What is the difference between privacy and security when it comes to digital healthcare?
People often lump privacy and security together. The reality is that while a digital healthcare platform may be secure, it doesn’t necessarily mean it protects your privacy or is compliant with privacy regulations. So when you come across software/platforms that say they are “end-to-end” encrypted, you might think: ”ok, that is the highest level of security, therefore it should be safe for me to use it and talk about my patient’s personal health information on it.” This may not be the case. When WhatsApp updated their privacy policy, many people fled to Signal and other end-to-end encrypted messengers. However, many don’t necessarily know the nuanced differences between WhatsApp, Telegram, Signal, iMessage, and a whole host of other options out there.
In short:
Security and privacy are not the same thing.
We interviewed healthcare privacy and security experts Patrick Lo (CEO at Privacy Horizon, instructor of multiple privacy and security programs and courses) and Brendan Seaton (CCO at Privacy Horizon, who has trained over 1000 privacy officers and specialists), to unravel this super technical world for us in plain language.
Brendan: “When you are dealing with security, you are asking how you protect the information; when you are dealing with privacy, you are asking how you use the information. For example, as a user you might have full access and authorization on an application , what do you use that data for? Are you using the data in a way that’s consistent with the patient’s consent preferences?
Patrick: “So as we learned, privacy is about the use of data. For example, I am a Hypercare client, I want to request information from you, you [would] facilitate that. But when you are using Signal or WhatsApp, you have no control because of all the data out there, even though they’re secured and protected (which satisfy security), but they are not respecting their user or the patient’s right (the use of data). That’s the big difference. And that’s why they should use Hypercare because the users have control on deletion and ask what information does Hypercare have on them. HIPAA is protecting that.”
Patrick: “The essence of privacy is consent and transparency. That’s why you notice the pop up on websites about cookies. The other part is do you disclose my information to another party? If so, why? So far I haven’t touched what organizations should do, I have talked about the rights of individuals.”
Hypercare: “I have a question. As a user I left conversation traces on WhatsApps, those conversations are kept in WhatsApp’s server and data center, do I have the right to access those information or can I request those conversations to be deleted on their end?”
Patrick: ”You don’t. It’s not a good practice because they don’t give you an option.
When you talk about other obligations in privacy besides transparency, your obligation also includes safeguarding the information that you collected, that’s security. Security is to make sure no internal or external party has access to the data. If you want to have an effective privacy program you need both privacy and security, they are each side of the coin. You can’t satisfy privacy legislation if you don’t protect the data.”
For example, one of the PHIPA privacy requirements is that you need to have someone accountable for your privacy program. So even in a small clinic, you need someone accountable for privacy training and make sure the clinic is compliant. It can be your office manager or a doctor. If a patient files a complaint about their information, who is accountable for that? Likewise, the hospitals have to develop a privacy program, and the doctors and nurses working for hospitals as agents need to follow the policy. ”
Patrick: “This is a high level review of the difference between privacy and security. If you go into details we teach a 30 session course in depth.”
That’s a wrap of the interview, hope you enjoy it as we did!
Read more of our posts
Sep 22, 2026 • 3 min read
How Hypercare Works with MEDITECH: An Adapter-Based Integration Overview
If your hospital runs MEDITECH as its EHR, patient data, including admissions, transfers, and lab results, is flowing through that system every minute of the day. A clinical communication platform can turn that data into immediate action. The moment a critical result posts or a patient transfers units, the right clinician gets notified without anyone picking up a phone or manually checking a chart. But that process only works if the platform can connect to what’s already running in your hospital, which is why integrations are essential. In this article, we’ll discuss how the MEDITECH connection works, the role of middleware and APIs, and how connecting MEDITECH to Hypercare enables more seamless clinical workflows.
Sep 21, 2026 • 4 min read
How to Modernize Code Blue Notifications with Closed-Loop Communication
When an overhead page or physical pager announces a code blue, there’s no way to know at that moment whether the on-call team heard it or if anyone needs to be paged again. In cardiac and respiratory arrest, chances of survival are measured in minutes. Yet many hospitals still trigger the most time-critical event in medicine with a one-way pager-based system. Pagers only transmit information unidirectionally and don’t offer confirmation methods, which can delay critical care.
June 25, 2026 • 2 min read
Coordination Failure: The Invisible Driver of Hospital Inefficiency
Hospitals today face constant pressure - from stretched teams, tight budgets, and leaders balancing competing priorities. Staffing shortages dominate headlines, but when you talk to frontline leaders, another challenge consistently surfaces: coordination. During our executive webinar, The Cost of Coordination Failure, medical and nursing leaders shared how inefficiency often stems not from a lack of people, but from the time lost between care steps. The panel made a compelling case: throwing more Full-Time Equivalents (FTEs) at throughput bottlenecks won't solve the problem if the underlying communication infrastructure remains completely fragmented. These gaps, called coordination latency often erode capacity across the system.
Ready to learn more?
Get an in-depth product tour to see what Hypercare can do for your team
Hypercare helps hundreds of clinical teams and healthcare organizations across North America coordinate and collaborate seamlessly, with one single clinical communication platform. Let us show you how we can help.