Free EMR Newsletter Want to receive the latest news on EMR, Meaningful Use, ARRA and Healthcare IT sent straight to your email? Join thousands of healthcare pros who subscribe to EMR and HIPAA for FREE!!

A Primer On HIPAA Compliance For BYOD

Written by:

Here’s a statistic that caught me off guard: according to IDC Healthcare Insights, clinicians on average use 6.4 mobile devices in a day. That stat, courtesy of HIT Consultant, underscores the need for a smart and thorough security policy for clinicians who use their own devices at work.

Increasingly, healthcare organizations are crafting security policies for BYOD, but they vary greatly in how much such devices are allowed to access the hospital network, which hospital applications they can access and which devices can access the Internet, HIT Consultant notes.

However, according to Andrew Shearer, CTO at Care Thread, there’s some do’s and don’ts which should be common to all BYOD programs. Here’s some thoughts from Shearer, below.

DO:

Make sure your vendor and its sub-vendors are compliant with the new HIPAA Omnibus requirements

Be aware that under the new rules, HIPAA requirements now extend to business associates of entities that receive  protected health informatoin, such as contractors and subcontractors. Also new, not only vendors to healthcare organizations required to have business associate agreements, vendors must also hold BAAs with their sub-vendors.

Use two levels of security when users login to enterprise applications

Shearer recommends using Active Directory for the first level, allowing providers to use their hospital login credentials.  The second stage, he suggests, is to use a separate PIN for quick access to mobile apps which are in use, one which should disconnect when it goes idle.

Have the ability to remotely wipe a device if it is missing

This isn’t required by HIPAA, but it’s still an essential part of a strong mobile/BYOD security management program. Be prepared to do anything from deleting data in selected folders to turning the device into a brick (removing all programming or returning it to factor settings).

DON’T:

Allow PHI to be written to the mobile device

While it’s very common for clinicians to use mobile messaging apps to share patient information, such sharing is generally not HIPAA-compliant, Shearer notes.  In his view, the ideal healthcare communication app should allow access to messages and PHI only when the use is logged in.

Permit integration with insecure file-sharing / hosting services

Cloud-based hosting and file-sharing services like Evernote and Dropbox are very popular, but they’re not HIPAA compliant. To be HIPAA compliant, organizations must use multiple security protocols, including physical security, technical security in PHI storage and user authentication.

Ignore security updates

Make sure you do periodic audits of mobile devices to make sure any that transmit work-related information meet regulatory standards. Also, make sure apps on mobile devices are up to date, as older versions may not meet current security threats.

June 13, 2013 I Written By

Katherine Rourke is a healthcare journalist who has written about the industry for 30 years. Her work has appeared in all of the leading healthcare industry publications, and she's served as editor in chief of several healthcare B2B sites.

Benefits and Struggles of EMRs, and More – Around Healthcare Scene

Written by:

Are tablets going to take the place of traditional laptops and desktops? Well, Dr. Michael West seems to think so. He talks about his new-found love for his iPad mini, and how it fulfills all his current needs. Have you traded your desktop in for a tablet yet? The new Microsoft Surface is making me kind of want to!

Having a PHR on your phone doesn’t have to be complicated. In fact, if your phone has a camera (what phone doesn’t nowadays?) you can create when quickly and easily. Here are five health-related snapshots you could keep on your phone to assist in a variety of situations.

If you have been following the Affordable Health Care Act, you’ll know that an optional Medicaid State Plan called Medicaid Health Homes was introduced. There are, of course, many questions that people have about this, including what kind of technology will be required for successful implementation. Lori Bernstein, president of GSI Health, addresses some questions and lays out the benefits that this new model has to offer in her guest post at EMR and EHR last week. what kind of technology will Medicaid Health Homes require to ensure successful implementation?

