Electronic Health Records (EHR, EMR)

Good systems analysis requires adherence to a simple recipe – understanding who the stakeholders are and their needs, establishing design goals and working collaboratively to attain them. So how can the My Health Record system, which began in 2012 as opt-in and changed to opt-out 2018, be done better? We like to think the stakeholders are healthcare recipients and providers Australia wide. We would regard privacy, security and utility of health information as key design goals. We would hope that the many design aspects such as legislative, governance, administrative, medical and technical, be developed in harmony. Yet, all these aspects, when recently exposed to public scrutiny, have been found wanting. Researchers at Deakin University Law School under Professor Danuta Mendelson were quoted in Australian Doctor in December 2016 saying, "The My Health Record system appears more suited to supply data for government agencies and researchers than it is suited to healthcare". If the stakeholders rightfully were the Australian healthcare consumers and providers, we should be engaged in the design process and the design goals of utility, security and privacy should be achieved. Key to the design process is the question, "Does the electronic health data need to be in an online central repository?" If the stakeholders are those wanting access to big data about healthcare recipients and providers, the answer is, "Yes." If the stakeholders are Australia's healthcare recipients and providers, that answer may be different. Rights campaigner and lawyer Lizzie O’Shea drew a good analogy on Weekend Sunrise in July last year when she said, "When you centralise information like this … it becomes very attractive to hackers. We’re also putting power into the hands of government to decide how that information is to be used." "You wouldn’t cut a house key for every single plumber in the city, or every house painter [and] electrician… The same is true here; 900,000 medical professionals and 12,000 organisations have access to these records. Why would you design a system like that?” she said. Much has been touted about the benefits of treating doctors, for example, having ready access to an unfamiliar patient's data. The benefits are acknowledged and assumed to be achievable only from a centralised repository of health data. An online central repository accessible by hundreds of thousands of legitimate access points cannot be defended against cyber attack. An attacker need hack only one of these to gain access to every record in the database to see, copy and change at will. A POSSIBLE WAY FORWARD Germany implemented the first-generation of its system of smart eHealth cards in 1993 and this was then developed into the second-generation eHealthcare card in 2017. Data stored on the second-generation German eHealthcare card includes the insured person’s name, date of birth, address, gender, insurance number and coverage status.​ In addition, there is an option for additional personal data to be stored on the card with a person’s consent, such as emergency data and medication, allergies or drug intolerance. Currently, data is accessible by authorised healthcare providers on presentation of the eHealth card. There is no need for a centralised repository, which could be hacked or used for purposes other than for healthcare. If a card is lost or damaged, it is replaced by the issuing authority and data restored from the backup performed at the most recent healthcare consult. The data format is also not constrained by the physical design of the eHealth card memory chip. In 2017, 70 million Germans were in possession of the card. In the near future, a new generation of cards is expected to facilitate the exchange of medical information necessary for treatment, with the inclusion of emergency data, electronic medication plans and electronic patient records on the card. Some other main benefits of the new and improved system are said to include the prevention of redundant medical examinations by different doctors and the online update of administrative data. As such, the benefits of an eCard based system are: Patients control who and only who gets access to the data The entire database of health information is not in a centralised repository connected to the internet Patients don't need to be concerned about what present and future governments, as well as other non-healthcare organisations may do with their health data eCards are flexible about the way data may be stored and retrieved, enhancing the utility of healthcare data A comprehensive telematics infrastructure interface that provides secure communication of health data: eScripts, eReferrals, test results, health insurance, etc. updating the eCard at points of service.  A similar system could be designed for Australia, but the following need to be considered:   How do we make the data useful? It needs to be reliable, complete, up-to-date and stored in a manner which encourages meaningful, apt and rapid retrieval by the healthcare provider and associated recipient. How do we make it secure? We make it virtually impossible for the data to be retrieved by unauthorised actors. How do we make it private? We make it secure and prohibit use outside direct healthcare except only by informed explicit consent of the healthcare recipient. It is possible for Australia to have an eHealth system that services healthcare providers and recipients as primary stakeholders, but Australia is a long way from making such a system a reality. All aspects of the current My Health Record system design – legislative, privacy, health utility, security and technical – need a comprehensive overhaul. To achieve this requires our governments to change the present system, which has shortcomings in legislature, privacy, healthcare delivery, security and technology. There is a fundamental conflict between providing health data for government and non-government organisations, which the My Health Record system is geared to do, and providing an effective eHealth system which respects the privacy and trust of the patient-doctor relationship. Specifically, privacy, powers of the Minister to make rules, substantial powers invested in the System Operator and delegation of these powers need to be reviewed and changed (the original draft legislation commissioned by the Department of Health was substantially changed before presentation to the Parliament 2012). A focus on making the data relevant to immediate healthcare rather than value as cohort data needs to enliven the My Health Record use. A realisation of the fundamental vulnerability of centralised data accessible over the internet needs to drive a new paradigm. The new paradigm must make it practically impossible for everyone's data to be viewed, copied, or changed by unauthorised actors. This will allow for the use of data with informed consent, for example for research, so that it can be aggregated on a case by case basis rather than offering the totality of data by default as a smorgasbord. The most succinct summary of My Health Record’s current state was given in a submission to the Inquiry by an unnamed person who "held a variety of roles at Commonwealth Department of Health":  "In my analysis, both the government and the system operator of My Health Record, the Australian Digital Health Agency... have grossly overstated the benefits to individuals of My Health Record... which is primarily a glorified Dropbox,” he wrote. "The primary functionality of My Health Record is to facilitate secondary data usage, for government and non-government organisations, and that it is they that will be the primary beneficiaries of the system. "In terms of its usefulness for clinical practice and for individual health record management and tracking, it is not fit for purpose, although not entirely useless. This is primarily because My Health Record is about medical records storage rather than providing an up-to-date and accurate medical history overview that can be quickly drilled down into.” The only way the My Health Record can truly be Our Health Record rather than a “glorified dropbox” is if a smart eHealth card system similar to what Germany has in place is adopted.   Paul Power is the head of IT Consultancy to the medical profession, Power Associates. He also appeared as a witness and made submissions to the Senate Inquiry into the My Health Record system in 2018 and the Senate Inquiry into the Medicare card data breach in 2017. Graham Grieve counters the case for smart eHealth cards with the argument that smartphones would work better. Read more.

