor Moore Signs Historic Reproductive Freedom Legislation, Protects Women's Reproductive Rights In Maryland - Press Releases - News - Office of Governor Wes Moore. https://governor.maryland.gov/news/press/pages/Governor-Moore-Signs-Historic-Reproductive-Freedom-Legislation,-Protects-Women%E2%80%99s-Reproductive-Rights-In-Maryland.aspx.
[7]
2023. open.epic:: Interoperability Guide. https://open.epic.com/Home/InteroperabilityGuide?whoAmI=patient&whatIWant=getHealthRecord
[8]
2024. OCR Finalizes HIPAA Modifications to Strengthen Reproductive Health Care Privacy. https://www.crowell.com/en/insights/client-alerts/ocr-finalizes-hipaa-modifications-to-strengthen-reproductive-health-care-privacy.
[9]
Najd Alfawzan, Markus Christen, Giovanni Spitale, and Nikola Biller-Andorno. 2022. Privacy, Data Sharing, and Data Security Policies of Women's mHealth Apps: Scoping Review and Content Analysis. 10, 5 (2022), e33735. https://doi.org/10.2196/33735
[10]
Bobby Allyn. 2022. Privacy advocates fear Google will be used to prosecute abortion seekers. (2022). https://www.npr.org/2022/07/11/1110391316/google-data-abortion-prosecutions
[11]
Teresa Almeida, Laura Shipp, Maryam Mehrnezhad, and Ehsan Toreini. 2022. Bodies Like Yours: Enquiring Data Privacy in FemTech. In Adjunct Proceedings of the 2022 Nordic Human-Computer Interaction Conference (NordiCHI ’22). Association for Computing Machinery, 1–5. https://doi.org/10.1145/3547522.3547674 Place: New York, NY, USA.
[12]
Nazanin Andalibi. 2020. Disclosure, Privacy, and Stigma on Social Media: Examining Non-Disclosure of Distressing Experiences. 27, 3 (2020), 18:1–18:43. https://doi.org/10.1145/3386600
[13]
Nazanin Andalibi and Andrea Forte. 2018. Announcing Pregnancy Loss on Facebook: A Decision-Making Framework for Stigmatized Disclosures on Identified Social Network Sites. In Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems (CHI ’18). Association for Computing Machinery, 1–14. https://doi.org/10.1145/3173574.3173732
[14]
Nazanin Andalibi, Margaret E. Morris, and Andrea Forte. 2018. Testing Waters, Sending Clues: Indirect Disclosures of Socially Stigmatized Experiences on Social Media. 2 (2018), 19:1–19:23. Issue CSCW. https://doi.org/10.1145/3274288
[15]
Nazanin Andalibi, Pinar Ozturk, and Andrea Forte. 2017. Sensitive Self- disclosures, Responses, and Social Support on Instagram: the Case of #Depression.
[16]
Julie Appleby. 2022. Three things to know about health insurance coverage for abortion. (2022). https://www.npr.org/sections/health-shots/2022/07/13/1111078951/health-insurance-abortion
[17]
Brianna Bailey. 2023. An Oklahoma Mom's Court Challenge Seeks to End Charges for Pregnant Women Who Use Medical Marijuana. The Frontier (2023).
[18]
Robert Baldwin III. 2022. Losing a pregnancy could land you in jail in post-Roe America. (2022). https://www.npr.org/2022/07/03/1109015302/abortion-prosecuting-pregnancy-loss
[19]
Daly Barnett. 2022. Digital Security and Privacy Tips for Those Involved in Abortion Access. https://www.eff.org/deeplinks/2022/05/digital-security-and-privacy-tips-those-involved-abortion-access
[20]
Daly Barnett. 2022. Security and Privacy Tips for People Seeking An Abortion. https://www.eff.org/deeplinks/2022/06/security-and-privacy-tips-people-seeking-abortion
[21]
Kristen Barta, Cassidy Pyle, and Nazanin Andalibi. 2023. Toward a Feminist Social Media Vulnerability Taxonomy. 7 (2023), 100:1–100:37. Issue CSCW1. https://doi.org/10.1145/3579533
[22]
Emily Bazelon. 2022. Risking Everything to Offer Abortions Across State Lines. (2022). https://www.nytimes.com/2022/10/04/magazine/abortion-interstate-travel-post-roe.html
[23]
Lydia A. Bazzano, Jaquail Durant, and Paula Rhode Brantley. 2021. A Modern History of Informed Consent and the Role of Key Information. 21, 1 (2021), 81–85. https://doi.org/10.31486/toj.19.0105
[24]
Johana Bhuiyan. 2022. How can US law enforcement agencies access your data? Let's count the ways. (2022). https://www.theguardian.com/technology/2022/apr/04/us-law-enforcement-agencies-access-your-data-apple-meta
