Data Security in Electronic Health Records

2010 ◽  
pp. 182-194
Author(s):  
Stefane M Kabene ◽  
Raymond W. Leduc ◽  
Candace J Gibson

Traditionally, patient information has been recorded on paper and stored in file folders at healthcare facilities and within physicians’ offices. The implementation of electronic health records (EHRs), the lifetime record of an individual’s health and health services delivered, allows for information to be stored on computers and offers the opportunity to store considerably more data, in much less space, with new efficiencies and value added as information is easier to access, legible, timely, non-redundant and readily available. However, there are many issues to consider with the implementation of a fully shared EHR. The protection of the information contained in the record is of the utmost importance as individuals stand to become quite vulnerable if that personal health information is compromised or accessed by unauthorized users. Therefore, one of the goals of this chapter is to uncover ways in which personal health information is being protected in EHR systems. The second objective, a broader one, examines what regulations, legislation and policies are in place that remove some of the uncertainty and risk and make the use of shared information safe and secure. Many of the techniques and technologies used so far are adopted from the corporate world, where data security has been an issue for some time. Current legislation in the United States and Canada at both the federal and state/provincial levels has addressed the general principles of data security and privacy but are still lacking in specifics with regard to cross-jurisdictional sharing of health information and the implementation and use of EHRs. Many of the researchers and studies on the subject find this to be one of the most important areas of concern moving forward. The opportunities for EHR implementation and use are exciting as they have the strong potential to improve both individual health care and population health, but without proper regulation and policies in place it is possible that the risks may outweigh the benefits.

2011 ◽  
pp. 1934-1947
Author(s):  
Stefane M Kabene ◽  
Raymond W. Leduc ◽  
Candace J Gibson

Traditionally, patient information has been recorded on paper and stored in file folders at healthcare facilities and within physicians’ offices. The implementation of electronic health records (EHRs), the lifetime record of an individual’s health and health services delivered, allows for information to be stored on computers and offers the opportunity to store considerably more data, in much less space, with new efficiencies and value added as information is easier to access, legible, timely, non-redundant and readily available. However, there are many issues to consider with the implementation of a fully shared EHR. The protection of the information contained in the record is of the utmost importance as individuals stand to become quite vulnerable if that personal health information is compromised or accessed by unauthorized users. Therefore, one of the goals of this chapter is to uncover ways in which personal health information is being protected in EHR systems. The second objective, a broader one, examines what regulations, legislation and policies are in place that remove some of the uncertainty and risk and make the use of shared information safe and secure. Many of the techniques and technologies used so far are adopted from the corporate world, where data security has been an issue for some time. Current legislation in the United States and Canada at both the federal and state/provincial levels has addressed the general principles of data security and privacy but are still lacking in specifics with regard to cross-jurisdictional sharing of health information and the implementation and use of EHRs. Many of the researchers and studies on the subject find this to be one of the most important areas of concern moving forward. The opportunities for EHR implementation and use are exciting as they have the strong potential to improve both individual health care and population health, but without proper regulation and policies in place it is possible that the risks may outweigh the benefits.


2018 ◽  
Vol 10 (4) ◽  
pp. 288 ◽  
Author(s):  
Katharine A. Wallis ◽  
Kyle S. Eggleton ◽  
Susan M. Dovey ◽  
Sharon Leitch ◽  
Wayne K. Cunningham ◽  
...  

ABSTRACTGeneral practitioners are increasingly approached to participate in research and share de-identified patient information. Research using electronic health records has considerable potential for improving the quality and safety of patient care. Obtaining individual patient consent for the use of the information is usually not feasible. In this article we explore the ethical issues in using personal health information in research without patient consent including the threat to confidentially and the doctor-patient relationship, and we discuss how the risks can be minimised and managed drawing on our experience as general practitioners and researchers.


2021 ◽  
Author(s):  
Sophia Ly ◽  
Ricky Tsang ◽  
Kendall Ho

BACKGROUND While the digitization of personal health information (PHI) has been shown to improve patient engagement in the primary care setting, patient perspectives on its impact in the emergency department (ED) are unknown. OBJECTIVE The primary objective was to characterize the views of British Columbia (BC) ED users on the impacts of PHI digitization on ED care. METHODS This was a mixed-methods study consisting of an online survey followed by key informant interviews with a subset of survey respondents. ED users in British Columbia were asked about their ED experiences and attitudes towards PHI digitization in the ED. RESULTS One hundred and eight participants submitted survey responses between January and April 2020. Most survey respondents were interested in the use of electronic health records (75%) and patient portals (85%) in the ED and were amenable to sharing their ED PHI with ED staff (up to 90% in emergencies), family physicians (up to 91%), and family caregivers (up to 75%). Sixteen survey respondents provided key informant interviews in August 2020. Interviewees expected PHI digitization in the ED to enhance PHI access by health providers, patient-provider relationships, patient self-advocacy, and post-discharge care management, although some voiced concerns about privacy risk and limited access to digital technologies (eg, smart devices, internet connection). COVID-19 was thought to provide momentum for the digitization of healthcare. CONCLUSIONS Patients overwhelmingly support PHI digitization in the form of electronic health records and patient portals in the ED. The COVID-19 pandemic may represent a critical moment for the development and implementation of these tools.


2015 ◽  
Vol 96 (2) ◽  
pp. 227-233
Author(s):  
Sh M Gimadeev ◽  
A I Latypov ◽  
S V Radchenko ◽  
D F Khaziakhmetov

Aim. Comparative assessment of an automation facilities influence on labor input and business processes’ productivity indicators related to primary functions of healthcare facilities of different types.Methods. We performed medical personnel’s work timing in emergency rooms, as well as medical records timing in clinical departments. The automated electronic health records processing while operating hospital information systems created by authors among different types of healthcare facilities was also performed. Output data included personal health record operation periods values and system events timestamps.Results. The data concerning hospital information systems’ influence on electronic health records operating time changes and hospitalization delays was obtained. A correlation between the initial hospitalization delay and hospital capacity was discovered (r=0.917). The emergency room automation significantly reduces hospitalization delays. Under clinical information system operating conditions, the primary examination time recording increases twice, while the time spent for all other electronic health records decreases in higher order. Considerable difference between primary examination recording time and the time, necessary for other personal health record registrations, has satisfactory interpretation within the heterogeneous medical data sources integration model, but not within usability model. In general, the gained data does not confirm results of previously published researches pointing the increased time doctors spent for data management in automation conditions.Conclusion. Hospital information systems implementation improved the specialist’s labor productivity and main working processes work capacity. The obtained data indicate a greater influence of automation in large healthcare facilities and reject usability hypothesis of hospital information systems efficiency.


2019 ◽  
Vol 1 (2) ◽  
pp. 42-49 ◽  
Author(s):  
Donna S. McDermott ◽  
Jessica L. Kamerer ◽  
Andrew T. Birk

Electronic health records (EHRs) pose unique concerns for administrators and information technology professionals with regard to cybersecurity. Due to the sensitive nature and increasing value of personal health information, cyber risks and information protection should be a high priority. A literature review was conducted to identify potential threat categories and best practices in protecting EHR information. Potential threats were identified and categorized into five areas; physical, portable devices, insider use, technical, and administrative. Government policies have created administrative, physical, and technical safeguards to keep EHR information safe. Despite these efforts, EHRs are being targeted by cyber-criminals due to flaws in personal and organizational management of protected healthcare information. This paper aims to educate, inform, and advocate for the proper handling of EHRs to alleviate the burden caused by compromised electronic documents.


Sign in / Sign up

Export Citation Format

Share Document