HIPAA is inextricably linked to patient privacy, but building a trusted, long-term patient relationship goes beyond HIPAA compliance and requires a deeper commitment to keep patient PHI safe and private.

Since implementing a suite of Nuance voice recognition tools, the health system has seen a 23 percent reduction in transcription costs and 71 percent of users reporting that the quality of their documentation has improved significantly.

With telemedicine evolving, efforts are underway to provide medical care to refugees in camps using a cloud-based electronic health record built on blockchain, says Brian de Francesca, CEO of Ver2 Digital Medicine.

EmblemHealth CEO Karen Ignagni says the effort gives a glimpse into the next generation of population health.

Monash Health and Sunraysia Community Health Services (SCHS) are the latest healthcare providers to embark on EMR journeys. Monash Health has commenced the rollout of Global Health’s MasterCare EMR solution across its drug and alcohol services division, while SCHS will implement a suite of software applications centred around Global Health’s client management and data collection EMR system. Both organisations join the ranks of Bass Coast Health, Justice Health Victoria, Fremantle Hospital and the Black Dog Institute for their recent MasterCare EMR deployments. Global Health said Monash Health is the third Victorian Alcohol and Other Drug (AOD) service to adopt the platform. Windana Drug and Alcohol and Bass Coast Health were the two early adopters for Victorian Alcohol and Drug Services (VADC) in mid-2018. MasterCare General Manager Kye Cherian said core function for Monash Health Drug and Alcohol services will be to ensure that it can effectively manage clients, in line with new VADC data capture and reporting requirements. The requirements were amended in November 2018 to remove identified discrepancies between data element definitions and ensure that data quality is fit for purpose. “With the concentration of the Australian Government in this area and a Royal Commission in Victoria, highly sophisticated and flexible platforms which allow for electronic connectivity, data collection and retention, secure messaging, coordination of services and recordings necessary for government compliance are increasingly essential in this complex area,” he said. Cherian also said the company is starting to see trends in data reporting requirements across both state and federal programs that require more structure and data integrity. “MasterCare… has a robust episodic framework that supports these structured community programs,” he said. As for the SCHS deployment, the deal also includes features modules from Global Health’s new-generation mobile-optimised, SaaS-based MasterCare+ solution. These include the Lifecard consumer health record, ReferralNet for secure message delivery, Patient Portal for online admissions and the HotHealth engagement portal. MasterCare Data Warehouse will also be deployed to support real-time data analysis using dashboards. The new platform is scheduled to be operational by July 1. [Read more: Fremantle Hospital deploys EMR system for better support of care in WA | University Hospital Geelong improves ED clinical workflows] Cherian said implementing MasterCare EMR across SCHS’ various health services will enable the organisation to produce a complete electronic health record for each patient using a standardised ‘Collect Once – Use Often’ methodology, which aims to collect patient information only once. SCHS’ broad range of state and federally funded programs in North West Victoria include the Community Health Program, Commonwealth Home Support Program, Home and Community Care Program for Younger People, Alcohol and Other Drug programs, National Disability Insurance Scheme and Primary Health Networks. “Each program has different minimum dataset requirements and reporting processes. By broadening the scope of the engagement beyond standard data collection criteria, SCHS will experience the combined benefits of taking a holistic approach to patient management, data capture and reporting through a single platform,” Cherian said. “These include streamlined data collection, electronic patient records, enhanced community health program reporting and improved patient engagement.”

The HELP Committee on Tuesday heard feedback from stakeholders about how the proposed rules from CMS and ONC should be fine-tuned for optimal effect.

Ian McCrae, founder and CEO of Orion Health, discusses how machine learning can provide medical records to physicians and nurses in a coherent manner so the data is not overwhelming.

Prof. Jane Griffiths, associate professor and chief nursing information officer at the Dubai Health Authority, says for game-changing tech to be effective, technology partners and clinical partners must be on the same page.

Agreeing to the same format for demographic data would boost patient safety, according to research from Indiana University and Pew.