[25]
Johana Bhuiyan. 2023. Health data privacy post-Roe: can our information be used against us? (2023). https://www.theguardian.com/us-news/2023/jun/24/health-data-privacy-protection-roe-abortion-tech-laws
[26]
Natalle Birnbaum. 2023. AHLA - SB 345: California's Abortion Shield Law and the Potential Impact on Medication Abortion Access Nationwide. https://www.americanhealthlaw.org/content-library/health-law-weekly/article/cfecb23f-5083-42f7-aa64-f76629905a5d/sb-345-california-s-abortion-shield-law-and-the-po
[27]
Shannon Bond. [n. d.]. Lyft And Uber Will Pay Drivers’ Legal Fees If They’re Sued Under Texas Abortion Law. ([n. d.]). https://www.npr.org/2021/09/03/1034140480/lyft-and-uber-will-pay-drivers-legal-fees-if-theyre-sued-under-texas-abortion-la
[28]
Eric Boodman, Tara Bannow, Bob Herman, and Casey Ross. 2022. HIPAA won’t protect you if prosecutors want your reproductive health records. https://www.statnews.com/2022/06/24/hipaa-wont-protect-you-if-prosecutors-want-your-reproductive-health-records/
[29]
Emma Bowman. 2022. As states ban abortion, the Texas bounty law offers a way to survive legal challenges. (2022). https://www.npr.org/2022/07/11/1107741175/texas-abortion-bounty-law
[30]
Virginia Braun and Victoria Clarke. 2006. Using thematic analysis in psychology. 3, 2 (2006), 77–101. https://doi.org/10.1191/1478088706qp063oa
[31]
Virginia Braun and Victoria Clarke. 2019. Reflecting on reflexive thematic analysis. 11, 4 (2019), 589–597. https://doi.org/10.1080/2159676X.2019.1628806
[32]
Virginia Braun, Victoria Clarke, Nikki Hayfield, and Gareth Terry. 2018. Thematic Analysis. In Handbook of Research Methods in Health Social Sciences, Pranee Liamputtong (Ed.). Springer, 1–18. https://doi.org/10.1007/978-981-10-2779-6_103-1
[33]
Khiara M. Bridges. 2017. The Poverty of Privacy Rights (1 edition ed.). Stanford Law Books.
[34]
Lynda C Burton, Gerard F Anderson, and Irvin W Kues. 2004. Using Electronic Health Records to Help Coordinate Care. The Milbank Quarterly 82, 3 (Sept. 2004), 457–481. https://doi.org/10.1111/j.0887-378X.2004.00318.x
[35]
Sophie Bushwick. 2022. Yes, Phones Can Reveal if Someone Gets an Abortion. (2022). https://www.scientificamerican.com/article/yes-phones-can-reveal-if-someone-gets-an-abortion/
[36]
Nick Hidalgo Cagle, Matt. 2024. Dozens of Police Agencies in California Are Still Sharing Driver Locations with Anti-Abortion States. We’re Fighting Back. \textbar ACLU. https://www.aclu.org/news/privacy-technology/dozens-of-police-agencies-in-california-are-still-sharing-driver-locations-with-anti-abortion-states-were-fighting-back
[37]
Albert Fox Cahn and Eleni Manis. 2022. Pregnancy Panopticon: Abortion Surveillance After Roe. https://www.stopspying.org/pregnancy-panopticon
[38]
David W. Chen. 2023. Idaho Bans Out-of-State Abortions for Minors Without Parent's Consent. (2023). https://www.nytimes.com/2023/04/05/us/idaho-out-of-state-abortions-minors-ban.html
[39]
Rebecca Chowdhury. 2022. High-Tech Surveillance Could Track Abortion-Seekers in U.S. https://time.com/6184111/abortion-surveillance-tech-tracking/
[40]
Chia-Fang Chung, Kristin Dew, Allison Cole, Jasmine Zia, James Fogarty, Julie A. Kientz, and Sean A. Munson. 2016. Boundary Negotiating Artifacts in Personal Informatics: Patient-Provider Collaboration with Patient-Generated Data. In Proceedings of the 19th ACM Conference on Computer-Supported Cooperative Work & Social Computing (CSCW ’16). Association for Computing Machinery, 770–786. https://doi.org/10.1145/2818048.2819926 Place: New York, NY, USA.
[41]
Ellen Wright Clayton, Peter J Embí, and Bradley A Malin. 2023. Dobbs and the future of health data privacy for patients and healthcare organizations. 30, 1 (2023), 155–160. https://doi.org/10.1093/jamia/ocac155
[42]
Patricia Hill Collins. 2019. Intersectionality as Critical Social Theory. Duke University Press Books.