Paper to EMR is a necessary evil for for hospitals, therefore, it’s easy to justify the expense required to do so. But what about when you decide to switch EMRs. Is it justifiable? Not always. There is no ROI to switch from EMR and EMR, and it can be a big risk.

A current pilot program is currently underway to help identify high-risk pregnancies by using an EMR. This pilot program is being led by researchers and people from Johns Hopkins University’s Center for Population Health IT to find hints in a mother’s health history to help determine if her pregnancy is high-risk. It’s a slow-moving project, but may prove to be worth it if it helps get mothers the help they nee.d

June 9, 2013 I Written By

Katie Clark is originally from Colorado and currently lives in Utah with her husband and son. She writes primarily for Smart Phone Health Care, but contributes to several Health Care Scene blogs, including EMR Thoughts, EMR and EHR, and EMR and HIPAA. She enjoys learning about Health IT and mHealth, and finding ways to improve her own health along the way.

Intermountain Uses EMR To Share Radiation Exposure

Written by:

It’s a well-known and worrisome trend that patients are receiving potentially harmful doses of  radiation from tests such as CT scans. Generally speaking, though, neither patients nor clinicians know exactly how much radiation exposure an individual has received.

At Intermountain Healthcare, however,  they’re hoping to change this state of affairs. The Salt Lake City-based health system of 22 hospitals and 185 clinics is launching what the Wall Street Journal says is the first major effort to measure and report patients’ cumulative radiation exposure.

Intermountain’s effort is focused on the tests that produce the highest amount of radiation, including CT scans, nuclear medicine scans and interventional radiology exams of the heart, the WSJ reports.  As part of an effort to educate clinicians and patients about medical radiation, both will be able to access data on patient exposure levels through Intermountain’s EMR.

The idea behind listing a patient’s radiation exposure is to encourage both clinician and patient to consider the risks and benefits of a particular test and at times, avoid the test if the needed information can be obtained with a radiation-free test, the WSJ piece says.

In a typical year, Intermountain’s patients receive 220,000 CT scans and radiology procedures, so data that helps patient and doctor consider alternatives could conceivably have a meaningful effect, clinicians there say.

Intermountain is not the only hospital system to focus on tracking radiation doses. For example, Hospital Corporation of America, the largest for-profit hospital system, is kicking off a new “Radiation Right” campaign tracking patient doses, the newspaper reports. But it does seem to be the only chain sharing the data with patients via an EMR.

Realistically, these efforts are still in their infancy, as researchers don’t know how much of a cumulative dose of radiation directly increases cancer risk. Still, this does seem like an excellent use of the EMR as a collaborative tool engaging patients in making better-informed health decisions.

May 24, 2013 I Written By

Katherine Rourke is a healthcare journalist who has written about the industry for 30 years. Her work has appeared in all of the leading healthcare industry publications, and she's served as editor in chief of several healthcare B2B sites.

Integrating Telemedicine And EMRs

Written by:

Have you considered what an EMR would look and feel like if it integrated telemedicine? Rashid Bashshur, director of telemedicine at the University of Michigan Health System, has given the idea a lot of thought.

In an interview with InformationWeek Healthcare, Bashshur tells IW’s Ken Terry that it’s critical to integrate HIEs, ACOs, Meaningful Use and electronic health records.

Makes sense in theory. How would it work?

To begin with, Bashshur said, healthcare providers who have virtual encounters with patients via a telehealth set-up should create an electronic health record for that patient.  The record could then be ported over to the patient’s PHR.  The physician can also share the health record via an HIE with other providers.

When providers attempt mobile and home monitoring, it steps the complexity up a notch, as such activities generate a large flow of data. The key, in this situation, is to use the EMR to sensitively filter incoming data.

Unfortunately, few EMRs today can easily pinpoint the information providers need to process, so most organizations have nurse care managers sift through incoming monitoring data. That’s the case at University of Michigan Health System, where care managers sift data manually to determine whether patients seem to be seeing changes in their conditions.

