Information technology has the potential to transform healthcare and eradicate many of the inequities seen in the area. However, the use of electronic means to process sensitive health data poses significant risks. Electronic health records have been designed to be more secure than traditional paper records, but there have been notable cases where data has been lost, stolen, or viewed by unauthorised persons. Misuse of health information technology can result in severe violations of human rights. In particular, the right to privacy can be eroded by inappropriate protections, which still exist in some health systems. This chapter describes the rights framework in healthcare, analyses legal provisions for protection of health data, considers why such protections are necessary, outlines examples of rights violations, and proposes future directions.