[43]
Cynthia Conti-Cook. 2020. Surveilling the Digital Abortion Diary. 50, 1 (2020). https://scholarworks.law.ubalt.edu/ublr/vol50/iss1/2
[44]
David Cox. 2024. ‘They thought they were doing good but it made people worse’: why mental health apps are under scrutiny. (2024). https://www.theguardian.com/society/2024/feb/04/they-thought-they-were-doing-good-but-it-made-people-worse-why-mental-health-apps-are-under-scrutiny
[45]
Joseph Cox. 2022. Data Broker Is Selling Location Data of People Who Visit Abortion Clinics. https://www.vice.com/en/article/m7vzjb/location-data-abortion-clinics-safegraph-planned-parenthood
[46]
James Dawson. 2023. Idaho lawmakers pass a bill to prevent minors from leaving the state for abortion. (2023). https://www.npr.org/2023/03/30/1167195255/idaho-trafficking-abortion-minors-interstate-travel-criminalize
[47]
Jolynn Dellinger and Stephanie Pell. 2024. Bodies of Evidence: The Criminalization of Abortion and Surveillance of Women in a Post-Dobbs World | Duke Journal of Constitutional Law & Public Policy. Duke Journal of Constitutional Law & Public Policy 19 (April 2024).
[48]
Ashley Emery. 2024. Data Privacy & Reproductive Freedom. Technical Report. national insistute for women and families.
[49]
Virginia Eubanks. 2018. Automating Inequality: How High-Tech Tools Profile, Police, and Punish the Poor. St. Martin's Press.
[50]
CT Mirror Explains. 2022. CT is now an abortion ’safe harbor.’ What does that mean? (2022). http://ctmirror.org/2022/06/27/ct-will-become-a-safe-harbor-for-abortion-seekers-on-july-1-what-does-that-mean/
[51]
Nir Eyal. 2014. Using informed consent to save trust. 40, 7 (2014), 437–444. https://doi.org/10.1136/medethics-2012-100490
[52]
Andrea Forte, Nazanin Andalibi, and Rachel Greenstadt. 2017. Privacy, Anonymity, and Perceived Risk in Open Collaboration: A Study of Tor Users and Wikipedians.
[53]
Geoffrey A. Fowler. 2019. Help Desk: Can your medical records become marketing? We investigate a reader's suspicious ‘patient portal.’. (2019). https://www.washingtonpost.com/technology/2019/10/22/help-desk-can-your-medical-records-become-marketing-we-investigate-readers-suspicious-patient-portal/
[54]
Diana Freed, Jackeline Palmer, Diana Minchala, Karen Levy, Thomas Ristenpart, and Nicola Dell. 2018. ”A Stalker's Paradise”: How Intimate Partner Abusers Exploit Technology. In Proceedings of the 2018 CHI Conference on Human Factors in Computing Systems (2018) (CHI’18). Association for Computing Machinery, 1–13. https://doi.org/10.1145/3173574.3174241 Place: New York, NY, USA.
[55]
Diana Freed, Jackeline Palmer, Diana Elizabeth Minchala, Karen Levy, Thomas Ristenpart, and Nicola Dell. 2017. Digital Technologies and Intimate Partner Violence: A Qualitative Analysis with Multiple Stakeholders. 1 (2017), 46:1–46:22. Issue CSCW. https://doi.org/10.1145/3134681
[56]
Sylvain Frey, Awais Rashid, Pauline Anthonysamy, Maria Pinto-Albuquerque, and Syed Asad Naqvi. 2019. The Good, the Bad and the Ugly: A Study of Security Decisions in a Cyber-Physical Systems Game. 45, 5 (2019), 521–536. https://doi.org/10.1109/TSE.2017.2782813
[57]
Gennie Gebhart. 2019. EFF's Recommendations for Consumer Data Privacy Laws. https://www.eff.org/deeplinks/2019/06/effs-recommendations-consumer-data-privacy-laws
[58]
Office of the Attorney General. 2023. Protecting Washingtonians’ Personal Health Data and Privacy. https://www.atg.wa.gov/protecting-washingtonians-personal-health-data-and-privacy
[59]
Thomas Germain. 2022. Guess What? HIPAA Isn’t a Medical Privacy Law. (2022). https://www.consumerreports.org/health/health-privacy/guess-what-hipaa-isnt-a-medical-privacy-law-a2469399940/
[60]
Stephen B. Wicker Ghosh, Dipayan. 2020. Reading in the Panopticon: Your Kindle May Be Spying on You, But You Can’t Be Sure. https://cacm.acm.org/magazines/2020/5/244335-reading-in-the-panopticon/abstract
[61]
Rose M Gilbert, Dayyanah Sumodhee, Nikolas Pontikos, Catherine Hollyhead, Angus Patrick, Samuel Scarles, Sabrina Van Der Smissen, Rodrigo M Young, Nick Nettleton, Andrew R Webster, and Jocelyn Cammack. 2022. Collaborative Research and Development of a Novel, Patient-Centered Digital Platform (MyEyeSite) for Rare Inherited Retinal Disease Data: Acceptability and Feasibility Study. 6, 1 (2022), e21341. https://doi.org/10.2196/21341
[62]
Michelle Goldberg. 2021. When a Miscarriage Is Manslaughter. (2021). https://www.nytimes.com/2021/10/18/opinion/poolaw-miscarriage.html
[63]
Jennifer Gollan. 2023. Websites Selling Abortion Pills Are Sharing Sensitive Data With Google. https://www.propublica.org/article/websites-selling-abortion-pills-share-sensitive-data-with-google
[64]
Michele Goodwin. 2020. Policing the Womb: Invisible Women and the Criminalization of Motherhood. Cambridge University Press.
