Monday, March 5, 2007

The Privacy and Security Solutions National Meeting - Part 1

This writer had the chance to participate in the Privacy and Security Solutions National Meeting held in Bethesda. (He didn't attend many sessions, but he talked in the hallways and read the reports.) Although TN was not awarded a contract, 33 other states and 1 territory (Puerto Rico) were. And the results were very positive.

Perhaps the best that can be said is that now several hundred individuals are focusing on the main concerns surrounding privacy in a digital era. And what is clear is that the current state of affairs - in a world with little health information exchange - is chaos. Just as e-prescribing flushes out the real workflow patterns (e.g., office staff refilling prescriptions without formal documented prescriber consent), the emergence of health information exchanges will bring out many issues surrounding consent, access, and protection that have been long overlooked.

The emergence of a digital health environment is a national imperative. To realize the potential of such a transformation, much must change. At present, the health care industry, the public, and many national and state leaders are in a state of profound denial.

Linda Dimitropoulos has done an outstanding job of turning what could have been a chaotic process into a set of organized issues. She concluded with the organizational focus of the meeting into four areas:
  • Consent and authorization
  • Data security and quality
  • legal and regulatory
  • Interpreting and applying HIPAA

Earlier in her slide presentation, she noted:
  • Strong variations in policies and practices
  • Lack of trust (she mentions organizations, consumers, but it is also a distrust of government)
  • The burden of change from a financial and workflow perspective.

Ms Dimitropoulos points out that the sources of variations arise from without our laws as well as our practices, citing:
  • HIPAA privacy rule
  • HIPAA security rule
  • 41 CFR(2)
  • CLIA, ERISA, and other regs
  • State privacy laws that are non-existent, conflicting, fragmented, antiquated or not relevant.
Her presentation focuses on a few other critical issues:
  • the variability and confusion over patient consent and authorization
  • Variability in interpretation of the minimum necessary standard
  • Concerns over liability

0 Comments:

Post a Comment

<< Home