Health information technology has tremendous potential to improve health care and reduce costs while empowering patients to play a greater role in the management of their own care. At the same time, unaddressed privacy concerns can stand in the way of realizing the benefits of health IT. CDT played an integral part in shaping the regulatory framework around health IT in the United States, and now is focused on the privacy of patients, doctors, and healthcare providers.