[65]
Karen Gullo. 2024. Location Data Tracks Abortion Clinic Visits. Here's What to Know. Electronic Frontier Foundation (March 2024). https://www.eff.org/deeplinks/2024/03/location-data-tracks-abortion-clinic-visits-heres-what-know
[66]
David A Haggstrom and Thomas Carr. 2022. Uses of Personal Health Records for Communication Among Colorectal Cancer Survivors, Caregivers, and Providers: Interview and Observational Study in a Human-Computer Interaction Laboratory. 9, 1 (2022), e16447. https://doi.org/10.2196/16447
[67]
Grace E. Howard. 2024. The Pregnancy Police: Conceiving Crime, Arresting Personhood.
[68]
Tatum Hunter. 2022. You scheduled an abortion. Planned Parenthood's website could tell Facebook. (2022). https://www.washingtonpost.com/technology/2022/06/29/planned-parenthood-privacy/ Section: Your Data and Privacy.
[69]
Marisa Iati. 2022. Pregnant women were jailed over drug use to protect fetuses, county says. (2022). https://www.washingtonpost.com/nation/2022/09/08/pregnant-women-drugs-jail/
[70]
Martin Kaste. 2022. Nebraska cops used Facebook messages to investigate an alleged illegal abortion. (2022). https://www.npr.org/2022/08/12/1117092169/nebraska-cops-used-facebook-messages-to-investigate-an-alleged-illegal-abortion
[71]
Parvaja S. Kavattur, Somjen Frazer, El-Shafei, Laura Laderman, Lindsey Hull, Walter-Johnson Fikayo, Sana Sussman, and Lynn M. Paltrow. 2024. The Rise of Pregnancy Criminalization: A Pregnancy Justice Report. https://www.pregnancyjusticeus.org/rise-of-pregnancy-criminalization-report/
[72]
Jon Keegan and Dara Kerr. 2022. Online Abortion Pill Provider Hey Jane Used Tracking Tools That Sent Visitor Data to Meta, Google, and Others – The Markup. (2022). https://themarkup.org/pixel-hunt/2022/07/01/online-abortion-pill-provider-hey-jane-used-tracking-tools-that-sent-visitor-data-to-meta-google-and-others
[73]
Bridget G. Kelly and Maniza Habib. 2024. Missed period? The significance of period-tracking applications in a post-Roe America. 31, 4 (2024), 2238940. https://doi.org/10.1080/26410397.2023.2238940
[74]
Raman R Khanna, Sara G Murray, Timothy Wen, Kirsten Salmeen, Tushani Illangasekare, Nerys Benfield, Julia Adler-Milstein, and Lucia Savage. 2022. Protecting reproductive health information in the post-Roe era: interoperability strategies for healthcare institutions. Journal of the American Medical Informatics Association: JAMIA 30, 1 (Oct. 2022), 161–166. https://doi.org/10.1093/jamia/ocac194
[75]
Eleanor Klibanoff and William Melhado. 2024. Texas conservatives test how far they can extend abortion and gender-transition restrictions beyond state lines. (2024). https://www.texastribune.org/2024/02/09/texas-abortion-transgender-care-outside-state-borders/
[76]
Loren Kohnfelder and Praerit Garg. 1999. The threats to our products. https://shostack.org/files/microsoft/The-Threats-To-Our-Products.docx.
