March 4, 2011
Compelling Case for Personal Health Records (PHR)
Written by: JohnI recently read an article (which I can’t find now) that said, We don’t log in to check our health data as much as we do our financial data. This was a pretty interesting statement considering a few days back I posted this tweet about PHR and being an active patient:
Figuring out the right motivation for someone to use a PHR has been something that’s been on my mind for quite a while. You may remember my post about requesting an appointment and sending your medical record using a PHR where I was asking some similar questions.
There’s certainly a place for software that connects patients with their doctors for things like scheduling an appointment, paying their bills, requesting prescription refills, and even doing e-visits. In fact, one of my advertisers recently launched an enterprise patient portal that has these types of features (check out this video which describes their feature set).
There’s no arguing that these types of connections to doctors are valued and something that patients would love to have. Many doctors are still on the fence about them, but I’m sure we’ll be seeing more and more of these types of services over time. However, while being really great features they still don’t solve the problem of a healthy patient wanting to log in to this portal regularly.
I think one game changer when it comes to PHR will likely be around an emerging set of devices which track our health. For example, over on Smart Phone Healthcare I recently wrote about Tracking Fitness and Activity Levels on Your Smartphone. These devices will track your steps, calories, heart rate, and sleep data and upload it to a centralized location where you can see all that data and watch your fitness and activity levels change over time. Plus, I believe we’re just getting started with collecting this type of data. You can easily see this moving to blood sugar levels, cholesterol, blood pressure, etc.
Now imagine that all of this data was available in your PHR. This type of data would be constantly updated and seeing the graphs of this health data over time is something that I’d login to check as much as I do my financial data.
Previously, I’d always been a bit down on these types of tracking devices. I’ve argued that we’re missing that link for doctors to be able to do something with the data that patients are collecting. I still think this is the case, but just because your doctor might not use the data a patient collects doesn’t mean it can’t be valuable to the patient to collect and see that data regularly. Plus, once EHR software and doctors are ready to digest the data, you’ll be ready as well.
Tags: Enterprise Patient Portal • Fitness Activity Tracking • Health Data • Personal Health Records • PHR • SmartphoneApril 29, 2010
Guest Post: Will Your New Smartphone Ruin Your Practice?
Written by: JohnGuest Post: Hayden Hartland works at Spearstone, makers of Spearstone’s DiskAgent offering which provides a multi-platform approach to smartphone security by allowing lock, data-wipe, and GPS-tracking from any web-browser along with online backup for your business.
Breathtaking advances in smartphone capabilities are changing the ways we work and live. In their latest forms, phones such as the iPhone, Android, Blackberry, Windows Phone, Symbian, and Palm are beginning to rival, and in several areas (think GPS, camera and video) exceed the capabilities of laptops and desktops.
Increasingly, we email, keep contacts, track tasks and appointments, browse the internet, capture family moments, connect with friends, shop, and even run powerful business apps from our hand-held do-it-alls. No wonder then that surveys show some people giving up computers altogether for smartphones. Trends indicate smartphone sales and usage will exceed that of laptops in the next five years. Analysts describe a future where Smartphones that dock to keyboards and monitors obsolesce the laptop altogether.
The problem is that while smartphones are leapfrogging laptops and desktops in utility and connectivity, they have introduced security risks that too few take seriously. Unlike desktops and laptops where some of the biggest risks lie in viruses, and the eventual failure of spinning hard drives, the biggest risk with a smartphone is the loss and exposure of the information you store on it.
More than 5,000 smartphones are lost or stolen each day. Most smartphones hold thousands of confidential records – patient lists, emails, documents, medical records, patient payment records, and so on – yet there is little or no ability to prevent their compromise if your phone is lost or stolen. Many were carried by healthcare professionals (doctors, nurses, dentists, office managers, billing providers, support staff, and so on) whose information represents real risk to their practices and patients if compromised.
Next time you notice a staff member, equipment rep, supply rep or any BAA using a smartphone, consider asking, “Are our emails accessible on that phone?” and “If you lose it, can anyone access them on the phone?” If you are a medical professional carrying a smartphone you need protection because odds are that eventually you will lose your phone. Furthermore, HIPAA, the FTC and state consumer organizations require notification of all patients of a data breach (not exactly good for any practice or healthcare business).
Current phones and typical user practices do a poor job of safeguarding your confidential information. While many smartphones can require a password or PIN number to use them, few of us can tolerate the hassle of actually using one. We simply use our phones too frequently to put up with it. Yet without one, we’re completely exposed. And while a phone password may protect your information in the case of loss, it can’t stop someone with phone hacking skills who wants to access your information.
Here are some practical tips you can employ to reduce your risks:
- Create a passcode for your phone. If you (like me) hate being pestered by it, set it to be required after 4 or 8 hours, so that you only need to enter it once or twice a day. If your phone is stolen and locked the thief will either need to hack your phone or reset the phone to factory settings thereby removing all the data in the process.
- Create a splash screen when your phone is locked displaying a contact phone number or email address and reward value. Consider etching your name and contact information somewhere on the phone.
- Remove sensitive information from your phone as soon as possible.
- Write down your IMEI (International Mobile Equipment Identity) number. If your phone is stolen, call your carrier immediately and ask them to deactivate the IMEI number and the phone will be rendered inoperable for calling on all networks. This ensures the phone is unusable although it doesn’t protect any unencrypted information on your phone.
Fortunately, a few larger clinics and hospitals are beginning to address these concerns. If yours is a larger practice with a Blackberry Enterprise server and or Exchange Mail Server and your users exclusively use the corresponding phones (Blackberries, and Windows Mobile devices), you can remotely remove emails and some other sensitive information in the event of a loss or theft. Other alternatives are to deploy encryption software or use the expensive MobileMe services provided by Apple. For other organizations, Spearstone’s DiskAgent offering provides a multi-platform approach to smartphone security by allowing lock, data-wipe, and GPS-tracking from any web-browser.
Tags: Android • Blackberry • DiskAgent • Hayden Hartland • HIPAA • HIPAA violations • iPhone • Palm • Smartphone • Spearstone





