Patients: All my best tips on how to opt out of data sharing

October 15, 2026 admin 12 Views 0 Comments

<!– Creative Commons Attribution-NonCommercial-NoDerivatives https://creativecommons.org/licenses/by-nc-nd/4.0/ –> <h1>Patients: All my best tips on how to opt out of data sharing</h1> By <a href=”https://calmatters.org/author/alex-rosenblat/” title=”Posts by Alex Rosenblat” class=”author url fn” rel=”author”>Alex Rosenblat</a>, CalMatters <figure> <img width=”1200″ height=”800″ src=”https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?fit=1200%2C800&ssl=1″ class=”attachment-post-thumbnail size-post-thumbnail wp-post-image” alt=”Illustration of a patient standing in the middle of a maze which spells out the words "opt out"; there are multiple signs pointing to different directions with written phrases like "call compliance," "contact medical records," "visit notary," and "mail letter"” decoding=”async” loading=”lazy” srcset=”https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?w=2000&ssl=1 2000w, https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?resize=300%2C200&ssl=1 300w, https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?resize=1024%2C683&ssl=1 1024w, https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?resize=768%2C512&ssl=1 768w, https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?resize=1536%2C1025&ssl=1 1536w, https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?resize=1200%2C800&ssl=1 1200w, https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?resize=780%2C520&ssl=1 780w, https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?resize=400%2C267&ssl=1 400w, https://i0.wp.com/calmatters.org/wp-content/uploads/2026/10/101326-OPT-OUT-SIDEBAR-GH-CM.jpg?fit=1200%2C800&ssl=1&w=370 370w” sizes=”auto, (max-width: 1200px) 100vw, 1200px” /> <figcaption>Illustration by Gabriel Hongsdusit, CalMatters</figcaption> </figure> This story was originally published by <a href=”https://calmatters.org/”>CalMatters</a>. <a href=”https://calmatters.org/subscribe-to-calmatters/”>Sign up</a> for their newsletters. CalMatters and The Markup’s reporting has found that opting out of data sharing is <a href=”https://themarkup.org/privacy/2026/05/27/opt-out-dark-patterns”>much more difficult than it needs to be</a> because deceptive designs or “dark patterns” make it more work to say no than to say yes. Research has found that <a href=”https://pmc.ncbi.nlm.nih.gov/articles/PMC9960046/”>when given the choice</a>, people prefer to have <a href=”https://pubmed.ncbi.nlm.nih.gov/23184192/”>more fine-grained control</a> over how their medical data is shared or used.  In the last year, I registered as a patient at 25 clinics and hospitals across seven states and spent hundreds of hours reviewing consent forms, privacy policies and marketing forms to see whether I could actually opt out of sharing my data. Sometimes, opting out was simple. Other times — like in <a href=”https://calmatters.org/economy/technology/2026/10/mychart-health-data-opt-out-epic-notary-hipaa/”>our most recent reporting</a> on MyChart and University Hospitals in Ohio — the process was extremely convoluted. For patients that are interested in opting out, here are my best tips to get started:  <ol> <li>Get the forms in advance. A provider’s office will often send you a link 24 to 48 hours in advance of your appointment. Sometimes, you can download them off a hospital website. I usually search online for keywords like “consent forms + hospital name.” Getting the forms early means you can take many of the steps below at home, instead of under time pressure immediately before your appointment. </li> <li>Nice to have: Keep a dedicated phone number and email address for health visits. It’s not always possible, but if you can, get a dedicated phone number such as through <a href=”https://workspace.google.com/products/voice/”>Google Voice</a>’s free plan or the <a href=”https://www.burnerapp.com/”>paid Burner app</a>. Set up a new email inbox just for healthcare appointments, such as with Gmail or Proton Mail. When filling out contact information for appointments or creating a patient portal account, use your dedicated phone number and email address. This step makes it easier for you to track all the forms health providers send you, and potentially, to track your data trail in the future. </li> <li>Use the screen recorder