[77]
Sam Levin. 2022. She was jailed for losing a pregnancy. Her nightmare could become more common. (2022). https://www.theguardian.com/us-news/2022/jun/03/california-stillborn-prosecution-roe-v-wade
[78]
Ray Lewis. 2024. 16 AGs threaten Maine over bill impacting ’gender transition surgeries for children’. (2024). https://wpde.com/amp/news/nation-world/16-ags-threaten-maine-over-bill-impacting-gender-transition-surgeries-for-children-attorneys-general-texas-florida-kentucky-tennessee-and-west-virginia-ld-227-anna-perry-lisa-keim-gender-lgbtq-transgender
[79]
Ron Lieber and Tara Siegel Bernard. 2022. Payment Data Could Become Evidence of Abortion, Now Illegal in Some States. (2022). https://www.nytimes.com/2022/06/29/business/payment-data-abortion-evidence.html
[80]
Alan F. Luo, Noel Warford, Samuel Dooley, Rachel Greenstadt, Michelle L. Mazurek, and Nora McDonald. 2023. How Library IT Staff Navigate Privacy and Security Challenges and Responsibilities. (2023). https://osf.io/f589r/
[81]
Shefali Luthra. 2023. Could Facebook messages be used in abortion-related prosecution? https://19thnews.org/2023/07/abortion-laws-facebook-messages-digital-privacy/
[82]
Kenneth D. Mandl and Eric D. Perakslis. 2021. HIPAA and the Leak of “Deidentified” EHR Data. 384, 23 (2021), 2171–2173. https://doi.org/10.1056/NEJMp2102616
[83]
Nina Martin. 2014. A Stillborn Child, A Charge of Murder and the Disputed Case Law on ’Fetal Harm’. https://www.propublica.org/article/stillborn-child-charge-of-murder-and-disputed-case-law-on-fetal-harm
[84]
Sarah McCammon. 2023. Texas man sues ex-wife's friends for allegedly helping her get abortion pills. (2023). https://www.npr.org/2023/03/11/1162805773/texas-man-sues-abortion-pills
[85]
Nora McDonald and Nazanin Andalibi. 2023. “I Did Watch ‘The Handmaid's Tale’”: Threat Modeling Privacy Post-Roe in the United States. (2023).
[86]
Nora McDonald and Andrea Forte. 2020. The Politics of Privacy Theories: Moving from Norms to Vulnerabilities. In Proceedings of the 2020 CHI Conference on Human Factors in Computing Systems (2020-04-21). Association for Computing Machinery, 1–14. https://doi.org/10.1145/3313831.3376167 Place: New York, NY, USA.
[87]
Nora McDonald and Andrea Forte. 2021. Powerful Privacy Norms in Social Network Discourse. 5, 2 (2021).
[88]
Nora McDonald and Andrea Forte. 2022. Privacy and Vulnerable Populations. In Modern Socio-Technical Perspectives on Privacy, Bart P. Knijnenburg, Xinru Page, Pamela Wisniewski, Heather Richter Lipford, Nicholas Proferes, and Jennifer Romano (Eds.). Springer International Publishing, 337–363. https://doi.org/10.1007/978-3-030-82786-1_15
[89]
Nora McDonald, Rachel Greenstadt, and Andrea Forte. 2023. Intersectional Thinking about PETs: A Study of Library Privacy. 2023 (2023), 480–495. https://doi.org/10.56553/popets-2023-0064
[90]
Maryam Mehrnezhad and Teresa Almeida. 2021. Caring for Intimate Data in Fertility Technologies. In Proceedings of the 2021 CHI Conference on Human Factors in Computing Systems (CHI ’21). Association for Computing Machinery, 1–11. https://doi.org/10.1145/3411764.3445132 Place: New York, NY, USA.
[91]
Kelcie Moseley-Morris. 2023. Idaho Supreme Court upholds abortion ban, civil enforcement law • Idaho Capital Sun. https://idahocapitalsun.com/2023/01/05/idaho-supreme-court-upholds-abortion-ban-civil-enforcement-law/
[92]
Vivian Genaro Motti and Shlomo Berkovsky. 2022. Healthcare Privacy. In Modern Socio-Technical Perspectives on Privacy, Bart P. Knijnenburg, Xinru Page, Pamela Wisniewski, Heather Richter Lipford, Nicholas Proferes, and Jennifer Romano (Eds.). Springer International Publishing. https://doi.org/10.1007/978-3-030-82786-1
[93]
Suvda Myagmar, Adam J. Lee, and William Yurcik. 2005. Threat modeling as a basis for security requirements. In StorageSS ’05: Proceedings of the 2005 ACM workshop on Storage security and survivability.
[94]
Arvind Narayanan and Vitaly Shmatikov. 2007. How To Break Anonymity of the Netflix Prize Dataset. https://doi.org/10.48550/arXiv.cs/0610105 arXiv:cs/0610105 Issue: arXiv:cs/0610105.
[95]
Nicole Narea. 2022. Why was a Texas woman charged with murder over an abortion? https://www.vox.com/policy-and-politics/23021104/texas-abortion-murder-charge-starr-county
[96]
Alfred Ng. 2024. A company tracked visits to 600 Planned Parenthood locations for anti-abortion ads, senator says. https://www.politico.com/news/2024/02/13/planned-parenthood-location-track-abortion-ads-00141172
[97]
Helen Nissenbaum. 2004. Privacy as Contextual Integrity. 79, 1 (2004), 101–139.
