LDIvideo's video: Why HIPAA Isn t Enough

The United State's lack of a comprehensive federal data privacy policy covering both health and consumer information is making both less and less secure, says a new University of Pennsylvania paper that lays out a new Ethical Data Practices Framework designed as a foundation on which federal data privacy legislation can be based. The paper cites an emerging consensus that existing privacy and data protection laws offer individuals insufficient protections against harms stemming from current data practices. To inform policy in this area, the Penn researh team proposes the Ethical Data Practices framework that outlines six principles relevant to the collection and use of personal data: minimizing harm, fairly distributing benefits and burdens, respecting autonomy, transparency, accountability, and inclusion.