already installed on your phone, computer or tablet to record your screen as you read through the forms, so you have a copy of what you sign. Here are instructions for <a href=”https://support.apple.com/en-us/102653″>iPhones and tablets</a> and <a href=”https://support.google.com/android/answer/9075928?hl=en”>Android devices</a>. On a Mac computer, press Command + Shift + 5 and select the Record button (looks like a bullseye). </li> <li>Read or skim for specific terms like opt-out, withdraw consent, restrict, refuse, responsibility, optional, authorization. </li> <li>Read or skim the privacy policy for clues about what instructions to follow to opt out. Every healthcare provider should have a privacy policy. Sometimes, a privacy policy will give you the email address or phone number of who to contact to opt out of sharing your data. You can contact them ahead of your appointment to try and opt out. </li> <li>Arrive early to your appointment. Like 45 minutes early. Politely request paper forms. On paper workflows, you can skip ahead without being forced to engage with voluntary forms that are bundled in with required forms. Many privacy-conscious patients also try to cross out terms they disagree with, which they date and initial. But keep in mind, some forms explicitly note that changes to those forms are not binding. </li> <li>Take photos or videos of the forms you sign. And when you return the forms to a receptionist, politely ask them to provide you with a photocopy of your signed and completed forms. <a href=”https://www.statnews.com/2023/04/07/medical-data-privacy-phreesia/”>Keeping your own records</a> is important, and sometimes <a href=”https://themarkup.org/hello-world/2025/07/19/patient-data-use”>obtaining them later can be a kafkaesque</a> process. </li> <li>If you are struggling to get a copy of a form you filled out, or if there are terms you’d like to opt out of but you can’t figure out how, try politely asking the front desk or a provider how to proceed. If they do not know, try the following: <ol> <li>At a smaller clinic: Ask the front desk who you can speak to about “patient administrative records” or “clinic management.” They probably aren’t on site, but you should be able to get a person or a department’s name and an email or phone number. </li> <li>At a bigger clinic or hospital: Look for the “HIPAA Compliance” or ethics office or department on their website. When you find their phone number or email, call and leave a message (it is very unlikely someone will pick up the phone). By email, write to them about your concern, provide a copy of or describe what the terms are and explain that you would like to opt out, or ask them for the opt-out instructions. </li> </ol> </li> <li>If none of the above works, one more place you can try is the “medical records” department at many hospitals. That work may be outsourced to another company. Get the name and contact of the department or the company by asking at an information desk. Then ask the medical records contact how you can opt-out. </li> <li>Email me if you get stuck, or have questions. I might not know the answer, but I might be able to help you strategize to get it. Or, if you figure something out that unlocks an opt-out, I’d be glad to hear about it! <a href=”mailto:arosenblat@calmatters.org”>arosenblat@calmatters.org</a> </li> <li>If you think your rights have been violated, <a href=”https://www.hhs.gov/civil-rights/filing-a-complaint/complaint-process/index.html”>submit a complaint</a> to the Office for Civil Rights at the U.S. Department of Health and Human Services. Peter Swire, the White House coordinator for the HIPAA privacy rule under President Bill Clinton, recommends involving HIPAA enforcers to weigh in on practices. “You can bring complaints when you’re only 80% sure. A complaint is a complaint. Then, they’re supposed to look at it with their expertise,” he said. HHS can issue guidance or address enforcement concerns through their FAQ page in response.</li> </ol> This article was <a href=”https://calmatters.org/economy/technology/2026/10/tips-how-to-opt-out-of-data-sharing/”>originally published on CalMatters</a> and was republished under the <a href=”https://creativecommons.org/licenses/by-nc-nd/4.0/”>Creative Commons Attribution-NonCommercial-NoDerivatives</a> license.

Source link

You May Also Like

Leave a Reply Cancel reply