Unfortunately, even attentive care managers can’t catch everything a properly-designed system can, Bashshur notes.  To integrate EMRs and telemedicine/remote monitoring, it will be important for EMRs to have sophisticated filters in place which can pinpoint trouble spots in a patient’s condition, using a standard protocol which is applied uniformly.

According to InformationWeek, vendor eClinicalWorks has promised a new feature which can pick out relevant data from a large data stream. But until eCW or another EMR vendor produces such a feature, it seems that remote monitoring will be labor-intensive and expensive.

May 17, 2013 I Written By

Katherine Rourke is a healthcare journalist who has written about the industry for 30 years. Her work has appeared in all of the leading healthcare industry publications, and she's served as editor in chief of several healthcare B2B sites.

EMR Market Topped $20B Last Year

Written by:

As we all know, last year was a huge year for EMR adoption. How big?  Well, according to new data from research firm Kalorama Information, the EMR market hit $20 billion in 2012, driven by health IT upgrades and the desire for Meaningful Use incentive payments.

According to Kalorama, the EMR market was $20.7 billion last year, up 15 percent from the $17.9 billion it reached in 2011.  These numbers include revenue for EMR systems, CPOE systems and directly-related services such as installation, training, servicing and consulting.

Kalorama expects near year to be big as well, as providers implement EMR systems in an effort to avoid government penalties for sticking to paper charts.

More than $12.3 billion in Meaningful Use incentive payments had been doled out to 219,000 eligible hospitals and healthcare professionals as of March 1, 2013, with the incentives largely driving physician adoption of EMRs.

A recent CMS study reported that over 70 percent of physicians have used EMR systems, a huge jump from the 26 percent which had used these systems in 2006.  Hospital EMR installlations, meanwhile,  have been maturing, with 77 percent having reached Stage 3 or higher, compared  with 71 percent in 2011.

Going forward, Kalorama predicts that EMR adoption will continue to increase, that hospital adoption will be more rapid than physician adoption and that hospitals currently at adoption Stage 3 will continue to increase their engagement with their systems. The research firm also predicts that current EMR owners will be upgrading their systems.

Meanwhile, researchers say, the threat of penalties for failing to use EMRs meaningfully will force both doctors and hospitals to make upgrades over the next year or so.

While Kalorama doesn’t mention this, the next year or two is also likely to be marked by “the big switch,” with doctors in particular changing out systems that haven’t proven effective to date.  The likelihood that doctors will be buying new systems is likely to lead to a gangbuster year for ambulatory HIT vendors.

May 2, 2013 I Written By

Katherine Rourke is a healthcare journalist who has written about the industry for 30 years. Her work has appeared in all of the leading healthcare industry publications, and she's served as editor in chief of several healthcare B2B sites.

Traditional Marketing, Drug Companies, and Behavioral Scientists – #HITsm Chat Highlights

Written by:

Topic One: @bjfogg behavior model has become well known in tech around engagement. How is this or other models applicable to patient care?

Topic Two: Outside #healthcare, “engagement” is largely about marketing. What can traditional marketing teach us about patients?

Topic Three: Engagement is closely tied to influence and by who you are trying to influence. What are biggest drivers of influence in hc?

Topic Four: Drug companies are masters of influence, how can we improve the influence of engagement?

Topic Five: @nationalehealth and @ONC_HIT work with top behavioral scientists. When does a nudge toward behavior change become a shove?

April 20, 2013 I Written By

Katie Clark is originally from Colorado and currently lives in Utah with her husband and son. She writes primarily for Smart Phone Health Care, but contributes to several Health Care Scene blogs, including EMR Thoughts, EMR and EHR, and EMR and HIPAA. She enjoys learning about Health IT and mHealth, and finding ways to improve her own health along the way.

