Defining privacy harms is a perennially difficult proposition. Health information, however, presents two main privacy risks that are interrelated. The first is personal identification, where an individual’s name is publicly associated with their medical history. The second is blind discrimination, where an individual’s name is not necessarily revealed, but they may be treated differently based on perceived medical conditions.