“Ombudsman Bernard Richard says New Brunswickers need to insist that their private health information be protected as the province moves to electronic health records.
“It’s a sacred trust in my view,” Richard said Wednesday. “And it’s one that’s really in the hands of the health minister and public authorities. But they need to know that we care about it - that it’s important”.”
Article
Jeff Sharom, Science Canada, 2 October 2008
Tagged: privacy and security
; posted on Friday, October 3rd, 2008 at 8:35 am
No Comments »
“Proposed rules that would let doctors electronically prescribe controlled substances could raise the security bar in ways that frustrate health care providers.
E-prescribing is in a bit of a bind. The practice is caught between a federal directive that aims to encourage adoption and another that serves to inhibit use.”
Article
John Moore, Government Health IT, 26 September 2008
Tagged: document management, e prescribing, patient safety and security
; posted on Friday, September 26th, 2008 at 8:04 pm
No Comments »
“A Colorado man receives a $44,000 bill for colon surgery he did not have. Social workers in Utah accuse a woman of giving birth to a methamphetamine-addicted baby and threaten to take away her children. A mortgage lender rejects an application to refinance the home of a couple whose credit history is riddled with mysterious claims of unpaid medical bills.
All are victims of medical identity theft, a crime involving the use of stolen personal information to pose as someone else for the purpose of getting drugs, medical treatment or health care equipment. The crime has long existed in a somewhat benign and largely dormant form. Now, as the health care sector transitions to electronic formats, it is metastasizing.”
Article
John Pulley, Government Health IT, 24 September 2008
Tagged: security
; posted on Thursday, September 25th, 2008 at 8:09 pm
No Comments »
“The State Alliance for e-Health, made up of governors and state officials from across the country, is calling on states to support e-prescribing and address medical privacy and security issues in order to boost healthcare IT.”
Article
Bernie Monegain, Healthcare IT News, 23 September 2008
Tagged: consumer, disease management, disease surveillance, e health, e prescribing, Health Information Technology, interoperability, privacy, security and standards
; posted on Wednesday, September 24th, 2008 at 7:46 am
No Comments »
“Unterschiedlicher hätten die Bewertungen zur E-Card nicht sein können: Während Ärztevertreter in Hamburg weiter vor der Karte warnten, kam ein optimistischer Ausblick aus Kiel.”
Article (German)
Ärzte Zeitung, 10 September 2008
Tagged: data storage, security and smart card
; posted on Wednesday, September 10th, 2008 at 8:39 pm
No Comments »
“We fully agree with Carol Diamond and Clay Shirky that deployment of health information technology (IT) is necessary but not sufficient for transforming U.S. health care. However, the recent work to advance health IT is far from an exercise in “magical thinking.” It has been strategic thinking. To illustrate this, we highlight recent initiatives and progress under four focus areas: adoption, governance, privacy and security, and interoperability. In addition, solutions exist for health IT to advance rapidly without adversely affecting future policy choices. A broad national consensus is emerging in support of advancing health IT to enable the transformation of health and care.”
Abstract
Robert M. Kolodner, Simon P. Cohn and Charles P. Friedman, Health Affairs, 27, no. 5 (2008): w391-w395, doi: 10.1377/hlthaff.27.5.w391
Tagged: adoption, interoperability, privacy and security
; posted on Wednesday, September 10th, 2008 at 7:56 am
No Comments »
“This is a cautionary tale. The morals of the story may not apply to health IT applications the same way they do to other parts of the information technology world, according to some industry experts. Others say they do, indirectly.
Either way, the saga of how a network administrator held a city’s information system hostage has implications for anyone who comes in contact with health care IT — and that covers an increasingly large portion of our culture as we move toward a digital society.”
Article
George Lauer, iHealthBeat, 4 September 2008
Tagged: Health Information Technology and security
; posted on Wednesday, September 10th, 2008 at 7:37 am
No Comments »
“NHS Lothian is taking further action to prevent staff losing data on USB sticks, after a community health worker lost the personal details of 137 patients on a memory stick at the end of June.
Since the loss of the memory stick, which held letters to central Edinburgh GPs, the trust has run a USB stick amnesty and a data security information campaign that has included putting leaflets about its data security policies into staff payslips.”