Hospitals, Representative Ask For Extension of EMR “Safe Harbor”

Written by:

Right now, it’s legal for hospitals to give doctors EMRs under certain circumstances, despite the existence of the Stark law banning payments intended to induce referrals.  Specifically, hospitals won’t face anti-kickback enforcement if doctors pay 15 percent of the cost of EMRs donated by hospitals.

But the Stark law exception established by CMS, plus a “safe harbor” rule established by the HHS Office of the Inspector General, are both due to expire at the end of 2013. This will take place despite the fact that Medicare incentives for EMR adoption will continue through 2016, notes iHealthBeat.

Hoping to address this state of affairs, the Federation of American Hospitals has made the renewal of EMR exceptions to the Stark law its top recommendation in a proposed list of safe harbors, reports Modern Healthcare. More recently, Rep. Jim McDermott (D-Wash.) wrote a letter to the chief counsel to HHS’ OIG to extend those exceptions soon.

Extending these safe harbor provisions at least through the life of the Meaningful Use program seems necessary and wise. After all, it’s hard enough to get smaller practices up on EMRs even with the promise of incentives. Letting hospitals pay for most of the cost of the system would meet the public policy objectives which prompted the creation of HITECH in the first place.

According to Modern Healthcare, the federal Office of Management and Budget is reviewing proposed rules regarding the Stark exception and the anti-kickback safe harbor. Let’s hope they’re finalized in time to solve the problem.

April 3, 2013 I Written By

Katherine Rourke is a healthcare journalist who has written about the industry for 30 years. Her work has appeared in all of the leading healthcare industry publications, and she's served as editor in chief of several healthcare B2B sites.

Rural Hospital EHR

Written by:

As I mentioned in my previous post on EHR Penalties and Meaningful Use Failure, I had a really good discussion with Stoltenberg Consulting about rural hospital EHR at HIMSS this year. While Stoltenberg no doubt works with hospital systems of every size, I could tell that they had a real affection for the rural hospital EHR challenge. Plus, it was great to be educated some more on the challenges rural hospitals face when it comes to meaningful use and EHR since I’ve been doing a lot more writing about it on my Hospital EMR and EHR website.

I collected a few observations from my chat that I think are worth talking about when it comes to the unique rural hospital EHR situation. One of those ideas is the challenge that rural hospitals have in providing EHR help desk support. It’s worth remembering that hospitals are 24/7 institutions that need 24/7 support in many cases. Now imagine trying to staff an EHR help desk for a small rural hospital. From what I’ve seen, most can barely have an IT support help desk available, let alone an EHR help desk. Stoltenberg Consulting wisely sees this as a great opportunity for EHR consults to provide this type of service to rural hospitals. If you spread the cost of a 24/7 EHR help desk across multiple hospitals, the costs start to make sense.

Another interesting observation was that most rural hospitals are mostly Medicare and Medicaid funded. I’m not an expert on the pay scales of rural America, but when you look at the costs of living in the rural areas you realize that they don’t need to make as much money to live. Plus, I imagine in some cases there just aren’t that many jobs available to them. If they aren’t making as much money, then they’re more likely to qualify for Medicare and Medicaid. Why does this matter?

The amount of Medicare a rural hospital has matters a lot since if they don’t show “meaningful use” of a “certified EHR” then they will incur the meaningful use penalties. It’s simple math to see that the more Medicare reimbursement you receive the larger the EHR penalty you’ll incur.

There’s something that doesn’t feel right about the rich hospitals who’ve likely implemented an EHR before the stimulus getting paid the EHR incentive money while rural hospitals who can barely afford to keep their doors open getting not only penalties, but large penalties because of their large Medicare reimbursement. It’s probably water under a bridge now, but I could see why Stoltenberg Consulting suggested that rural and community hospitals should have been given more time to show meaningful use of an EHR.

As I mentioned, I’m still learning about the rural hospital EHR space, but I found these points quite interesting. If you have a different view or have experience that differs, I’d love to hear about it in the comments. No doubt there are thousands of unique rural environments and I’d love to learn more about them and how they’re approaching EHR. Please share your experiences and thoughts in the comments.

