Own Your Health Data

As the future of our healthcare system moves towards electronic healthcare records, we need patient data ownership rights to protect patient care.

4 Principles

1. Patients co-own or fully own every health data point about themselves.

2. Health data generated about the patient by a provider is co-owned by both parties.

3. Health data generated by the patient is fully owned by the patient with a right to possess, share, sell, or destroy.

4. All uses of a patients' health data shall be consented in advance by the patient, other than uses required by law.

We'd Like Your Feedback

We've mapped out the needs for owning your health data and have illustrated them to be digestible for policy makers and the general public. If you have any feedback, please share with hello@goinvo.com.

About GoInvo

GoInvo is a healthcare design company that crafts innovative digital and physical solutions. Our deep expertise in Health IT, Genomics, and Open Source health has delivered results for the National Institutes of Health, Walgreens, Mount Sinai, and Partners Healthcare.

Subscribe to our open source healthcare newsletter.


Annie Lakey Becker, GoInvo

Annie is a Mom, Product and Project Manager based in Seattle. Passionate about Public Health and systems, her background includes roles as an academic research scientist and patient-focused neurodiagnostic technologist. She has a BS in Public Health from the University of Washington and is completing a Masters in Public Health at UNC Chapel Hill.

Kim Nipp, GoInvo

Kim is a designer, illustrator, and animator specializing in scientific visualization. Originally trained in behavioural neuroscience at the University of British Columbia, Kim moved on to complete their Masters of Science in Biomedical Communications, an interdisciplinary graduate program for visual media design in science and medicine offered through the Faculty of Medicine at the University of Toronto.

Megan Hirsch, GoInvo

Megan is a designer-strategist that makes healthcare experiences enjoyable for patients and clinicians. She's dialing in her design and biology-trained eye to amplify her medical school experience in 2022. She joined Invo in 2021 with a BS in Human Biology from Stanford University.

Juhan Sonin, GoInvo

Juhan Sonin leads GoInvo with expertise in healthcare design and system engineering. He’s spent time at Apple, the National Center for Supercomputing Applications (NCSA), and MITRE. His work has been recognized by the New York Times, BBC, and National Public Radio (NPR) and published in The Journal of Participatory Medicine and The Lancet. He currently lectures on design and engineering at MIT.