Article
e-Health Insider, 9 September 2008
Tagged: security and USB
; posted on Tuesday, September 9th, 2008 at 7:49 pm
No Comments »
“Consumers may actually resist electronic health records, fearing they’re not quite safe.
While some studies suggest it will be consumer demand that drives the adoption of electronic health records, a recent Harris Interactive poll found a large percentage of consumers believe their records will not be secure in electronic form. Consumers were asked to respond yes or no to certain questions about electronic records crime.”
Article
AMedNews, 3 September 2008
Tagged: adoption and security
; posted on Thursday, September 4th, 2008 at 7:20 am
No Comments »
“Funded by the Robert Wood Johnson Foundation (RWJF), in collaboration with the California HealthCare Foundation, Project HealthDesign is a $5 million national program of PHR systems. Administered by a national program office at the University of Wisconsin-Madison, Project HealthDesign’s goal is to design and test a variety of PHR tools and applications that work together to help people achieve their various and specific health goals in an integrated fashion.
The program is supported by the Foundation’s Pioneer Portfolio, which funds innovative projects that can lead to breakthrough improvements in the future of health and health care.”
Report
Sujansky & Associates, LLC, Project HealthDesign, August 2008
Tagged: CCR, devices, empowerment, Google Health, HealthVault, HL7, interoperability, security, standards and terminology
; posted on Saturday, August 30th, 2008 at 7:00 am
No Comments »
“Waiting to meet someone for lunch today here in Harvard Square at the Out of Town News store and on the rack was the latest, September issue of Scientific American. The September issue is dedicated to security and privacy in a digital world. Though I have not read any of the articles, (will pick up the issue on my way home tonight), based on what I saw in the online version, this looks like a must read issue for the healthcare sector.”
Article
John Moore, Chilmark Research, 22 August 2008
Tagged: privacy and security
; posted on Monday, August 25th, 2008 at 8:02 am
No Comments »
“We fully agree with Carol Diamond and Clay Shirky that deployment of health information technology (IT) is necessary but not sufficient for transforming U.S. health care. However, the recent work to advance health IT is far from an exercise in “magical thinking.” It has been strategic thinking. To illustrate this, we highlight recent initiatives and progress under four focus areas: adoption, governance, privacy and security, and interoperability. In addition, solutions exist for health IT to advance rapidly without adversely affecting future policy choices. A broad national consensus is emerging in support of advancing health IT to enable the transformation of health and care.”
Article
Robert M. Kolodner, Simon P. Cohn, and Charles P. Friedman, Health Affairs, 19 August 2008
Tagged: adoption, Health Information Technology, interoperability, privacy and security
; posted on Wednesday, August 20th, 2008 at 7:49 am
No Comments »
“It’s been a while since I’ve written but ran across this article titled ‘MyFamilyHealth is a great Web 2.0 health site’, while researching another topic and had to type something. First, I’m not a web2.0 expert like my esteemed collegue, LoriMac, - but I do cover security for our team.”
Article
Pete Silva, DevCentral, 14 August 2008
Tagged: privacy, security, social network and web 2.0
; posted on Friday, August 15th, 2008 at 8:15 am
No Comments »
“There are more and more examples of how standard hacking techniques apply in healthcare, with serious consequences. Recent issues include RFID hacking and interference issues.
Recently, a talk at BlackHat regarding hacking medical devices, including pacemakers, has begun appearing in popular blogs.
What is most dangerous about this is not actually the hack itself, but the fact that the hacks could become widespread. Think about it; there is no real benefit to a hacker to simply kill a person. It is a serious crime and unless there is something to gain by doing it, it is unlikely to generate new interest with blackhat hackers.”
Article
Fred Trotter, 9 August 2008
Tagged: devices, rfid and security
; posted on Monday, August 11th, 2008 at 7:28 am
No Comments »
“I read a disturbing article in the NY Times last Friday about Dan Kaminsky’s talk at the Black Hat conference: he’s been beating the drum for a while now, warning of what sounds like a serious security hole in Domain Name Server software offering an open door to hackers of websites containing confidential information and into email (which could allow phishing for usernames and passwords for otherwise protected sites). The technorati seem to agree that he’s identified a serious problem, and it seems that not all affected parts of the internet infrastructure have applied patches or upgraded their software.”
