Skip Links

Network World

Jamey Heary
Back to Cisco Subnet

Cisco Security Expert

by Jamey Heary
Previous Article Next Article

Obama’s Electronic Health Records initiative could usher in a new wave of ID theft

By jheary on Mon, 02/16/09 - 4:39pm.
Newsletter Signup

With the stimulus bill all but signed it looks like the government will be handing out $19 billion in an effort to digitize America’s health record system. The problem is we have a noble goal but no plan or direction on how it should be accomplished. The stated goal, which has garnered substantial support, is to build a National Electronic Health Records (EHR) system. But the plan or direction on how to get us there is completely missing from the stimulus bill. When the government throws lots of money at a problem before they have a viable plan or even the framework of a plan in place disaster usually strikes. Reference the recent Tarp disaster for proof. Given the current stimulus bill’s ambiguity it looks like we are destined for yet another misuse of funds, this time with modernizing healthcare.

Modernizing America’s health record system is not a new undertaking by government it just has a new advocate, President Obama, willing to take up the fight for it. President Bush was the first to start down this path when he formed the Office of the National Coordinator for Health Information Technology in 2004. Unfortunately, the new office was never given the funds or support that it desperately needed to accomplish its goal. Its goal was, and still is, to create an electronic health record for every American by 2014. Given that this goal was announced 5 years ago and only has 5 more years to go one would assume it should be about halfway-accomplished right? Ah…not exactly. Reality is we really haven’t even started yet. Up to now it is mostly window dressing and press releases.

And since we are starting basically from scratch here there are a few things that stand out as problems with the current stimulus bill as it relates to EHR.

The first one is the Institute for Health Freedom (IHF) is warning the public that the economic stimulus bill mandates the federal government to plan for each American to use "an" electronic health record (EHR) by 2014 -- without opt-out or patient-consent provisions. This is a very serious breach of privacy and one I would hope will be overturned with time. Seems as though the government decided to not come up with a comprehensive plan but instead made sure that no matter what it is everyone will have to be a part of it. This would open up your complete medical records to over 600,000 healthcare providers, payment processors, and government health agencies without your consent. An no, HIPAA will not protect you from this. This kind of pervasive access to anyone’s health records screams of privacy and security concerns.

Ok, so maybe your thinking that this is not so bad because it is for the greater good, just needs to be done, and we can trust the government to protect our security and privacy.

1234next ›last »
Tags

Working in Healthcare IT

0

I work in the IT department of a Healthcare system serving 5 hospitals and multiple physician's offices. We have 3 of the 5 hospitals on EMR now and are moving more and more in that direction. I can tell you it is a HUGE undertaking and requires more than just software, but an entire assessment of the infrastructure and large amounts of user training...and that's just for our little piece of this huge puzzle. However, it definitely is worth it when it comes to reducing costs and mistakes.

My idea would be some kind of a clearinghouse, a third party similar to that which handles the transfer of mobile phone numbers from one company to another. Then, hospitals and physicians would be free to use whatever software makes sense for them, so long as they are able to upload the patient's record in a common format (probably XML or some other standard format). Then, when a request comes in for that patient's record through the 3rd party, the hospital or physician uploads the file in that format to the clearinghouse, which is responsible for verifying the validity of the request from the other side. The other side, once cleared, downloads the file and then is responsible for translating it into whatever format their system uses. This way, we wouldn't be opening up our systems to every single other hospital or doctor's office.

Process for Fixing Errors in Medical Records

0

With so many people/parties having access to your medical records, there needs to be a standard procedure in place for investigating, noting, and correcting errors in patients' medical records. Incorrect information in your medical records can affect the quality of care you receive, as well as (depending on the error(s)) negatively affect your health. I did not know this was a problem until it happened to me, while seriously ill. At this large hospital in a major US city, there was no standard procedure in place to even look into errors, I filled out forms (got me nowhere), called the head of Health Information Management (got me nowhere), wrote many letters with copies of the forms I had filled out, as well as dates/times/names of people I spoke with on the phone (got me nowhere). The next thing I did was send registered letters (with copies of the forms/letters/documentation of calls) to each doctor who had seen me at that hospital informing them that there were errors in my medical records that I had taken several steps to try and have corrected, and that they are formally being notified that the records of this particular hospital visit should not be regarded as factual. At the same time, I sent registered letters to the head of Health Info Management, as well as the two people who worked under him. I let them know that I had formally notified my doctors that my medical records from that hospital visit should not be taken as factual, that no one would even look into this, that this could compromise my future quality of care, and that by leaving my medical records with incorrect information that they have been notified of numerous times, they are liable for any of my future compromised care. What they finally did was send me the original (inaccurate) records, with the untrue part crossed out in pen, and initialed?????????!!!!!!!!! I do not think that is going to come up on the computer (the "crossed out" marks) when the doctor brings it up on the screen!!! I am sick of fighting with them, and I wonder how many others (who do not know they should periodically check their medical records) this has been done to. This particular mistake involves pain medication that I was *not* given (controlled substance). That substance is in a locked cabinet and has to be signed out. I think that is why they are sweeping it under the rug. I want to know **who** received this supposed "dose", while I had to suffer through a horribly painful allergic reaction???? Did they give this to the wrong person? Do they possibly have an addict working on that floor?

Any suggestions on where to go from here would be appreciated.

