Information system management
Running head: INFORMATION SYSTEM MANAGEMENT 1
INFORMATION SYSTEM MANAGEMENT 10
Name
Busayo Oyewole
Course name
IFSM 305
Stage 3
Ethical, Legal, and Regulatory Policy Issues
Instructor
Prof Cole
Introduction
The electronic health system is a technology that is implemented in almost all developed countries to ensure safe and fast keeping and accessibility of health records the development of these systems needs strong adherence to certain regulations unlike type normal systems to enhance the safety of data stored. This paper addresses the safety and, legal regulations in the development of the EHR system.
Table of Ethical, Legal, and Regulatory Policy Issues
|
Topic |
Definition of topic |
How the topic impacts and will be addressed in the selection and use of an EHR system. |
|
|
|
|
|
|
|
Safe Design |
This is designing a system in a way the users can detect and realize dangers when using the system. Safe design involves eliminating all possible flaws and errors that can cause risks. |
Alert fatigues should be a major consideration to avoid skipping important warnings. Again the writings should be clear and not confuse. Example writing .25 instead of 0.25 helps invisibility. |
|
|
|
|
|
|
|
Meaningful Design |
Involves designing a system that is up to modern-day standards and has received the necessary certification. The EHR system must be able to improve the healthcare standard and protect patients’ data utilizing security and safe retrieval. |
The clinic will have to get a certified EHR system for compliance with authority policy. It will guarantee the meeting of intended goals. The staff needs to be trained in the safe use and then the importance of privacy of personal data. |
|
|
|
|
|
|
|
Quality Improvement |
The system being developed must be able to improve the value of healthcare from the existing level. With changing trends daily in technology, the system must evolve with time for improved quality in data storage and retrieval. |
Collected and stored data should improve the quality of health care services. This enhances speedy treatment. The system should request feedback from patients and workers for future evolving. |
|
|
|
|
|
|
|
Data Accuracy |
Data accuracy is a concept where the stored data of a patient is accurate and the actual true data. It minimizes the mishap of a patient having information about another patient being retrieved from the system. |
Due to the inaccuracy of data reported before, the EHR system will need to address the issue. This causes confusion and delay in treatment. The EHR system to be developed will need to capture data and verify then re-verify to ensure accuracy. |
|
|
|
|
|
|
|
Data Accessibility |
The authorized user of the data should be able to access it anytime and anywhere and be able to perform tasks fluently (Thayer et al., 2019). It ensures that at no single point in time the stored data is unavailable for use. |
The system will need to allow access to health workers whenever needed. It should provide real-time data online and remotely. The system should create different levels of accessibility for workers to access data at their convenience and time of need. |
|
|
|
|
|
|
|
Data Comprehensiveness |
The system must provide a mechanism to store all the available and accurate data without any being left behind. The system must enhance the inclusivity and completeness of records. |
Data comprehensiveness speeds up care and minimizes movement. The system will need to provide a mechanism to capture data that was skipped or forgotten. It must do so accurately for patient safety. |
|
|
|
|
|
|
|
Data Consistency |
The data entered in the system and the stored data must be consistent in the state. Any modification must be reflected in all platforms |
Consistency is key for correct information at any time. Any inconsistency can lead to repetition or pose other risks to the patient. Data should update simultaneously in all platforms of the developed system. |
|
|
|
|
|
|
|
Privacy |
It is the concept of ensuring all personal information related to the patient is kept private. The patient data has a right to be secret and private. |
The system needs a mechanism of protecting patients’ data. Any loss can be catastrophic. The system will minimize flows that can lead to unauthorized access that can lead to a loss. The security of the system will be a priority (Thaye et al., 2019). |
|
|
|
|
|
|
|
Confidentiality |
The patient has the right not to disclose their private information to anyone. The system should respect the confidential nature of some information. |
Midtown clinic has reported data theft from their system. This contravenes the privacy and secrecy rules. The EHR system will provide an upload patient captured data in their charts. |
|
|
|
|
|
|
|
Security |
It is the cat of securing the stored information of the patient. Clinics and hospitals are mandated to secure patient data in their system. |
EHR with enough security needs. The staff needs to know the security measures needed. The system will address all flaws in security like strong passwords. Staff will be evaluated from time to time to test their remembrance of the policies. |
|
|
|
|
|
|
|
Individually Identifiable Health Information |
This is any information that is specific to ascertain patients including their name, ID numbers, and others. |
Individual-specific information needs protection. It should be captured privately. The system will address the safe manner of capturing and storing it confidentially. |
|
|
|
|
|
|
|
Protected Health Information |
HIPPA laws give a guideline on some patient information that they protect. Breach of the law can result in prosecution. |