Article
David Harlow, HealthBlawg, 10 August 2008
Tagged: phr and security
; posted on Monday, August 11th, 2008 at 7:22 am
No Comments »
“Yes, I do rant on at times about the whole privacy of health data issue as there is so much fear mongering, ill-informed/ill-logical pronouncements and just mis-information that it makes me want to scream. Of course, there is also the nearly weekly reports of this healthcare institution or that blowing it with regards to security and inadvertently releasing )stolen, or just mis-managed) consumer health data.”
Article
John Moore, Chilmark Research, 6 August 2008
Tagged: privacy and security
; posted on Thursday, August 7th, 2008 at 6:52 am
No Comments »
“Electronic prescribers who want to print prescriptions for Medicaid patients no longer will have to spend up to 10 times the cost of plain paper to comply with new tamper-resistance regulations, the result of intense negotiations between government officials, medical societies, the pharmacy industry, paper manufacturers, and two health-IT advocacy groups.”
Article
Neil Versel, Digital Healthcare & Productivity, 29 July 2008
Tagged: e prescribing and security
; posted on Wednesday, July 30th, 2008 at 8:35 am
No Comments »
“CCHIT announced yesterday that the blue ribbon PHR Advisory Task Force has released their recommendations for the follow-on PHR Workgroup to use in developing certification guidelines for PHRs. CCHIT will then use these guidelines to certify PHRs in much the way they now are certifying EMRs. Apparently, simply having the HON code is not enough for a PHR and in the future you may see some form of CCHIT certification label on a PHR website as well.”
Article
John Moore, Chilmark Research, 25 July 2008
Tagged: interoperability, phr, privacy and security
; posted on Saturday, July 26th, 2008 at 8:04 am
No Comments »
“The National Information Governance Board is to become a statutory body, replacing the Patient Information Advisory Group, following Royal Assent for the Health and Social Care Act 2008.”
Article
e-Health Insider, 23 July 2008
Tagged: confidentiality, information, safety, security and standards
; posted on Wednesday, July 23rd, 2008 at 8:19 am
No Comments »
“When the Louisville (Ky.) Health Information Exchange (LouHIE) considered forming a health record banking service, it sought the guidance of potential users—the Greater Louisville area community. LouHIE’s board of directors commissioned a research study of attitudes toward the service, hoping to learn about consumers’ health care interests, benefits, concerns and payment choices. The findings would guide the development of a business plan to drive consumer adoption of electronic health records. Launched at the annual Kentucky State Fair, the research initiative drew on phone, Web and paper surveys of consumer opinions.”
Article
Barbara Cox, HHNMostWired, 2 July 2008
Tagged: privacy and security
; posted on Thursday, July 3rd, 2008 at 10:01 pm
No Comments »
“After several years of mostly striking out with consumers, personal health record vendors are adopting a business-to-business marketing model, courting employers and insurers in hopes of expanding PHR adoption.
A recent study by Cambridge, Mass.-based industry analyst Chilmark Research found that of the more than 200 PHRs on the market, only 20% are Internet-hosted, which is what the study focused on.”
Abstract
Pamela Lewis Dolan, AMNews, 7 July 2008
Tagged: phr, privacy and security
; posted on Thursday, July 3rd, 2008 at 8:08 am
No Comments »
“A major consumer group, insurers together with Google Inc and Microsoft Corp said on Wednesday they have agreed to standards intended to speed adoption of personal electronic health records.
The electronic medical record field remains in its infancy. While U.S. privacy laws govern actions by medical providers such as doctors, there is little in the way of other established privacy, security and data usage standards despite decades of industry efforts.”
Article
Kim Dixon, Reuters, 25 June 2008
Tagged: Google Health, HealthVault, privacy, security and standards
; posted on Thursday, June 26th, 2008 at 7:49 am
No Comments »
“Security officials for one of the nation’s largest private payers said that widespread adoption of electronic health records could speed incidents of medical identity theft if security protocols are overlooked or sub par.
Quiggle warned that EHRs and other high-tech means of record-keeping could actually hinder anti-fraud efforts because a patient’s most sensitive data would be able to move farther and faster than if it was all stored on paper. Adding to the problem is the disparate level of security throughout the provider community and increasingly savvy thieves, he said.
“It’s a very uneven health system right now,” Quiggle said.”
