Information system management

Table of Ethical, Legal and Regulatory Policy Issues

Topic

Definition of the Topic

(minimum 2 sentences for each, a definition in your own words)

How the topic impacts and will be addressed in the selection and use of an EHR system (minimum 4 sentences for each topic - 2 on impact and 2 on how addressed)

1

Safe Design

Safe design is a concept that allows users to identify and assess potential hazards within an EHR system. According to Dr. Peter Pronovost, building a safe design requires eliminating potential mistakes, outlining things needed and reevaluating and learning from mistakes.

Building a safe design for the clinic that assists with patient check in is an example of safe design. The standardization of process requires an EHR system that allows patients to check in without the nurses’ assistance. A concern for the clinic currently is nurses are focusing less on patient care and more on administrate duties. EHR needs to reduce unnecessary steps and time required by the staff to give more focus to patient care.

2

Meaningful Use

This concept is understanding and implemented a certified EHR system that can be used to improve patient care, increase involvement of patients in their care and protection of patient records through security and privacy practices. These goals are outline by Medicare/Medicaid to provide incentives for companies using a certified EHR system.

A certified EHR system will need to be selected for the Midtown Clinic to ensure compliance with federal policies. With compliance, the clinic can receive incentives for patient care. This compliance is important to the clinic because the goals need for meaningful use compliance are also need in an EHR system for the clinic. Staff will be trained on privacy and security concerns to ensure misfiling and lost data of patient information does not continue to occur with the new system.

3

Quality Improvement

According to the Agency of healthcare research and quality, Quality Improvement (QI) are policies used to improve care to patients. This issue is consistently evolving and improving upon itself through setting goals which are analyzed, improved and implemented.

Data collected by the EHR system will be used for Quality Improvements. By using the EHR system, patient data can be filed properly and securely. Patients would comment on the effect of having accurate information in their files. In addition, patients could give feedback on the scheduling system provided by the EHR system. Receiving feedback is allow the clinic to evaluate and implement new policies to provide better care.

4

Data Accuracy

Data accuracy is the concept of verifying patient information inputted into the EHR system is accurate and true. This issue ensures patient information is related to the correct patient.

As stated in Section 1 and 2, Midtown Family clinic has incidents of data inaccuracy. Patient data has been misfiled or lost which causes delays in patient care. An EHR system implemented must eliminate this error. Staffers would need a system that can easily and accurate input patient data. Also, if errors occurred a system alerting staff of inaccurate data input would be ideal to eliminate further data inaccuracy problems.

5

Data Accessibility

In conjunction with HIPPA privacy rules, data accessibility is the concept of allowing authorize staff to access patient data information. Data accessibility could be achieved in house or remotely.

The elected EHR system must be able to provide secure access for staffers. The amount of access provided to staff will be predetermined based on accessibly needs. Remote access may also be used to assist the physician with patient care outside the clinic. Having various levels of accessibility by staffers will aid in securing sensitive information from outside parties.

6

Data Comprehensiveness

Data comprehensiveness is the concept of collecting the most complete and accurate data. Comprehensive data entry must to comprehensive of all patient data.

Data comprehensiveness will be dependent upon data entry of the staff. EHR system needs to have unchallenging inputting system. Accurate data is needed to create the EHR needed for the clinic. The comprehensiveness of data needs to accurate to develop patient data records.

7

Data Consistency

Data consistency is the concept having the data consistent across all platforms. The data must be coherent with the data entered into the EHR.

Consistency of data must be correct for the EHR system to function. Consistency is also crucial when transferring from paper data to electronic records. Staff must be trained for consistent data entry.

8

Privacy

Privacy is the concept of keeping personal information private. Patients have the right to withhold personal information for privacy concerns.

The EHR system needs to have functionalities to protect the privacy of patient information. Privacy concerns will be eliminated with the EHR system. Loss of data through misfiling will decrease current privacy issues for the clinic.

9

Confidentiality

According to the culture of healthcare lecture notes, confidentiality is the patient’s right to not disclose PPI information to outside parties. It’s the patient right to have their health information confidential.

Midtown clinic currently has a confidentiality issue with patient information. Losing patient information compromises confidentiality. The EHR system will eliminate this issue. A system is needed that uploads patient data information such as labs and images into the patient chart.

10

Security

Security is protection of patient information. Clinics and hospitals are responsible for protecting patient information

EHR with security protocols is needed to protect patient’s data. Security protocols will need to be taught to staff to ensure protection of records. Secure log ins will be given to staff would access the system. In addition, annual training will be need to verify knowledge of policies.

11

Individually Identifiable Health Information

Individually Identifiable Health Information is any information associated with the patient. This information includes patient name, address DOB, MRN etc.

All information related to the patients in the clinic needs to be included in the EHR system. Patient information will need to be organized into the system. Also the information needs to easily accessible for staffers to use.

12

Protected Health Information

Protected health information is patient information protected under HIPPA laws. This information is protected in all media forms.

Patient information within the clinic includes multiple media forms. The EHR would be able import media files and protect it. Staff will be able to protect records without having to store physical records.

13

HIPAA Privacy Rule

According to HHS. Gov, HIPPA privacy rules are guidelines that protect patient’s health records and other information in the healthcare. Records need to be protected from unauthorized persons.

The EHR system will assist in protecting records and complying with HIPPA laws. Although the clinic abides by these laws, there are data breeches that compromise patient data. The system will eliminate these data breeches.

14

HIPAA Security Rule

This rule encompasses electronic patient information that need to be protected. These rules include those in HIPPA Privacy Rule.

Since EHR system will include most information in electronic form it needs to be protected. An EHR system will assist in protecting electronic records with security features. Security features such as firewalls with combat a potential threat of data breeching.

15

Business Associate Contracts

The concept refers to rules that applies to business that contract with healthcare facilitates. These rules ensure patient information is still protected under HIPPA laws.

HIPPA laws apply to outside sources as well. Patients have the right to have their information protected. The system needs to be able to transfer data to other departments such as pharmacy but still protect the information being sent.

16

Authentication

Authentication refers to credentials given to allow staffers access to system. These credentials include usernames and passwords

The Midtown clinic staffers would need authentication credentials to assess the new system. The system would also need applications to support the credentials. Education about credential safety such as not sharing passwords with staff members is crucial. This could cause a potential lapse in protection of records.

17

Authorization

Authorization refers to what the user is allowed to access. Access is determined by the company.

The EHR will need to allow access to users based on preset authorization standards. Some staffers will need more access to the EHR system than others based on job duties. Also, a superuser for the system should be established.

18

Encryption

Encryption involves technology to encode information so that unauthorized individuals cannot access personal information. This is a security feature to secure patient information.

Encryption technology is needed for an EHR. Information needs to be encrypted to prevent illegal hacking of information. The Midtown family clinic is responsible for records protection. Encryption is another way to protect this sensitive information.

19

Technical Safeguards

Technical safeguards applications to ensure information is private, secure and confidential. Safeguards are needed to protect the patients.

As stated before, the clinic is responsible for the protection of patient records. Technical safeguards help control who has access to information in the system. Staff will be trained in technical safeguards and how they will be used in the system.

20

Healthcare Ethical Principles

Healthcare ethical principles regard patient rights to accept or deny treatment, procedures and test related to their care. In addition, it guarantees equality of treatment regardless of race, gender, sexuality or religion.

Midtown family clinic uses healthcare ethical principles in the current practice. The standard will remain with the new EHR system. The system will continue to provide protect of patient records and better quality of care.