I’d like to see HIPAA-style audit log and review for surveillance products like Flock. An aspect of log reviews that I don’t have direct info about is contextual access alerts—the gist of it is that whatever record you access is evaluated for things like patients who live in your neighborhood, or are related to you and it pings the compliance office.

Clearly Flock etc are keeping pretty good access records or these stories couldn’t get written. What is missing is PD compliance offices proactively addressing inappropriate accesss. In addition to access monitoring, another aspect of HIPAA is that a patient can find out who has accessed their record. It makes sense that a tremendously powerful data collection would have similar rules of the road.