Article
Matthew DoBias, Modern Healthcare Online, 19 June 2008
Tagged: security
; posted on Friday, June 20th, 2008 at 9:37 am
No Comments »
“Google Health announces that it is “safe, secure, and free.” It will not only store your private medical information from multiple facilities but will also let you control access to the information while acting as a medical resource of sorts. They claim they will never sell your data and “you choose what you want to share and what you want to keep private” and for further concerns to take a gander at their privacy policy. I’ve read that policy along with the 6 other pages the policy links to, more on that later.”
Article
John D., Infinity and Beyond, 18 June 2008
Tagged: Google Health, privacy, safety and security
; posted on Wednesday, June 18th, 2008 at 7:18 pm
No Comments »
“When Mary Adams had a mammogram in October, she didn’t have to wait for a call from her doctor — or even a note in the mail — to get her results.
Instead, she got a message from her Cleveland Clinic doctor that her online health record had been updated. She logged onto MyChart, one of the nation’s first online sites for personal health records, and voilà, there were the results: Everything was normal.”
Article
Janet Kornblum, USA Today, 12 June 2008
Tagged: data mining, Google Health, HealthVault, medical errors, privacy and security
; posted on Thursday, June 12th, 2008 at 7:19 pm
No Comments »
“On April 27, 2004, President Bush issued Executive Order (EO) 13335 “to provide leadership for the development and nationwide implementation of an interoperable health information technology infrastructure to improve the quality and efficiency of health care.” EO 13335 established the position of a National Coordinator for Health Information Technology (IT) within the Office of the Secretary of Health and Human Services. The National Coordinator was charged with coordinating federal health IT policies and programs and relevant executive branch agency outreach and consultation with public and private entities. As such, the National Coordinator provides the day-to-day leadership necessary for the development of a health IT infrastructure for the nation.
EO 13335 also charged the National Coordinator with developing, maintaining, and directing ” … the implementation of a strategic plan to guide the nationwide implementation of interoperable health information technology in both the public and private health care sectors that will reduce medical errors, improve quality, and produce greater value for health care expenditures.”
Accordingly, the Office of the National Coordinator for Health Information Technology (ONC) has worked across the federal government to develop this ONC-coordinated Federal Health IT Strategic Plan (the Plan), which identifies the federal activities necessary to achieve the nationwide implementation of this technology infrastructure throughout both the public and private sectors. The timeframe of the Plan is 2008-2012.
The Plan has two goals, Patient-focused Health Care and Population Health, with four objectives under each goal. The themes of privacy and security, interoperability, IT adoption, and collaborative governance recur across the goals, but they apply in very different ways to health care and population health.”
Report
Office of the National Coordinator for health-IT, 3 June 2008
Tagged: Health Information Technology, interoperability, privacy and security
; posted on Tuesday, June 3rd, 2008 at 10:41 pm
No Comments »
“A series of incidents in April called attention to the serious issue of data security.”
Article
Joseph Goedert, Health Data Management, 1 June 2008
Tagged: security
; posted on Monday, June 2nd, 2008 at 8:13 pm
No Comments »
“Want to know your lab test results at the click of a mouse, without having to wait for a phone call from your doctor?
That is now a reality.
Locally based medical information technology firm MedPlus has teamed up with the best-known name on the Internet - Google - to make lab results directly available on the Web.”
Article
James Pilcher, The Enquirer, 1 June 2008
Tagged: Google Health and security
; posted on Monday, June 2nd, 2008 at 7:34 am
No Comments »
“Do you want others to have access to your medical records?
Half of all GPs will consider refusing to put patient records automatically on to a new national database in defiance of the government, a survey finds.
The Guardian newspaper poll of 1,026 GPs and hospital doctors found many doubted the security of the new system.
Four out of five thought the confidentiality of their patients’ records would be at risk.”
Article
Heena R Modi, 31 May 2008
Tagged: confidentiality, consent, data storage and security
; posted on Sunday, June 1st, 2008 at 12:39 pm
1 Comment »
“GP representatives must ensure that a halt is put to the development of centrally-held patient records, this year’s local medical committees’ conference will hear.
The conference, to be held next month, is to debate a motion calling on the BMA’s General Practitioner Committee (GPC) to stop the development of centrally-held records and to promote a national publicity campaign to warn patients of the risks arising from their records being held on a national database.”
Article
e-Health Insider Primary Care, 28 May 2008
Tagged: confidentiality, consent and security
; posted on Wednesday, May 28th, 2008 at 9:57 am
No Comments »