<!-- BaNnErBlUrFlE-BoDy-start -->
<!-- Preheader Text : BEGIN -->
<div style="display:none !important;display:none;visibility:hidden;mso-hide:all;font-size:1px;color:#ffffff;line-height:1px;max-height:0px;opacity:0;overflow:hidden;">
At least in the U. S. , patients only have the rights to access their imaging data under HIPAA, and the provider retains ownership of the actual data. My understanding is that as long as the data is de-identified, patient consent is not required</div>
<!-- Preheader Text : END -->
<!-- Email Banner : BEGIN -->
<div style="display:none !important;display:none;visibility:hidden;mso-hide:all;font-size:1px;color:#ffffff;line-height:1px;max-height:0px;opacity:0;overflow:hidden;">ZjQcmQRYFpfptBannerStart</div>
<!--[if ((ie)|(mso))]>
<table border="0" cellspacing="0" cellpadding="0" width="100%" style="padding: 0px 0px 10px 0px; direction: ltr" lang="en"><tr><td>
<table border="0" cellspacing="0" cellpadding="0" style="padding: 0px 8px 6px 8px; width: 100%; border-radius:4px; border-top:4px solid #8c8e91;background-color:#cfd3d7;"><tr><td valign="top">
<table align="left" border="0" cellspacing="0" cellpadding="0" style="padding: 0px 8px 4px 8px; font-size: 12px; line-height: 16px">
<tr><td style="color:#000000; font-family: 'Arial', sans-serif; font-weight:bold; font-size:14px; line-height: 20px; direction: ltr">
This Message Is From an External Sender
</td></tr>
<tr><td style="color:#000000; font-weight:normal; font-family: 'Arial', sans-serif; font-size:12px; direction: ltr">
This message came from outside your organization.
</td></tr>
</table>
<![if ie]><br clear="all"><![endif]>
<table align="right" border="0" cellspacing="0" cellpadding="0" style="padding: 0px 0px 4px 0px; font-size: 14px; line-height: 36px"><tr>
<td style="direction: ltr"> <a target="_blank" href="https://us-phishalarm-ewt.proofpoint.com/EWT/v1/KGKeukY!vwQck6ZtD6YgJRdwH87lWZrYmRaTn08EXwaLFluxmkmv-vM0_22Ps6wlWfHNyGYQSDyYVGRwb-nbx7U6EXLE2yJNTQ7JsrQgSpLrxMazM3wJhOWTavgjDqFya7U2vDZWpAeQP80UOTnBj54H-F-X-fLqwjgCvPNoDw$" style="mso-padding-alt: 7px; padding: 7px; border-radius: 2px; border: 1px solid #666666; "><strong style="font-weight: normal; color: #000000; text-decoration: none; font-family: 'Arial', sans-serif; font-size: 14px;"> Report Suspicious </strong></a> </td>
</tr></table>
</td></tr></table>
</td></tr></table>
<![endif]-->
<![if !((ie)|(mso))]>
<div dir="ltr" lang="en" id="pfptBannerd0bj65z" style="all: revert !important; display:block !important; text-align: left !important; margin: 0 0 10px 0 !important; padding:7px 16px 8px 16px !important; border-radius: 4px !important; min-width: 200px !important; background-color: #cfd3d7 !important; background-color: #cfd3d7; border-top: 4px solid #8c8e91 !important; border-top: 4px solid #8c8e91;">
<div id="pfptBannerd0bj65z" style="all: unset !important; float:left !important; display:block !important; margin: 1px 0 1px 0 !important; max-width: 600px !important;">
<div id="pfptBannerd0bj65z" style="all: unset !important; display:block !important; visibility: visible !important; background-color: #cfd3d7 !important; color:#000000 !important; color:#000000; font-family: 'Arial', sans-serif !important; font-family: 'Arial', sans-serif; font-weight:bold !important; font-weight:bold; font-size:14px !important; line-height:1.29 !important; line-height:1.29">
This Message Is From an External Sender
</div>
<div id="pfptBannerd0bj65z" style="all: unset !important; display:block !important; visibility: visible !important; background-color: #cfd3d7 !important; color:#000000 !important; color:#000000; font-weight:normal; font-family: 'Arial', sans-serif !important; font-family: 'Arial', sans-serif; font-size:12px !important; line-height:1.5 !important; line-height:1.5; margin-top:2px !important;">
This message came from outside your organization.