[98]
Naomi Nix and Elizabeth Dwoskin. 2022. Search warrants for abortion data leave tech companies few options. (2022). https://www.washingtonpost.com/technology/2022/08/12/nebraska-abortion-case-facebook/
[99]
Charles Ornstein. 2022. Federal Patient Privacy Law Does Not Cover Most Period-Tracking Apps. https://www.propublica.org/article/period-app-privacy-hipaa
[100]
Justin Petelka, Lucy Van Kleunen, Liam Albright, Elizabeth Murnane, Stephen Voida, and Jaime Snyder. 2020. Being (In)Visible: Privacy, Transparency, and Disclosure in the Self-Management of Bipolar Disorder. 2020 (2020), 10.1145/3313831.3376573. https://doi.org/10.1145/3313831.3376573
[101]
Tessa Pieper. 2023. House passes bill that could establish Minnesota as a safe haven for reproductive health care - Session Daily - Minnesota House of Representatives. https://www.house.mn.gov/SessionDaily/Story/17831
[102]
Leslie J. Reagan. [n. d.]. When Abortion Was a Crime: Women, Medicine, and Law in the United States, 1867-1973, with a New Preface.
[103]
Neil Richards and Woodrow Hartzog. 2018. The Pathologies of Digital Consent. 96 (2018), 1461. https://heinonline.org/HOL/Page?handle=hein.journals/walq96&id=1499&div=&collection=
[104]
Office for Civil Rights (OCR). 2007. When does the Privacy Rule allow covered entities to disclose protected health information to law enforcement officials? https://www.hhs.gov/hipaa/for-professionals/faq/505/what-does-the-privacy-rule-allow-covered-entities-to-disclose-to-law-enforcement-officials/index.html
[105]
Office for Civil Rights (OCR). 2019. The access right, health apps, & APIs. https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access-right-health-apps-apis/index.html
[106]
Office for Civil Rights (OCR). 2022. HIPAA Privacy Rule and Disclosures of Information Relating to Reproductive Health Care. https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/phi-reproductive-health/index.html
[107]
Office for Civil Rights (OCR). 2022. Protecting the Privacy and Security of Your Health Information When Using Your Personal Cell Phone or Tablet. https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/cell-phone-hipaa/index.html
[108]
Office for Civil Rights (OCR). 2022. Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates. https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/hipaa-online-tracking/index.html Last Modified: 2024-03-18T18:00:15-0400.
[109]
Office for Civil Rights (OCR). 2023. HIPAA Privacy Rule Notice of Proposed Rulemaking to Support Reproductive Health Care Privacy Fact Sheet. https://www.hhs.gov/hipaa/for-professionals/regulatory-initiatives/hipaa-reproductive-health-fact-sheet/index.html
[110]
Erika L. Sabbath, Samantha M. McKetchnie, Kavita S. Arora, and Mara Buchbinder. 2024. US Obstetrician-Gynecologists’ Perceived Impacts of Post–Dobbs v Jackson State Abortion Bans. JAMA Network Open 7, 1 (Jan. 2024), e2352109. https://doi.org/10.1001/jamanetworkopen.2023.52109
[111]
Carolyn Said. 2022. Searches for ‘abortion pills’ are spiking. Here's how Google could use your search history against you. https://www.sfchronicle.com/tech/article/abortion-google-17275454.php
[112]
Runa Sandvik. 2023. How US police use digital data to prosecute abortions. https://techcrunch.com/2023/01/27/digital-data-roe-wade-reproductive-privacy/
[113]
Jayshree Sarathy, Sophia Song, Audrey Haque, Tania Schlatter, and Salil Vadhan. 2023. Don’t Look at the Data! How Differential Privacy Reconfigures the Practices of Data Science. In Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems. ACM, 1–19. https://doi.org/10.1145/3544548.3580791 Place: Hamburg Germany.
[114]
Alfred Schutz. 1967. The Phenomenology of the Social World. Northwestern University Press.