April 2, 2013 I Written By

John Lynn is the Founder of the HealthcareScene.com blog network which currently consists of 15 blogs containing almost 5000 articles with John having written over 2000 of the articles himself. These EMR and Healthcare IT related articles have been viewed over 9.3 million times. John also recently launched two new companies: InfluentialNetworks.com and Physia.com, and is an advisor to docBeat. John is highly involved in social media, and in addition to his blogs can also be found on Twitter: @techguy and @ehrandhit and @ehrandhit and Google Plus.

Analytics-Driven Compassionate Healthcare at El Camino Hospital

Written by:

Given its location in the heart of Silicon Valley, it may not be remarkable that El Camino Hospital was the first hospital in the US to implement EMR. What IS remarkable is that El Camino implemented EMR 51 years ago, leveraging an IBM mainframe system that Lockheed Martin refactored for healthcare from its original intended use for the space program.

Take a moment to process that. El Camino didn’t need PPACA, Meaningful Use, HITECH, or HIPAA to tell them health data is critical. El Camino saw the value in investing in healthcare IT for electronic data capture and communication without federal incentive programs or lobbyists. With that kind of track record of visionary leadership, it’s no wonder they became early analytics program adopters, and recently turned to Health Care DataWorks (HCD) as a trusted partner.

When I sat down with executive leadership from El Camino and HCD to discuss the journey up Tom Davenport‘s analytics maturity scale from rudimentary operational reporting to advanced analytics, I expected a familiar story of cost pressure, clinical informatics, quality measure incentives or alternative payment models as the business drivers for new insights development. Instead, I heard the burgeoning plan for a visionary approach to patient engagement and “analytics-driven compassionate care”.

Greg Walton, CIO of El Camino Hospital, admitted that initial efforts to implement an analytics program had resulted in “textbook errors”: “’Competing on Analytics’ was easier to write than execute,” he said. Their early efforts to adopt and conform to a commercially-available data model were hindered by the complexity of the solution and the philosophy of the vendor. “One of the messages I would give to anybody is: do NOT attempt this at home,” Greg laughed, and El Camino decided to change their approach. They sought a “different type of company…a real-life company with applicable lessons learned in this space.”

“The most important thing to remember in this sector: you’re investing in PEOPLE. This is a PEOPLE business,” Greg said. “And that if there’s any aspect of IT that’s the most people-oriented, it’s analytics. You have to triangulate between how much can the organization absorb, and how fast they can absorb it.” In HCD, El Camino found an analytics organization partner whose leadership and resources understand healthcare challenges first, and technology second.

To address El Camino’s need for aggregated data access across multiple operational systems, HCD is implementing their pioneering KnowledgeEdge Enterprise Data Warehouse solution,including its enterprise data model, analytic dashboards, applications and reports. HCD’s technology, implementation process, and culture is rooted in their deep clinical and provider industry expertise.

“The people (at HCD) have all worked in hospitals, and many still work there occasionally. Laypersons do not have the same understanding; HCD’s exposure to the healthcare provider environment and their level of experience provides a differentiator,” Greg explained. HCD impressed with their willingness to roll up their sleeves and work with the hospital stakeholders to address macro and micro program issues, from driving the evaluation and prioritization of analytics projects to identifying the business rules defining discharge destination. And both the programmers and staff are “thrilled,” Greg says: “My programmers are so happy, they think they’ve died and gone to heaven!”