Eric Benoit
Kathy Mikk
Harry Sleeper
Colleen Tang Poy


  1. Durcevik, S. 18 Examples of Big Data Analytics in Healthcare That Can Save People. 2020: https://www.datapine.com/blog/big-data-examples-in-healthcare/
  2. Price, N. D., Magis, A. T., Earls, J. C., Glusman, G., Levy, R., Lausted, C., McDonald, D. T., Kusebauch, U., Moss, C. L., Zhou, Y., Qin, S., Moritz, R. L., Brogaard, K., Omenn, G. S., Lovejoy, J. C., & Hood, L. (2017). A wellness study of 108 individuals using personal, dense, dynamic data clouds. Nature biotechnology, 35(8), 747–756: https://doi.org/10.1038/nbt.3870
  3. Felitti, V. J., Anda, R. F., Nordenberg, D., Williamson, D. F., Spitz, A. M., Edwards, V., Koss, M. P., & Marks, J. S. (1998). Relationship of childhood abuse and household dysfunction to many of the leading causes of death in adults. The Adverse Childhood Experiences (ACE) Study. American journal of preventive medicine, 14(4), 245–258: https://doi.org/10.1016/s0749-3797(98)00017-8
  4. Magnan S. Social Determinants of Health 101 for Health Care: Five Plus Five. Discussion Paper. October 9, 2017: https://nam.edu/social-determinants-of-health-101-for-health-care-five-plus-five/
  5. Liddell, K., Simon, D., & Lucassen, A. Patient Data Ownership: Who Owns Your Health?. Journal of Law and the Biosciences: https://doi.org/10.17863/CAM.68658
  6. Inau, E. T., Sack, J., Waltemath, D., & Zeleke, A. A. (2021). Initiatives, Concepts, and Implementation Practices of FAIR (Findable, Accessible, Interoperable, and Reusable) Data Principles in Health Data Stewardship Practice: Protocol for a Scoping Review. JMIR research protocols, 10(2), e22505: https://doi.org/10.2196/22505
  7. Beyan, O., Choudhury, A., Van Soest, J., Kohlbacher, O., Zimmermann, L., Stenzhorn, H., Karim, M.R., Dumontier, M., Decker, S., da Silva Santos, L.O., Dekker, A. Distributed Analytics on Sensitive Medical Data: The Personal Health Train. Data Intelligence. 2020 Jan;2(1-2):96–107: https://doi.org/10.1162/dint_a_00032
  8. Mifsud, M., Molines, M., Cases, A. S., & N'Goala, G. (2019). It's MY health care program: Enhancing patient adherence through psychological ownership. Social science & medicine (1982), 232, 307–315: https://doi.org/10.1016/j.socscimed.2019.05.015
  9. Rahimzadeh V. (2021). A Policy and Practice Review of Consumer Protections and Their Application to Hospital-Sourced Data Aggregation and Analytics by Third-Party Companies. Frontiers in big data, 3, 603044: https://doi.org/10.3389/fdata.2020.603044
  10. Kadakia, K. T., Howell, M. D., & DeSalvo, K. B. (2021). Modernizing Public Health Data Systems: Lessons From the Health Information Technology for Economic and Clinical Health (HITECH) Act. JAMA, 326(5), 385–386: https://doi.org/10.1001/jama.2021.12000
  11. Li, L., Novillo-Ortiz, D., Azzopardi-Muscat, N., & Kostkova, P. (2021). Digital Data Sources and Their Impact on People's Health: A Systematic Review of Systematic Reviews. Frontiers in public health, 9, 645260: https://doi.org/10.3389/fpubh.2021.645260
  12. Johnson, C., & Pylypchuck, Y. (2021). Use of Certified Health IT and Methods to Enable Interoperability by U.S. Non-Federal Acute Care Hospitals, 2019: https://www.healthit.gov/sites/default/files/page/2018-12/Methods-Used-to-Enable-Interoperability-among-U.S.-NonFederal-Acute-Care-Hospitals-in-2017_0.pdf
  13. Code of Massachusetts Regulations Title 243. 243 CMR 2.07(13), Licensing and the practice of medicine.((a)...A licensee shall maintain a medical record for each patient that is complete, timely, legible, and adequate to enable the licensee or any other health care provider to provider proper diagnosis and treatment….). April 2020: https://www.mass.gov/regulations/243-CMR-200-licensing-and-the-practice-of-medicine
  14. Code of Massachusetts Regulations Title 105. 105 CMR 130.370, Hospital licensure. ((a) A hospital shall maintain records of the diagnosis and treatment of patients under its care for the retention period specified). July 2017: https://www.mass.gov/regulations/105-CMR-13000-hospital-licensure
