The Fund supports networks of state health policy decision makers to help identify, inspire, and inform policy leaders.
A bipartisan group of state health policymakers from both the executive and legislative branches who are focused on improving population health.
Networks of state officials, advocates, and others aiming to invest in and transform primary care.
A program dedicated to advancing state-based efforts to make health care more affordable for residents, employers, and states.
The Milbank Memorial Fund supports two state leadership programs for legislative and executive branch state government officials committed to improving population health.
A leadership development program for early and mid-career state government officials who are committed to improving the health of all people in their communities.
A leadership program for senior state government officials who are committed to improving population health.
The Fund focuses on creating an affordable health care system built on strong primary care and partnerships that improve health outcomes for all.
Improving state leaders’ ability to enact and implement evidence-based health policies.
Advancing policies that create a more prevention- and primary care-oriented health system.
Improving population health through policies that contain health care cost growth.
Our state health policy resources offer relevant data analysis and best practices.
The Fund publishes reports, issues briefs, and case studies on state health policy issues.
Short takes on health policy issues from Milbank staff and guest authors.
Insights from Milbank President Debra Lubar on state health policymaking.
Reported articles and Q&As on timely health policy issues, as well as foundation updates.
Milbank Memorial Fund and Milbank Quarterly webinars featuring state health policymakers and researchers.
Updates and expert contact information for reporters.
The Milbank Memorial Fund is a private foundation that works to improve population health and health equity.
December 2020 (Volume 98)
Quarterly Article
I. Glenn Cohen
Sara Gerke
Daniel B. Kramer
Sep 17, 2026
Sep 14, 2026
Sep 9, 2026
Back to The Milbank Quarterly
Policy Points:
Context: Millions of life‐sustaining implantable devices collect and relay massive amounts of digital health data, increasingly by using user‐downloaded smartphone applications to facilitate data relay to clinicians via manufacturer servers. Whether patients have either legal or normative claims to data collected by these devices, particularly in the raw, granular format beyond that summarized in their medical records, remains incompletely explored.
Methods: Using pacemakers and implantable cardioverter‐defibrillators (ICDs) as a clinical model, we outline the clinical ecosystem of data collection, relay, retrieval, and documentation. We consider the legal implications of US and European privacy regulations for patient access to either summary or raw device data. Lastly, we evaluate ethical arguments for or against providing patients access to data beyond the summaries presented in medical records.
Findings: Our analysis of applicable health privacy laws indicates that US patients may have little access to their raw data collected and held by device manufacturers in the United States under the Health Insurance Portability and Accountability Act Privacy Rule, whereas the EU General Data Protection Regulation (GDPR) grants greater access to device‐collected data when the processing of personal data falls under the GDPR’s territorial scope. The California Consumer Privacy Act, the “little sister” of the GDPR, also grants greater rights to California residents. By contrast, our normative analysis argues for consistently granting patients access to the raw data collected by their implantable devices. Smartphone applications are increasingly involved in the collection, relay, retrieval, and documentation of these data. Therefore, we argue that smartphone user agreements are an emerging but potentially underutilized opportunity for clarifying both legal and ethical claims for device‐derived data.
Conclusions: Current health privacy legislation incompletely supports patients’ normative claims for access to digital health data.
Keywords: health policy, implantable cardioverter-defibrillators, pacemakers, HIPAA, GDPR.
Read on Wiley Online Library