Security Issues of the Electronic EHR and
Issues with Converting to an EHR
Gary Driscoll
HI150-01
UNIT 9 Assignment
Kaplan University
19 October 2011
The digital age is replacing the standard practices at a record breaking pace. With that increase, the need to digitize new medical records and convert existing records is becoming an issue at the top of most organizations “To Do List”. It is important for the organization to realize that both storage practices have the same risks: inappropriate access, record tampering, storage costs, and accessibility. In addition to that, the paper medical record needs to realize and identify the risks of chart legibility, while the
…show more content…
One of the many bonuses of the EHR is the ability to see who accesses a patient chart to ensure the patient’s privacy is protected and secure. In addition, to the patient safety/security, the EHR monitoring and auditing helps the organization avoid federal fines for non-HITECH compliance1.
Both forms of record storage can be and are being affected by storage space. The paper medical records need to have physical space to store patient records for a set period of time and then archive storage for the rest of the older records. EHR storage is a different concern; it requires server storage that can be increased and monitored. In addition to the storage, it needs to be setup with built-in contingency resolutions. For example, the storage drives can be setup to write the data to multiple drives to ensure corrupted drives do not affect the patient’s records. Another way to protect the data is daily backups of the data drives. This will also ensure the data can be recovered in the event of hardware failure.
Record tampering, record loss, and legibility can all be affected by the paper medical record, while the EHR has resolved these risk issues. Paper records can be manipulated or lost due to theft, fire, and/or flood. In addition to those risks, even if the record is safe, there is no guarantee that the record is legible, this can leave an organization at great risk in the event of a lawsuit or if a patient needs copies
Once a medical record has been transferred into an EMR it can be shredded. Some medical offices chose to keep the records in a secured location. I suppose when it's kept secured it's a back up. But would it really be effective if they didn't change details in it every time a patient visits? some people I suppose shred it because they've used scanners to get all the information from paper to computer.
Going Paperless: Electronic Medical Records versus Paper Medical Records “Is it time to make the switch?”
With EHR, there’s are bigger risk for security breaches and information exposure when using computer systems that require the internet to access patients’ medical records. HITECH and HIPAA, were created to control the number of computer threats. EHR, is a secure software, that healthcare personnel use to document patients’ medical and personal information in. This system contains piece of personal information from a patient’s name to each surgery this person has had in their life time.
Electronic health records were a technological advancement in the healthcare industry in which paper patient record’s became digital. The transition from paper to digital charting allowed easier, quicker access to patient information for those who were authorized to do so. EHRs are secure and protected with username and password access only. It contains information such as patient medical history, procedures, diagnoses, medications, labs, tests, and treatments. Healthcare professionals and organizations who are authorized to access a patient’s electronic health record can do so at ease via a secure network or online database (HealthIT, 2013).
Paper Health Record is patient health information stored and accessed in paper format. It includes the processes of maintaining and storing physical or hard-copy documents. Paper Health Record request no logins to access patient information. Likewise, in paper health record physicians, nurses, or medical receptionist can update the patient file in certain sections easily.
Along with the new technologies applying in healthcare, the documentation processes and storages also change from paper charts to computer-based electronic health records (EHR). Many healthcare organizations currently maintain patients’ health records in both formats of paper and electronic. The combination is known as hybrid health record system, which is used to assist in different methods that patients’ information is collected. Hybrid health records (HHR) contain specific patients’ health information. HHRs are stored manually and electronically in multiple places. Current patients’ health records usually contain both digital documents and handwritten notes. Patients’ data are electronically stored, such as laboratory, radiology tests,
The security issues of paper and electronic health record systems and the issues to be considered when converting to an EHR system.
EHR was created to have a technical way to securely exchange private and personal medical health information in hopes to improve the quality of care, decrease medical errors, limiting paper use, reduction of health care cost, and increasing a person access to affordable health care. A mandate was created for EHR stating that health records can be accessible to all facilities with patients having the capability to access their own health records at any time. Ameliorating the quality and convenience of care given to a patient, allow for cost saving measures, engage the patient and family to participate in their care, improve accuracy of medical diagnosis, and enhance the efficiency of the overall outcome of the patients’ health.