The different media forms carrying patient data need to be protected. The system will ensure the separated storage of protected patient information. The staff also don’t need to store physical records of the same data. |
|
|
|
|
|
|
|
HIPAA Privacy Rule |
This is a nationalized rule that seeks to privatize and protect patients’ medical data and other personal information. It protects all individually identifiable information. |
It is an important system to comply with HIPAA laws. This reduces legal costs arising due to leakage of the same data. The system will ensure compliance with the law by eliminating all data breaches. |
|
|
|
|
|
|
|
HIPAA Security Rule |
This rule requires health workers to protect electronically stored data of patients. (Tusch et al, 2019). They must use administrative and physical tools to ensure the integrity of protected patient information. |
Protecting electronically captured and stored data is vital. The system will ensure the data is captured safely and stored in safe locations. This solves breach of rules that can attract penalties in the justice court. |
|
|
|
|
|
|
|
Business Associate Contracts |
It is a written agreement that defines the duties and responsibilities of all parties to protect the health information of patients. The assurances must be written in a contract. |
It is important to abide by agreements and assurances. The system will ensure data being sent out of the EHR system and acquired outside is still protected and safe for distribution |
|
|
|
|
|
|
|
Authentication |
This refers to all the credentials that a physician or health worker is given to access EHR. They are usernames, passwords, and pins. |
Systems need to provide a safe and easy authentication procedure. The EHR system will provide safe authentication methods for authorized users (Khairat et al., 2018). It will store the credentials in a safe place. |
|
|
|
|
|
|
|
Authorization |
Refers to who is allowed to access the system and what they are allowed to do with the system. |
EHR systems should limit who uses them. This combats theft and data loss. The system will provide a strong mechanism to identify users and allow or deny access based on identity. |
|
|
|
|
|
|
|
Encryption |
It’s a way of hiding information from unauthorized personnel. |
Patient records should not fall in unsafe hands. The system, will encode patient data for privacy and provide a decoding platform for only those authorized. It will eliminate theft. |
|
|
|
|
|
|
|
Technical Safeguards |
Access control methods will be used to secure patient information? |
The clinic is responsible for data protection. It has to regulate who access them and not. The system will help implement the safeguarding of the patient records. |
|
|
|
|
|
|
|
Healthcare Ethical Principles |
Are the rights a patient has to accept or refuse treatment in a health facility? They also include the need to attend to all patients without discrimination of any kind. |
All workers should possess ethical values. The system should give parents an oracle to give feedback on the service delivered. It will help improve treatment and data protection. |
|
|
|
|
|
|
Addressing the most difficult issue.
The most important issue midtown clinic will find hard to implement is quality improvement. This will involve checking on the performance of the system on regular basis and noting changes that need to be done. It will be difficult for workers to give technical feedback. The same applies to patients. The midtown clinic doesn’t have a platform in its current system for such (Khairat et al. 2018). With trending technology every day, integrating new technology with the old one to improve quality is a challenge. Again, the quality improvement is a collective task which will need the workers to be cooperative and use the system as it is while citing improvements that need to be made.
Summary
Laws are important for regulating what is good and what is not. Implementing them to cover EHR is key in ensuring the safety of the workers and patients. Ethical practices help safeguard the core values of society while ensuring the safety of community members (Magrabi et al., 2016). Implementing these policies in the clinic EHR will help achieve its objectives while serving patients and all stakeholders’ interests in the best manner possible.
References
Khairat, S., Burke, G., Archambault, H., Schwartz, T., Larson, J., & Ratwani, R. M. (2018). The perceived burden of EHRs on physicians at different stages of their careers. Applied clinical informatics, 9(2), 336. Retrieved from https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5955717/
Khairat, S., Burke, G., Archambault, H., Schwartz, T., Larson, J., & Ratwani, R. M. (2018). The perceived burden of EHRs on physicians at different stages of their careers. Applied clinical informatics, 9(2), 336. Retrieved from https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5955717/
Magrabi, F., Ong, M. S., & Coiera, E. (2016). Health IT for patient safety and improving the safety of health IT. Retrieved from https://www.researchonline.mq.edu.au/vital/access/services/Download/mq:59774/DS01
Tusch, G., Higbea, R. J., VanderKooi, M., Warkoczeski, L., Sankey, W., & Cole, J. (2019). Impact of EHR Usability on Provider Efficiency and Patient Safety in Non-Hospital Settings. Retrieved from https://scholarworks.wmich.edu/ichita_transactions/71/
Thayer, J. G., Miller, J. M., Fiks, A. G., Tague, L., & Grundmeier, R. W. (2019). Assessing the safety of custom web-based clinical decision support systems in electronic health records: a case study. Applied clinical informatics, 10(2), 237. Retrieved from https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6447398/