  15. George Washington University Health and the Law Project, Who Owns Medical Records: 50 State Comparison (2015): http://www.healthinfolaw.org/comparative-analysis/who-owns-medical-records-50-state-comparison
  16. Evans, B. J. (2011). Much ado about data ownership. Harvard Journal of Law & Technology, 25(1), 69-130.25 Harv. J. L. & Tech. 69 (2011-2012) Much Ado about Data Ownership: http://jolt.law.harvard.edu/articles/pdf/v25/25HarvJLTech69.pdf
  17. Contreras, J., Health Data Ownership, 94 NYU Law Review 624 (October 2019): https://www.nyulawreview.org/issues/volume-94-number-4/the-false-promise-of-health-data-ownership/
  18. Perzanowski, A., Schultz, J. The End of Ownership: Personal Property in the Digital Economy. Pub Res Q 34, 154–155 (2018): https://doi.org/10.7551/mitpress/10524.001.0001
  19. McGuire, A. L., Roberts, J., Aas, S., & Evans, B. J. (2019). Who Owns the Data in a Medical Information Commons?. The Journal of law, medicine & ethics : a journal of the American Society of Law, Medicine & Ethics, 47(1), 62–69: https://doi.org/10.1177/1073110519840485
  20. Wakabayashi, D. Google and the University of Chicago Are Sued Over Data Sharing, N. Y. Times, March 26, 2020: https://www.nytimes.com/2019/06/26/technology/google-university-chicago-data-sharing-lawsuit.html (last visited Feb 4, 2020)
  21. Bass, D., & Tozzi, J. (2021, February 11). U.S. Health Giants Form Startup to Share, Analyze Patient Data. Retrieved from: https://www.bloomberg.com/news/articles/2021-02-11/startup-truveta-links-u-s-health-systems-to-share-patient-data
  22. Ballantyne A. (2020). How should we think about clinical data ownership?. Journal of medical ethics, 46(5), 289–294: https://doi.org/10.1136/medethics-2018-105340
  23. https://www.iab.com/wp-content/uploads/2018/12/IAB_The-State-of-Data-2018_2018-12-05_Final.pdf, see page 5.: https://www.iab.com/wp-content/uploads/2018/12/IAB_The-State-of-Data-2018_2018-12-05_Final.pdf
  24. What is an electronic health record (ehr)? HealthIT.gov. (2019, September 10): https://www.healthit.gov/faq/what-electronic-health-record-ehr
  25. Bates, D., Heitmueller, A., Kakad, M., Saria, S. Why policymakers should care about “big data” in healthcare, Health Policy and Technology, Volume 7, Issue 2, 2018, Pages 211-216,ISSN 2211-8837: https://doi.org/10.1016/j.hlpt.2018.04.006
  26. Rodwin, M. A. (2010). Patient data: Property, privacy & the public interest. American Journal of Law & Medicine, 36(4), 586–618: https://doi.org/10.1177/009885881003600403
  27. Olive adopts aws as its preferred cloud provider to create the internet of healthcare. Retrieved August 19, 2021, from: https://www.prnewswire.com/news-releases/olive-adopts-aws-as-its-preferred-cloud-provider-to-create-the-internet-of-healthcare-301353815.html
  28. Health Information Privacy Division, O. for C. R. (OCR). (2016, January 5). Individuals' right under hipaa to access their health information. HHS.Gov.: https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/access/index.html
  29. Mirchev, M., Mircheva, I., & Kerekovska, A. (2020). The Academic Viewpoint on Patient Data Ownership in the Context of Big Data: Scoping Review. Journal of medical Internet research, 22(8), e22214: https://doi.org/10.2196/22214
  30. Milne, R., Sorbie, A., & Dixon-Woods, M. (2021). What can data trusts for health research learn from participatory governance in biobanks?. Journal of medical ethics, medethics-2020-107020. Advance online publication: https://doi.org/10.1136/medethics-2020-107020
  31. Kostyack P. T. (2002). The emergence of the Healthcare Information Trust. Health matrix (Cleveland, Ohio : 1991), 12(2), 393–447: https://scholarlycommons.law.case.edu/cgi/viewcontent.cgi?article=1419&context=healthmatrix
  32. Rosenbaum, S. (2010), Data Governance and Stewardship: Designing Data Stewardship Entities and Advancing Data Access. Health Services Research, 45: 1442-1455: https://doi.org/10.1111/j.1475-6773.2010.01140.x
  33. Hibbard, J. H., & Greene, J. (2013). What the evidence shows about patient activation: better health outcomes and care experiences; fewer data on costs. Health affairs (Project Hope), 32(2), 207–214: https://doi.org/10.1377/hlthaff.2012.1061