Quality is something that many medical care institutions have advocated for. With the innovation of Electronic Health Records, healthcare facilities as well as institutions were consumed with the concerns of how medical records were being handled. Currently there are many national organizations as well as some of the government agencies who are trying to pursue the cause of quality and patient safety (GAO, 2010). Although, Electronic Health Records are presumed to bring quality to the way healthcare data is being handled,
Today, the patient will visit the same doctor and the doctor will enter the data into a tablet or pc. The EHR is a designed very similar to the paper chart, but is programmed to collect and segregate the information in different formats to transmit securely to the necessary partners. Those partners include insurance carriers, public health entities, clearinghouses, laboratories, and pharmacist. This data is collected and stored on secure servers. In most EHR’s today, a doctor who has a private practice, and maybe affiliated with a hospital has the ability to allow the hospital to access a patient’s record, if that patient has agreed to release their information to the hospitals. So if the patient is taken to the local hospital, the hospital can have access to the patient’s records if an authorization is in place. The EHR will not only collect the patient medical information, it will track the medical information. Providers are required to secure the information and track the medical records activity via a built-in audit system that will show the medical records history and the name of all parties that access the patient’s records. Poor EHR system design and improper use can cause EHR-related errors that jeopardize the integrity of the information in the EHR, leading to errors that endanger patient safety or decrease the quality of care. These unintended consequences also may increase fraud and abuse and can have
Using EHR software can potentially put your organization at risk if you do not follow privacy protocols to an exacting degree. While paper records also make it easy to violate a patient’s privacy, the convenience and immediacy of electronic records make it easier to violate privacy at an unprecedented level.(The pros and cons of EMR, 2015).
Use of EHR (electronic health records) in United States has increased in past years and have gained widespread use in the country. The use of EHR-Electronic Health Records or EMR-Electronic Medical Records and the systems that support them have gained standardized collection of health information and data for patient and healthcare providers. Because of these technologies, healthcare providers now have information about their patients at their fingertips, which has led to better and more accurate care. There are debates on using EHR. According to Mushtaq (2015), one of the most common debate is the use of EHR compliance and the value of these technologies that surround them (Mushtaq, 2015). Providers wonder if EHR use is useful and what is to be gained for the HCP-Healthcare provider. In regards to such debates and ongoing conversations, it is important to understand the definition of meaningful use and whether these technologies have resulted in meaningful use. According to Burchell (2016), The government developed the HITECH (Health Information Technology for Economic and Clinical Health) Act of 2009, which incorporates the meaningful use program (Burchell, 2016). The program has goals that tell us how to use the meaningful use with EMR or EHR. It helps HCP and organizations alike attain, use and keep goals like patient and clinical outcomes, individual patient autonomy, and increased transparency for providers. When these goals are attained and kept it will greatly
According Health IT Gov (2013), “An electronic health record (EHR) is a digital version of a patient’s paper chart that make information available instantly and securely to authorized users.” The EHR system that is currently used in my organization contains the medical and treatment histories of the patients. Depending on the individuals role make a difference in what all he or she will have access to on the system. This is a user friendly system that was built to go far beyond the standard clinical data that is typically kept in the patients paper chart. A purpose of the system is to
As stated in the reading on page 15, the use of EHRs for research would allow for measuring the health of certain patient populations and even provide evidence for improving efficiency and effectiveness for healthcare processes and outcomes. Data from EHRs could be collected to improve quality of care to patients by checking for accuracy in the records and also looking through medication and allergy logs to assure that all correct medication was given. EHRs could also be collected to review patient’s demographic information if physicians were noticing a familiarity in the patient’s symptoms, which could allow for quicker control of an outbreak or a contagious
Electronic health records (EHR’s) have many advantages, but there are plenty of disadvantages. EHR’s were created to manage the many aspects of healthcare information. Medical professionals use them daily and most would feel lost without it. Healthcare organizations were encouraged to adopt EHR’s in 2009 due to the fact that a bill passed known as The Health Information Technology for Economic and Clinical Health Act (HITECH Act). “The HITECH Act outlines criteria to achieve “meaningful use” of certified electronic records. These criteria must be met in order for providers to receive financial incentives to promote adoption of EHRs as an integral part of their daily practice”, (Conrad, Hanson, Hasenau & Stocker-Schneider, 2012).