HITECH Act

0

This HITECH Act -- and $19 billion down-payment – is a grand first act toward establishing pervasive electronic health records throughout the U.S. Salting the mine with incentives for Medicare and Medicaid patients surely gets providers using HIT and building an EHR infrastructure (along with streamlining care for seniors and uninsured.)

But, will that Medicare/Medicaid dose be enough to change the system for everyone else, most especially those in their teens, 20’s and 30’s who will benefit most from wellness, preventive care, and complete medical records over their lifetimes? How will such efforts expand beyond rural areas and selected populations? Are we ready to start creating portable records for uninsured children, or are we going to let them slip through the cracks in our imperfect information environment? The goal of comprehensive care first requires comprehensive records. Learn more: www.healthcaretownhall.com

I am a solo family physician

0

I am a solo family physician who "went digital" four years ago. To date, some 2700 active patient files are in my system. I can access and send pertinent medical data from anywhere in the world with an Internet connection to anywhere in the world with a fax machine, 24 hours a day in a secure and rapid manner. I neither need nor ask for another information system to improve the quality of care I afford my patients.

Having considered the matter at length, I think I can speak with some authority on the impact that this ill-considered Act will have on the practice of medicine.

Trust is the lynchpin of the physician-patient relationship. Once the door to the examining room is closed, patients must feel comfortable that they can frankly and honestly disclose whatever we deem necessary to their care. When a centralized, government-run system of reporting, evaluation and "guidance" (a euphemism for having unlicensed individuals mandating how to practice medicine) is in place, trust will be lost and the relationship with patients will be irrevocably damaged.

I am a solo family physician

0

I am a solo family physician who "went digital" four years ago. To date, some 2700 active patient files are in my system. I can access and send pertinent medical data from anywhere in the world with an Internet connection to anywhere in the world with a fax machine, 24 hours a day in a secure and rapid manner. I neither need nor ask for another information system to improve the quality of care I afford my patients.

Having considered the matter at length, I think I can speak with some authority on the impact that this ill-considered Act will have on the practice of medicine.

Trust is the lynchpin of the physician-patient relationship. Once the door to the examining room is closed, patients must feel comfortable that they can frankly and honestly disclose whatever we deem necessary to their care. When a centralized, government-run system of reporting, evaluation and "guidance" (a euphemism for having unlicensed individuals mandating how to practice medicine) is in place, trust will be lost and the relationship with patients will be irrevocably damaged.

I will no longer be granted confidence by patients for acting in their best interests. Rather, I will be viewed as a technician who is an extension of an intrusive State and whose allegiance lies beyond the immediacy of their care. In return, I will be increasingly pressured not to think of them and their unique presentations and circumstances, but rather how I can fit them into the practice guidelines that will be imposed on me.

I will not tolerate this. No physician or patient should. If this matter goes unchanged, I will simply quit private practice.

Regarding concerns involving

0

Regarding concerns involving integrity larceny being electronic medical records (EMR), my task has solved this arrive with our proprietary BioMedKey, which has been developed specifically to lock on EMR. Our portable storage equipment is currently as introduced at the RSA Conference predominance San Francisco. Stem Cell Therapy

EMR Identity Theft

0

Regarding concerns involving identity theft for electronic medical records (EMR), my company has solved this issue with our proprietary BioMedKey, which has been developed specifically to secure EMR. Our portable storage device is currently being introduced at the RSA Conference in San Francisco. More info can be found at www.biomedkey.com.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • You can use BBCode tags in the text.
  • Lines and paragraphs break automatically.
  • Allowed HTML tags:



More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
Welcome, visitor. Register Log in
About Cisco Security Expert

Jamey Heary, CCIE No. 7680, is the author of the book by Cisco Press. Jamey is a seasoned security technologist with over 15 years in the IT field with 10 years focused on IT security. His areas of expertise include network and host security design and implementation, security regulatory compliance, and routing and switching. His other certifications include CISSP, CCSP, and Microsoft MCSE. He is also a Certified HIPAA Security Professional. Jamey is currently a Security Consulting Systems Engineer with Cisco, though the opinions expressed here are his own. Jamey is a member of Network World's Cisco Subnet blog community.

.

  • RSS
  • Contact Requires Login
Archives
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
Categories
15.0 security
Borderless Networks
Cisco
Cisco IOS Security
Cisco Security
FTC
General discussions
H1N1
Heary
ID theft
IOS security
IPS
IT security
Jamey Heary
LANs / WANs
Security
URL filtering
VPN
VoIP / Convergence
Web security
Windows 7 security
Wireless / Mobile
anyconnect 2.4
cisco asa vpn
cisco borderless network security
cisco ip video surveillance
cisco ips
cisco ips 7
cisco ironport
cisco ironport web security
cisco physical security
cisco reputation
cisco vpn client windows 7
cisco vpn windows 7
cisco windows 7 vpn
death of the internet
end of the internet
ftc red flag
genetic coding
global correlation cisco
h1n1 exploit
how will the internet die
human virus coding
identity theft
internet multiverse
intrusion prevention systems
ios 15.0
ios 15.0 security
ip video surveillance
ips reputation
ironport web security
multiverse
physical security video
red flag laws
red flag rules
red flag violations
retail store analytics
router security
security
sensorbase
social engineering
social engineering attack
social engineering exploit
social engineering skills
social engineering techniques
video
video analytics
video surveillance
virus coding
will the internet end
windows 7 sslvpn
windows 7 vpn