19th Post - The end of HIPPA and rise of DRS (Designated Record Set)

 I had a feeling this was happening to the American people behind our backs and now I have enough information to provide you the truth about what companies are secretly doing behind our backs to acquire our HIPPA protected heath information and provide a decent theory on how this actually taking place via loopholes in the system that was originally designed to keep our information private and safe. I am a whistleblower in this situation and am committed to uncovering the truth behind what is taking place here and warn others as well, it's my duty with this posting to reveal the truths I have found and share the sources of information so you can connect the dots to reveal the bigger picture yourself. 

First let's discuss background check companies and their role in this picture, my most recent employer PepsiCo or Frito-Lay North America (or possibly "Rolling Frito-Lay Sales, LP", the pay stub confirmed this third party entity...) The check was done by Sterling Check - here is the link to the list of technical information they seek here Legal & Technical - Sterling Privacy (sterlingcheck.com) - The most alarming in this list is "Data concerning sex life or sexual orientation" and "biometric data" but I'm going to focus on the "sex life" topic for this one because seriously this is first and foremost NOTHING an employer should be able to find out about you as an individual, so the question is how exactly do they acquire information on your personal sex life or orientation? Well, I think you know where this heading... HIPPA might contain some of that information, wouldn't it? It's not surprising that background check companies are seeking the most information possible about you just like Data Brokers on the internet are seeking any and all information about you as well... The biggest chunk of information that companies do want is your healthcare information and PepsiCo sent me a letter explaining a little bit about how they manage to do this. So let's begin.

In the 8 page letter from PepsiCo titled NOTICE OF PRIVACY PRACTICES the key word that popped out of those pages were "Designated Record Set" or DRS and in this letter it's constantly referenced in regards to "The Health Plan" and in my case this happens to be Kaiser Permanente (allegedly, but that's the plan I selected when signing up for Benefits..) PHI is consistently referred to and the DRS within the "Health Plan", this document basically also states in various ways your inability to "know" what's in your DRS record and how exactly they are going to limit your ability to know. Any "disclosures" taking place with your information you don't have the right to know about, not to mention the rights giving them the ability to basically refuse a request done via a "specific form" which is vague and also no information is provided on how to get that form in general, it's basically a mystery form that the "Plan Sponsor" or "Business Associate" that would have information on. Now these two entities are interesting here it's stated basically that the DRS takes priority over the PHI because "the Health Plan determines the information to be accurate or complete". Let that one sink in. 

Now here's what I found when looking into the DRS Defining the Medical Record: Relationships of the Legal Medical Record, the Designated Record Set, and the Electronic Health Record (ahima.org) This article is a wealth of information regarding the EHR systems and the role DRS's play with our information. It's as if two systems exist one private and one more public that companies would be interested in... 

Microsoft Word - EHI Task Force Report Revision v1.docx (ahima.org) Another explaining all the data being dismantled from HIPPA, this is insane what all is being sought after... 

Next here's the list of the information items captured United States Core Data for Interoperability (USCDI) | Interoperability Standards Advisory (ISA) (healthit.gov) the USCDIv5 is the present standard of information being potentially recorded into the DRS systems and what's more alarming in the prior link is the use of "aliases" and for the sake of providing an example PepsiCo assigns what is called a GPID to each employee, that GPID could be the "alias" in the DRS to possibly cover up your PHI but still be known to the employer (remember earlier when I told you about the other companies..)? GPID? What about Personell ID to BOOT!?! Has the loophole has been found and a possible ploy to cover up the digging? While the USCDI aims to provide interoperability and data exchange, it also raises privacy concerns due to the extensive amount of information it encompasses. 

Let's go back again to Sterling and the background check companies doing the digging on us and raise some important questions. What is the relationship between a company like Sterling and the DRS? Who are the middle players in this game of information? How does the flow of information look like in getting back to the employer? Who is the "personal representative"? Why is there a specific focus on "Research"? Why is there a focus on "Military Activity and National Security" clause in this 8-page document? Why do they retain the ability to "consider" and attempt to accommodate reasonable requests? I could keep going with questions but I'm sure at this point you now have some of your own. 

Do you see the bigger picture now? Now this is just the tip of the iceberg here... There's more information I have found online in regard to how this practice takes place, but my purpose here is to provide the basics I have uncovered thus far in connecting the dots and raising awareness. 

DRS: Straightforward Questions and Answers | Impact Advisors (impact-advisors.com)

lu07_ahima.pdf (indianhills.edu)

Microsoft Word - EHI Task Force Report Revision v1.docx (ahima.org)

Just more proof that I'm right here... 

***if an AirTag magically got you here, remember THAT! YOU are VERY IMPORTANT!!!.***

***EDIT: 10:24PM PCT - Dismiss the AirTag comment anymore, the chatter has spoken...***

This now brings up another topic of a ScreenShot I took from my own records, a "Generic Provider" was listed as notating in my records, ummm anyone who works healthcare systems KNOWS a NAME MUST BE LISTED to WHOM PUT WHAT IN THERE, there's NO ANON providers in EPIC/MyChart and I called that out when I caught it!!! IM NOW CALLING IT OUT AGAIN!!!