[115]
Carter Sherman. 2023. Idaho mother and son charged with kidnapping over out-of-state abortion. (2023). https://www.theguardian.com/us-news/2023/nov/01/idaho-mother-son-kidnap-charges-abortion
[116]
Carter Sherman. 2023. Texas lawyer asks abortion funds for details of every procedure since 2021. (2023). https://www.theguardian.com/world/2023/sep/28/texas-lawyer-abortion-ban-procedure-patient-information
[117]
Laura Shipp and Jorge Blasco. 2020. How private is your period?: A systematic analysis of menstrual app privacy policies. 2020, 4 (2020), 491–510. https://doi.org/10.2478/popets-2020-0083
[118]
Evelyne Shuster. 1997. Fifty Years Later: The Significance of the Nuremberg Code. 337, 20 (1997), 1436–1440. https://doi.org/10.1056/NEJM199711133372006
[119]
Lucy Simko, Ada Lerner, Samia Ibtasam, Franziska Roesner, and Tadayoshi Kohno. [n. d.]. Computer Security and Privacy for Refugees in the United States. In 2018 IEEE Symposium on Security and Privacy (SP) (2018-05). 409–423. https://doi.org/10.1109/SP.2018.00023
[120]
Molly Smith and Juno Mac. 2018. Revolting Prostitutes: The Fight for Sex Workers’ Rights. Verso.
[121]
Rock Stevens, Daniel Votipka, Elissa M. Redmiles, Colin Ahern, Patrick Sweeney, and Michelle L. Mazurek. 2018. The Battle for New York: A Case Study of Applied Digital Threat Modeling at the Enterprise Level. 621–637. https://www.usenix.org/conference/usenixsecurity18/presentation/stevens
[122]
Frank Swiderski and Window Snyder. 2004. Threat Modeling. Microsoft Press.
[123]
Paul Theurich, Josepha Witt, and Sebastian Richter. 2023. Practices and challenges of threat modelling in agile environments. 46, 4 (2023), 220–229. https://doi.org/10.1007/s00287-023-01549-5
[124]
Jia Tolentino. 2022. We’re Not Going Back to the Time Before Roe. We’re Going Somewhere Worse. (2022). https://www.newyorker.com/magazine/2022/07/04/we-are-not-going-back-to-the-time-before-roe-we-are-going-somewhere-worse
[125]
Emily Tseng, Rosanna Bellini, Yeuk-Yu Lee, Alana Ramjit, Thomas Ristenpart, and Nicola Dell. 2024. Data Stewardship in Clinical Computer Security:Balancing Benefit and Burden in Participatory Systems. Computer Supported Cooperative Work 8 (2024).
[126]
Hayley Tsukayama. 2023. A Year Since Dobbs, The Fight For Reproductive Privacy and Information Access Continues. https://www.eff.org/deeplinks/2023/06/year-dobbs-fight-reproductive-privacy-and-information-access-continues
[127]
Hayley Tsukayama. 2023. A Year Since Dobbs, The Fight For Reproductive Privacy and Information Access Continues. https://www.eff.org/deeplinks/2023/06/year-dobbs-fight-reproductive-privacy-and-information-access-continues
[128]
Mary Tuma. 2023. The First “Wrongful Death” Case for Helping a Friend Get an Abortion. (2023). https://theintercept.com/2023/04/26/abortion-wrongful-death-texas-lawsuit/
[129]
Remy Tumin. 2023. Pharmacies Shared Patient Records Without a Warrant, an Inquiry Finds. (2023). https://www.nytimes.com/2023/12/13/us/pharmacy-records-abortion-privacy.html
[130]
Christine Utz, Martin Degeling, Sascha Fahl, Florian Schaub, and Thorsten Holz. 2019. (Un)informed Consent: Studying GDPR Consent Notices in the Field. In Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security (CCS ’19). Association for Computing Machinery, 973–990. https://doi.org/10.1145/3319535.3354212 Place: New York, NY, USA.
[131]
Alanna Vagianos. 2024. Anti-Choice Group Tracked Planned Parenthood Visitors Using Phone Data. https://www.huffpost.com/entry/anti-choice-group-targeted-planned-parenthood-visitors-using-phone-data_n_65ccf7dce4b0087d43c8b3a8
[132]
Andrea Vittorio and Skye Witley. 2023. Abortion-Rights States Begin Shielding Digital Data Near Clinics. (2023). https://news.bloomberglaw.com/privacy-and-data-security/abortion-rights-states-begin-shielding-digital-data-near-clinics
[133]
Nina Wang, Allison McDonald, Daniel Bateyko, and Emily Tucker. 2022. American Dragnet | Data-Driven Deportation in the 21st Century. Center on Privacy & Technology at Georgetown Law (2022).
[134]
Noel Warford, Tara Matthews, Kaitlyn Yang, Omer Akgul, Sunny Consolvo, Patrick Gage Kelley, Nathan Malkin, Michelle L. Mazurek, Manya Sleeper, and Kurt Thomas. 2022. SoK: A Framework for Unifying At-Risk User Research. In 2022 IEEE Symposium on Security and Privacy (SP). 2344–2360. https://doi.org/10.1109/SP46214.2022.9833643
[135]
Mark Warner, Juan F. Maestre, Jo Gibbs, Chia-Fang Chung, and Ann Blandford. 2019. Signal Appropriation of Explicit HIV Status Disclosure Fields in Sex-Social Apps used by Gay and Bisexual Men. In Proceedings of the 2019 CHI Conference on Human Factors in Computing Systems (CHI ’19). Association for Computing Machinery, 1–15. https://doi.org/10.1145/3290605.3300922 Place: New York, NY, USA.
