Comments on: Guest Article: IT Security and Record Management in Healthcare http://www.healthcareguy.com/2008/03/13/guest-article-it-security-and-record-management-in-healthcare/ Shahid's healthcare IT, EMR, EHR, PHR, medical content, and document managment advisory service. Enjoy. Thu, 09 Feb 2012 13:50:00 +0000 hourly 1 http://wordpress.org/?v=3.1.3 By: alex farguson http://www.healthcareguy.com/2008/03/13/guest-article-it-security-and-record-management-in-healthcare/comment-page-1/#comment-689 alex farguson Mon, 13 Apr 2009 04:22:07 +0000 http://www.healthcareguy.com/index.php/archives/417#comment-689 Just grabbed the feed... thanks for posting this. Just grabbed the feed… thanks for posting this.

]]> By: Sclero Nurse http://www.healthcareguy.com/2008/03/13/guest-article-it-security-and-record-management-in-healthcare/comment-page-1/#comment-688 Sclero Nurse Mon, 24 Mar 2008 05:43:45 +0000 http://www.healthcareguy.com/index.php/archives/417#comment-688 I was talking with some co-workers about this very issue the other day at lunch. We all came to the conclusion that none of use had seen a system out there that could adequately deal with these issues. Its surprising that nobody has created a workable system considering the immense amount of potential revenue that is out there in the medical industry. One of my co-workers brought up a CRM program called Interaction that is very popular amongst lawyers and integrates Lexis Nexis. It would be nice if something like this program could be put in place for patient information management. I was talking with some co-workers about this very issue the other day at lunch. We all came to the conclusion that none of use had seen a system out there that could adequately deal with these issues. Its surprising that nobody has created a workable system considering the immense amount of potential revenue that is out there in the medical industry. One of my co-workers brought up a CRM program called Interaction that is very popular amongst lawyers and integrates Lexis Nexis. It would be nice if something like this program could be put in place for patient information management.

]]> By: François Jean http://www.healthcareguy.com/2008/03/13/guest-article-it-security-and-record-management-in-healthcare/comment-page-1/#comment-687 François Jean Tue, 18 Mar 2008 15:58:31 +0000 http://www.healthcareguy.com/index.php/archives/417#comment-687 An article that shows how the current information flow does not protect the privacy of the patient: http://www.healthcareitnews.com/story.cms?id=8904 In that case you know who got access to unauthorized information but they were not able to prevent it in first place. Maybe the problem reside in the balance between patient safety (the need to see the medical information for proper treatment) and patient privacy (hide medical information to unauthorized access). An article that shows how the current information flow does not protect the privacy of the patient:

http://www.healthcareitnews.com/story.cms?id=8904

In that case you know who got access to unauthorized information but they were not able to prevent it in first place.

Maybe the problem reside in the balance between patient safety (the need to see the medical information for proper treatment) and patient privacy (hide medical information to unauthorized access).

]]> By: Rich Olson http://www.healthcareguy.com/2008/03/13/guest-article-it-security-and-record-management-in-healthcare/comment-page-1/#comment-686 Rich Olson Fri, 14 Mar 2008 03:39:57 +0000 http://www.healthcareguy.com/index.php/archives/417#comment-686 Before HIPAA, every alleged breach in privacy was open to local adjudication. Unfortunately, it seems HIPAA, while making an attempt to codify and standardize privacy requirements, leaves plenty of opening for further litigation. I notice the proposed HIT federal budget included 13 positions for prosecuting HIPAA violations. One vexing practical issue, the good old patient identifier prohibition. If the goal is a National Health Information Network, how in the world can a person's records be linked without a key field? Can your firm design an encrypted form of the SSN, or whatever, that keeps prying novice eyes from mass identity theft, yet allows massive livesaving and time/resource-saving interoperability? Before HIPAA, every alleged breach in privacy was open to local adjudication. Unfortunately, it seems HIPAA, while making an attempt to codify and standardize privacy requirements, leaves plenty of opening for further litigation. I notice the proposed HIT federal budget included 13 positions for prosecuting HIPAA violations.

One vexing practical issue, the good old patient identifier prohibition. If the goal is a National Health Information Network, how in the world can a person’s records be linked without a key field? Can your firm design an encrypted form of the SSN, or whatever, that keeps prying novice eyes from mass identity theft, yet allows massive livesaving and time/resource-saving interoperability?

]]>