</div>
</div>
<div id="pfptBannerd0bj65z" style="all: unset !important; float: right !important; display: block !important; display: block; margin-left: 16px !important; margin-top: 1px !important; text-align: right !important; width: fit-content !important; font-size: 12px !important">
<a id="pfptBannerd0bj65z" href="https://us-phishalarm-ewt.proofpoint.com/EWT/v1/KGKeukY!vwQck6ZtD6YgJRdwH87lWZrYmRaTn08EXwaLFluxmkmv-vM0_22Ps6wlWfHNyGYQSDyYVGRwb-nbx7U6EXLE2yJNTQ7JsrQgSpLrxMazM3wJhOWTavgjDqFya7U2vDZWpAeQP80UOTnBj54H-F-X-fLqwjgCvPNoDw$"
style="all: unset !important; display: inline-block !important; text-decoration: none">
<div class="pfptPrimaryButtond0bj65z" style="display: inline-block !important; display: inline-block; visibility: visible !important; opacity: 1 !important; color: #000000 !important; color: #000000; font-family: 'Arial', sans-serif !important; font-family: 'Arial', sans-serif; font-size: 14px !important; font-weight: normal !important; text-decoration: none !important; border-radius: 2px !important; margin-top: 3px !important; margin-bottom: 3px !important; margin-left: 16px !important; padding: 7.5px 16px !important; white-space: nowrap !important; width: fit-content !important;
border: 1px solid #666666">
Report Suspicious
</div>
</a>
</div>
<div style="clear: both !important; display: block !important; visibility: hidden !important; line-height: 0 !important; font-size: 0.01px !important; height: 0px"> </div>
</div>
<![endif]>
<div style="display:none !important;display:none;visibility:hidden;mso-hide:all;font-size:1px;color:#ffffff;line-height:1px;max-height:0px;opacity:0;overflow:hidden;">ZjQcmQRYFpfptBannerEnd</div>
<!-- Email Banner : END -->
<!-- BaNnErBlUrFlE-BoDy-end -->
<html>
<head><!-- BaNnErBlUrFlE-HeAdEr-start -->
<style>
#pfptBannerd0bj65z { all: revert !important; display: block !important;
visibility: visible !important; opacity: 1 !important;
background-color: #cfd3d7 !important;
max-width: none !important; max-height: none !important }
.pfptPrimaryButtond0bj65z:hover, .pfptPrimaryButtond0bj65z:focus {
background-color: #adb0b4 !important; }
.pfptPrimaryButtond0bj65z:active {
background-color: #8c8e91 !important; }
html:root, html:root>body { all: revert !important; display: block !important;
visibility: visible !important; opacity: 1 !important; }
</style>
<!-- BaNnErBlUrFlE-HeAdEr-end -->
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
At least in the U.S., patients only have the rights to access their imaging data under HIPAA, and the provider retains ownership of the actual data. My understanding is that as long as the data is de-identified, patient consent is not required at all for the
provider to sell it.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I recalled this pre-AI article (<a href="https://urldefense.com/v3/__https://www.auntminnie.com/imaging-informatics/advanced-visualization/article/15609566/patients-can-be-identified-based-on-3d-reconstructions__;!!KGKeukY!2ZziBAuty3fhstZQYoQVMvS9hUdQ1QATPTTYWAG7AZurJiV80t0mZnT-lG1ByrR4bErMJ7eL42L-47n3FnkFYsCS7pJgYDfayXcfnfjzF5venPdF$" title="https://www.auntminnie.com/imaging-informatics/advanced-visualization/article/15609566/patients-can-be-identified-based-on-3d-reconstructions">AuntMinnie
write up here</a>) about facial recognition from 3D surface renderings using CT. There probably is potential for an AI algorithm to do a far better job than humans at matching a photo/video to a 3D rendering. The theoretical risk for harm would be greater
if the de-identified CT were readily linked to more health information from an EHR.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
As with other AI-related legal questions (like liability for missed cancers in AI-only screening), the legal and ethical frameworks are still lagging behind rapid commercial development.</div>
<div id="Signature">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0in;">
<span style="font-family: Calibri, sans-serif; font-size: 12pt; color: rgb(36, 36, 36);"><b>-----</b></span></p>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0in;">
<span style="font-family: Calibri, sans-serif; font-size: 12pt; color: rgb(36, 36, 36);"><b>Jayse M. Weaver, Ph.D.</b></span><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(36, 36, 36);"> (he/him)</span></p>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0in;">
<span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(36, 36, 36);">Associate Physicist – Diagnostic Services Medical Physics</span></p>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0px 0in;">
<span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(36, 36, 36);">Assistant Professor – Diagnostic Radiology and Nuclear Medicine</span></p>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0in;">
<span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 176, 80);">Rush University Medical Center</span></p>
<p style="text-align: left; text-indent: 0px; background-color: white; margin: 0in;">
<span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(36, 36, 36);"><img alt="RUSH" id="x_x_x_2759ec63-4e03-4539-8815-7f1ba93aa058" width="182" height="40" style="width: 1.9in; height: 0.425in; max-width: 722px; min-width: auto; min-height: auto; margin: 0px;" data-outlook-trace="F:1|T:1" src="cid:12bbe598-2e23-4451-a302-66ecab090f68"></span></p>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</div>
<div><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr style="display: inline-block; width: 98%;">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<b>From:</b> Intl_dxmedphys_wd_osu_list <intl_dxmedphys_wd_osu_list-bounces@lists.osu.edu> on behalf of Bob Pizzutiello via Intl_dxmedphys_wd_osu_list <intl_dxmedphys_wd_osu_list@lists.osu.edu><br>
<b>Sent:</b> Tuesday, May 26, 2026 2:00 PM<br>
<b>To:</b> intl_dxmedphys_wd_osu_list@lists.osu.edu <intl_dxmedphys_wd_osu_list@lists.osu.edu><br>
<b>Subject:</b> [Intl_DxMedPhys] Who owns patient image data? </div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-size: 11pt;">Rush Email Security<br>
<br>
This email originated from outside of RUSH. Do not click links or attachments unless you recognize the sender and know that the content is safe. RUSH will never ask for user ID information via email.<br>
<br>
I have heard that some big data companies are looking to purchase deidentified image and possibly EMR data from hospitals and imaging centers.<br>
<br>
Who actually owns this data? It seems to me that patients pay for the imaging service and should have some or full ownership, but perhaps there is fine print in the release forms that assign ownership elsewhere.<br>
<br>
I have some uneasiness about this, since huge companies could arguably develop tech to identify individuals, and enable nefarious use of that data.<br>
<br>
Does anyone know?<br>
<br>
Thanks<br>
Bob<br>
>From Bob Pizzutiello, typos courtesy iPhone<br>
</div>
</body>
</html>