[136]
Gail Weiss, Gayle Salamon, Ann V. Murphy, Duane Davis, Lisa Guenther, Lewis R. Gordon, John D. Caputo, Kris Sealey, Mark Ralkowski, Natalie Cisneros, Kyle Whyte, Robert McRuer, George Yancy, Patricia Hill Collins, Rosalyn Diprose, Eduardo Mendieta, Alia Al-Saji, Charles W. Mills, Tamsin Kimoto, Debra Bergoffen, Shannon M. Mussett, Diane Perpich, Donald A. Landes, Ted Toadvine, Helen A. Fielding, Megan Burke, Mariana Ortega, David Morris, Moira Gatens, Dr Shiloh Whitney, Scott Marratto, Jenny Slatman, William McBride, Elena Ruiz, Rosemarie Garland-Thomson, Emily S. Lee, Lanei M. Rodemeyer, Joel Michael Reynolds, Shannon Sullivan, Jennifer McWeeny, Jack Reynolds, Linda Martin Alcoff, Lauren Guilmette, Sid Hansen, Axelle Karera, David Haekwon Kim, Keith Whitmoyer, Perry Zurn, Nancy J. Holland, Dorthea Olkowski, Talia Mae Bettcher, Kelly Oliver, Andrea Pitts, and Cynthia Willett. 2019. 50 Concepts for a Critical Phenomenology. Northwestern University Press.
[137]
Nicole Wetsman. 2022. The fall of Roe v. Wade shows how little control patients have over medical records. https://www.theverge.com/2022/6/29/23188211/medical-records-privacy-dobbs-roe
[138]
Tracey A. Wilkinson. 2022. Dr. Caitlin Bernard Was Meant to Write This With Me Before She Was Attacked for Doing Her Job. (2022). https://www.nytimes.com/2022/07/15/opinion/doctors-roe-v-wade-ohio-10-year-old.html
[139]
Jennifer Wright. 2019. The U.S. Is Tracking Migrant Girls’ Periods to Stop Them From Getting Abortions. (2019). https://www.harpersbazaar.com/culture/politics/a26985261/trump-administration-abortion-period-tracking-migrant-women/
[140]
Odette Yousef. 2024. How ’fetal personhood’ in Alabama's IVF ruling evolved from fringe to mainstream. (2024). https://www.npr.org/2024/03/14/1238102768/fetal-personhood-alabama-ivf
[141]
Cat Zakrzewski, Pransha Verma, and Claire Parker. 2022. Texts, web searches about abortion have been used to prosecute women. (2022). https://www.washingtonpost.com/technology/2022/07/03/abortion-data-privacy-prosecution/
[142]
Shoshana Zuboff. 2019. The Age of Surveillance Capitalism: The Fight for a Human Future at the New Frontier of Power (1 edition ed.). PublicAffairs.
[143]
Carleen Zubrzycki. 2022. The Abortion Interoperability Trap. The Yale Law Journal Forum 132 (Oct. 2022), 197–227. https://doi.org/10.2139/ssrn.4147900
Index Terms
- Threat Modeling Healthcare Privacy in the United States
Recommendations
Exploring Cost and Quality of Medicare in the United States using Analytics
In this research, the authors explore the association of cost and quality of care indicators for Medicare in the United States. Using analytics they offer a portfolio of influencing factors and geographic areas that are most and least expensive for ...
Releasing Individually Identifiable Microdata with Privacy Protection Against Stochastic Threat: An Application to Health Information
The ability to collect and disseminate individually identifiable microdata is becoming increasingly important in a number of arenas. This is especially true in health care and national security, where this data is considered vital for a number of public ...
Comments
Please enable JavaScript to view thecomments powered by Disqus.Information & Contributors
Information
Published In
EISSN:1557-7325
Table of ContentsCopyright © 2024 Copyright held by the owner/author(s).
Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].
Publisher
Association for Computing Machinery
New York, NY, United States
Publication History
Online AM: 18 November 2024
Accepted: 26 September 2024
Revised: 26 June 2024
Received: 07 November 2023
Check for updates
Author Tags
Qualifiers
- Research-article
Contributors
Other Metrics
Bibliometrics & Citations
Bibliometrics
Article Metrics
- 0Total Citations
- 172Total Downloads
- Downloads (Last 12 months)172
- Downloads (Last 6 weeks)155
Reflects downloads up to 09 Jan 2025
Other Metrics
Citations
View Options
Login options
Check if you have access through your login credentials or your institution to get full access on this article.
Sign in