In general, digital safety and privacy is a major concern in our contemporary world. This is particularly true when it comes to medical records and data. Because medical data can be particularly personal, there are a number of robust legal frameworks in place to protect medical data. The California Department of Developmental Services (“DDS”) is required to comply with all federal and state laws related to digital safety and privacy. In addition to DDS efforts to safeguard your data, it is important to be proactive about taking steps on your own. Digital safety and privacy for families and individuals participating in DDS is an important consideration.

What Laws Protect My Data?

At the federal level, the Health Insurance Portability and Accountability Act (“HIPAA”) established stringent requirements for protecting peoples’ medical and health-related digital data.

Adding to the protections afforded by HIPAA, the California Center for Data Insights and Innovation (“CDII”) works to ensure statewide compliance with HIPAA and other digital data privacy laws.

Finally, DDS itself maintains strict policies to ensure digital safety and privacy for families and individuals alike. This includes:

• DDS must give all participants a Notice of Privacy Practices.
• DDS must obtain your consent before sharing any of your personal data.
• DDS is not allowed to disclose anyone’s immigration status.

What Rights Do I Have?

Additionally, you have a number of rights related to your information. Specifically, you have the right to request your records at any time. Similarly, you have the right to request an “accounting of disclosures.” This is a comprehensive record of any disclosures DDS has ever made of any of your data.

Finally, if you believe DDS has violated your digital safety and privacy rights, you have the right to file a complaint to open an investigation.

Tips for Digital Safety and Privacy

Following are some go-to tips for maintaining digital safety and privacy.

First, always be careful about what personal details you share online. Information like your Social Security number, address, or medical details should only be given to trusted professionals, such as your DDS service coordinator or approved vendors.

Similarly, always use strong passwords. The best option is to use a digital privacy application to generate random passwords. Additionally, never reuse the same one across multiple accounts.

You should also enable two-step verification when available. This adds an additional layer of security.

Finally, be aware of scams and phishing emails. These often look like official messages but may ask you to click a suspicious link or download an attachment. DDS and regional centers will never ask for sensitive information through email or text. If you’re unsure whether a request is legitimate, contact your regional center directly before sharing any information.