Gender identity is "an area where [HIPAA covered entities]

...need to pay as much attention to as...sensitive health information such as HIV/AIDS, mental health, genetics, etc. There needs to be some improvements in EHRs to permit easier segregation of sensitive data....CEs should make every effort to limit access to sex/gender identity information, including transgender status, to only those practitioners who really need access for treatment purposes and if it's necessary when assigning the patient the proper room."

— Chris Apgar, president of Apgar & Associates in Portland, Ore., told AIS's Report on Patient Privacy.