Toward assuring confidentiality of records in large-scale assessment programs.

EPSDT, or any similar national health program, will spawn multiple records on millions of children and adults. Multiple providers will need to share more data to provide quality care. Maintaining privacy of child/parent records, avoiding the dangers of labeling, controlling the life of records and insuring their appropriate demise exacerbate record maintenance problems. Principles of record-keeping confidentiality are proposed.