This collaborative approach to adopting analytics as a catalyst for organizational and cultural change has lit a fire to address the plight of the patient using data as a critical tool. Greg expounded upon his vision to achieve what Aggie Haslup, Vice President of Marketing for HCD, termed “analytics-driven compassionate care”:

We need to change the culture about data without losing, and in fact enhancing, our culture around compassion. People get into healthcare because they’re passionate about compassion. Data can help us be more compassionate. US Healthcare Satisfaction scores have been basically flat over the last 10 years. Lots of organizations have tried to adopt other service industry tools: LEAN,6S; none of those address the plight of the patient. We’ve got to learn that we have to go back to our roots of compassion. We need to get back to the patient, which means “one who suffers in pain.” We want (to use data) to help understand more about person who’s suffering. My (recent) revelation: what do you do w/ guests in your house? Clean the house, put away the pets, get food, do everything you can to make guests comfortable. We want to know more about patients’ ethnicity, cultural heritage, the CONTEXT of their lives because when you’re in pain, what do you fall back on? Cultural values. We want a holistic view of the patient, because we can provide better, compassionate care through knowing more about patients. We want to deploy a contextual longitudinal view of the patient…and detect trends in satisfaction with demographics, clinical, medical data.

What a concept. Imagine the possibilities when a progressive healthcare provider teams with an innovative analytics provider to harness the power of data to better serve the patient population. I will definitely keep my eye on this pairing!

March 25, 2013 I Written By

Mandi Bishop is a healthcare IT consultant and a hardcore data geek with a Master's in English and a passion for big data analytics, who fell in love with her PCjr at 9 when she learned to program in BASIC. Individual accountability zealot, patient engagement advocate, innovation lover and ceaseless dreamer. Relentless in pursuit of answers to the question: "How do we GET there from here?" More byte-sized commentary on Twitter: @MandiBPro.

NetPulse, HIEs, and The Importance of Reliable EMRs — Around Healthcare Scene

Written by:

Have you ever wished that all your fitness and food trackers were in one place? Well, look no further. NetPulse is trying to do just that. The new platform is working with some of the hottest apps, as well as fitness equipment makers, to make taking control of your health easier and more convenient.

A group of researchers recently published an opinion in the Journal of the American Medical Association regarding cloud-based health records versus HIEs. The verdict? They feel that the cloud-based health records might be a better way of sharing health records. What they had to say was rather interesting, so don’t miss the recap of it over at EMR and EHR.

Still looking to use HIEs, rather than Cloud-based health records? The ONC has recently released a toolkit to help different healthcare professionals use them more efficiently. This toolkit includes several guides and a spreadsheet to help determine costs and savings that are associated with implementing an EHR.

For those that missed HIMSS, check out the video that John filmed of the Metro point of care solutions. It gives you a first person perspective of what you could have seen demoed at HIMSS if you were able to attend. Plus, it’s pretty cool to see the point of care and BCMA technologies in action.

It’s important for an EMR to be usable. However, this isn’t always the case, and it can be extremely frustrating. Dr. Shirie Leng, an anesthesiologist, is someone who feels that way. In a recent piece over at KevinMD.com, Dr. Leng discusses her EMR usability wish list. Be sure to check it out, and see if you agree. What is your usability wish list?

And, how smart is your current EMR? According to John, it might just be stupid. While they may have value, most EHR software is just full of dumb data repositories. Despite the negativity of this perspective, the future of EHRs does have hope. With the help of entrepreneurs innovators, current EHRs will be turned smart.

Finally, in order for EMRs to make the changes needed, to improve usability and become more “smart,” the vendors need to get it together.  KLAS recently put several popular EMRs head-to-head, reviewing their usability and efficiency. Although names weren’t listed, they found that some EMRs were very difficult to learn, and it’s not necessarily the physician who is using its fault. Perhaps it’s time that physicians and hospitals demand higher quality products.

March 24, 2013 I Written By

Katie Clark is originally from Colorado and currently lives in Utah with her husband and son. She writes primarily for Smart Phone Health Care, but contributes to several Health Care Scene blogs, including EMR Thoughts, EMR and EHR, and EMR and HIPAA. She enjoys learning about Health IT and mHealth, and finding ways to improve her own health along the way.