Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« Good, Free Information Security Materials from the USPS | Main | iPod Accomplice for Stolen Credit Card Numbers in San Francisco »

Health Information Privacy and Security Week: April 9 - 15; Memories of Seinfeld

Next week is Health Information Privacy and Security Week, sponsored by the American Health Information Management Association (AHIMA). 

Through this week AHIMA is encouraging each person to keep his or her own personal health record (PHR) to "help reduce or eliminate duplicate tests and allow you to receive faster, safer treatment and care in an emergency." I think this is a good idea, but I know that I have not been able to collect all the information each of my healthcare providers has about me and my children, so being able to maintain my own PHR would be quite a challenge. 

Even though HIPAA provides folks in the U.S. with the opportunity to view their own PHI, much medical information within patient records falls outside the HIPAA requirements, and healthcare providers often do not want to provide all details to patients, for various reasons.  Remember that episode of Seinfeld where Elaine reads her chart in the doctor's office, the doctor is upset when she confronts her about it and tells her she shouldn't be reading her chart?  This reminds me of that episode...there is likely significant information within patient records that most people never know about.

I think raising awareness of health information privacy and security is a great idea, and the other four topics this week highlights are also worth noting.  All the topics as outlined by AHIMA include the following:

  1. "Each of your healthcare providers compiles a separate medical record on you. This means your complete history probably cannot be found in any one place. By keeping your own personal health record (PHR), you can provide your doctors with valuable information that can improve the quality of care you receive. A PHR can help reduce or eliminate duplicate tests and allow you to receive faster, safer treatment and care in an emergency.
  2. Federal laws are in place to protect the privacy and give you access rights to your health information. Under the Health Insurance Portability and Accountability Act (HIPAA), you can view, request changes to, and obtain copies of health information documents collected and kept about you.
  3. Your information can only be seen by those who need it in order to provide your treatment, to facilitate payment for healthcare services, and to make sure quality care is being received. Your information may also be used for research and as a legal document in cases where evidence of care is needed. Anyone else who wants to use it for any other purpose needs your permission first.
  4. The healthcare industry and the federal government are working to improve healthcare through the use of information technology. This is done through the use of electronic health records (EHR) and a secure system that would allow EHRs to be shared across healthcare systems and providers to allow you greater access to your health information.  Currently most healthcare providers still manage medical records in a paper format.
  5. At healthcare organizations across the nation, health information management professionals are working to maintain your health record. These professionals are responsible for ensuring your health record is accurate, complete, confidential, and available when you, your doctor, and other healthcare professionals need access to the information."

Technorati Tags



TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/48

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.