Interoperability

Healthcare IT News and HIMSS are accepting topic and speaker proposals for the Pop Health Forum 2016, May 19-20, in Boston. While population health management is key to bending healthcare’s cost curve and improving the quality of care, achieving those goals is easier said than done. With that in mind, the Pop Health Forum’s goal is to give attendees, 250-plus healthcare providers and payers, solid information on how to improve their population health initiatives. Click here to submit a proposal and for more information. Attendees prefer case studies and are eager to learn how their peers are addressing common challenges and pain points. As such, we place a high value on proposals from payer and provider organizations that offer practical, actionable information and real-life solutions. Proposals should focus on one or more of the forum’s three key areas, the cornerstones of population health: data analytics, care coordination and patient engagement. The deadline to submit a proposal is 5 p.m., Feb. 12.

Only a few days remain to submit a speaking proposal for the HIMSS and Healthcare IT News Privacy & Security Forum in Los Angeles, May 11-12. The deadline for submitting a proposal is Thursday, Feb. 4 at 5 p.m. Speaking opportunities are limited to security professionals and experts from healthcare provider and payer organizations, government agencies and academic institutions. Presentations should be practical, actionable, and solutions-based. Click here for additional information and to submit a proposal. The two-day Privacy & Security Forum will bring together more than 200 leading providers, payers, researchers and government officials. The forum's goal is to provide healthcare security professionals with tools, solutions, best practices and expert insights into how they can better manage risk and protect their organization’s data assets. Presentations will address, among others, the following topics: BYOD, cybersecurity, incidence response, cloud security, data-loss prevention, HIPAA compliance, security frameworks, medical device security and third-party management.

Physician adoption of electronic health records rose steadily between 2013 and 2014, with nearly 75 percent of doctors going digital, according to the Centers for Disease Control and Prevention’s National Electronic Health Records Survey. The CDC’s four key findings based on the survey: In 2014, 74.1 percent of office-based physicians had a certified electronic health record system, up from 67.5 percent in 2013. The percentage of physicians who had a certified EHR system ranged from 58.8 percent in Alaska to 88.6 percent in Minnesota. In 2014, 32.5 percent of office-based physicians with a certified EHR system were electronically sharing patient health information with external providers. The percentage of physicians with a certified EHR system electronically sharing patient health information with external providers ranged from 17.7 percent in New Jersey to 58.8 percent in North Dakota. Access the full CDC report here.

Group sends letter to lawmakers urging fixes such as strengthening telehealth reimbursement policies under Medicare.

One of my all-time favorite Star Trek original series episodes is entitled "The Trouble with Tribbles." In this episode, Captain Kirk urgently races to a space station that's in distress. Once at the space station, he and the crew of the starship USS Enterprise encounter small furry creatures that purr and resemble something between a small cat and a cute guinea pig that are called Tribbles. Once these creatures are brought onto the Enterprise, they start immediately reproducing into litters of Tribbles and threaten to overwhelm the Enterprise and the crew. In much the same way that the cute and cuddly Tribbles start to overtake the USS Enterprise, so too have devices with ePHI overtaken and in some cases overwhelmed the hospital and healthcare technology ecosystems. The truly hard part is not simply containing the obvious devices and applications that store and transmit ePHI such as servers, computers, interface engines or electronic medical records. The real challenge are standalone devices, sometimes decades old, that unbeknownst to the users store and transmit ePHI. So where all can we look for these devices and how can we get in front of them so that they don't threaten your starship? First, it is critically important to conduct an ePHI data landscape analysis and document where and how ePhi data moves throughout your network. It is amazing how many times a network subnet or route takes a "hop" that is unaccounted for and could find its way to a device. For example, unassuming multi-function devices that users perceive to simply be photocopier / fax / printers can connect to your corporate network and can store documents on a network shared drive or email users on your behalf. Additionally, those multifunction devices can contain hard drives and copies of the print jobs or fax jobs that it has completed. One large health plan recently was penalized by the Office of Civil Rights to the tune of over one million dollars because the leased copy machines they returned contained hard drives that were unencrypted and had the ePHI information for over 300,000 individual's stored on them. Next, look for devices that do not connect to your corporate network but actually store and forward ePHI. There are a number of clinical modalities (hearing test machines, radiology systems, cardiology systems, etc.) that are considered clinical devices but connect to a standalone PC or laptop via a serial cable or some sort of connection from the instrument to the computer. An easy rule of thought is; if it has a hard drive on it then encrypt it! One of the most annoying tribbles that seems to have infiltrated organizations is the ever present 1980's style pager. Even more annoying is the fact that these pesky devices won't go away in the industry, much less that they can easily store hundreds of alpha numeric messages that surely could contain ePHI. If your organization has them, make sure that they are encrypted or better yet get rid of them for a smart clinical communication application that can take its place. There are a number of leading vendors out there that have clinical applications designed for the modern healthcare worker that take into account ePHI data storage and transmission. In the same sentence of a pager is the issue of healthcare workers texting each other patient information on their personal devices. While it's difficult to try and curtail behavior that occurs on a device completely out of the control of the organization, there must be thorough education, policy, and user attestation efforts to educate your healthcare worker population on why this must not occur. Convenience simply does not take precedence on what could be a major risk and issue for ePHI. Additionally, another legacy device that must be addressed is the standalone fax machine. Some fax machines have hard drives and can store the fax cover sheets for easy reprinting. If ePHI can be stored on those fax machines that could constitute a risk that needs to be addressed and mitigated. Another pesky tribble are automated batch and FTP jobs that "put" files onto network shares or distribution points for organizations to share information among each other. Make sure that these FTP jobs are secure and do not use network account credentials that are generic in nature or easy to guess. It's amazing how many of these jobs are setup by vendors when an application is initially installed, but are left on autopilot for years without audit. Lastly, work closely with your purchasing and finance departments to put controls into place that any electronic item coming into an organization is reviewed and has a proper ePHI risk assessment completed on it to ensure that there are appropriate ePHI controls in place. Beyond technology, it is the organizational culture that must be primed to understand the risks of ePHI proliferation and ensure all of the dimensions are addressed. Too often a tribble can quickly be introduced into an organization because it's the new cute and fuzzy creature that is admired and wanted by all. Captain Kirk ultimately saved the Enterprise by finding every single tribble and getting them off of the USS Enterprise. While that may not necessarily need to be the course of action for every tribble in your organization; you must try your absolute best to identify and remediate the risks before you suddenly realize one day that your starship has been overrun by what everyone assumed were cute and fuzzy innocent looking creatures.

Indianapolis-based Indiana Health Information Exchange and Cincinnati-based Health Bridge, two of the biggest and longest-standing health information exchanges in the United States, are now sharing data bidirectionally across state lines.

Whether it's leading healthcare CIOs and CMIOs offering their perspectives on burning issues or highlights from HIMSS Annual Conference and Exhibition, 2015's most popular videos from Healthcare IT News offer our audience a glimpse of the industry's journey through unprecedented policy and technological changes.

The path of destruction in the Gulf Coast states wrought more than a decade ago by Hurricane Katrina also resulted in unforeseen benefits for healthcare providers in the region.

Not many health information exchanges can say they handled a papal visit, but that's exactly what HealthShare Exchange of Southeastern Pennsylvania did.

Barely a month after its launch, the Carequality Interoperability Framework devised by The Sequoia Project has already signed up five health IT heavy-hitters to be the first to implement its data exchange principles: athenahealth, eClinicalWorks, Epic, NextGen Healthcare and Surescripts.