Administrative Safeguard Case Study

In the health care business, there are certain standards and laws that have been put in place to protect our patients and their personal health information. When a health care facility fails to protect their patient’s confidential information, the US Government may get involved and facilities may be forced to pay huge sums of money in fines, and risk damaging their reputation.

Outline current legislation, guidelines, policies and procedures within own uk home nation affecting the safeguarding of children and young people?

Use of an EHR presents major opportunities for the compromise of patient’s personal health information (PHI). The facility must ensure proper safe guards are implemented and functioning properly at all times. Employees need to be educated on the safety measures to prevent breach of patient confidential health records. Privacy breaches can result from misuse or improper storage of PHI by the healthcare professional, by third party payers, or by lack of proper encryption in the EHR system itself (Burkhardt & Nathaniel, 2014). The Health Insurance Portability and Accountability Act (HIPAA) is a law that holds healthcare facilities and professionals accountable for keeping PHI confidential, patients to control

According to both HIPPA and HITECH, an organization must have policies and procedures in place to enforce data storage integrity. This means the organization must take measure to protect healthcare information from an unauthorized user and there must be a way to successfully retrieve any and all patient information in the health information system. By doing so, the organization is ensuring integrity, inadvertent disclosure and availability of their records (Hawkins, 2013).

Although the EHR is still in a transitional state, this major shift that electronic medical records are taking is bringing many concerns to the table. Two concerns at the top of the list are privacy and standardization issues. In 1996, U.S. Congress enacted a non-for-profit organization called Health Insurance Portability and Accountability Act (HIPAA). This law establishes national standards for privacy and security of health information. HIPAA deals with information standards, data integrity, confidentiality, accessing and handling your medical information. They also were designed to guarantee transferred information be protected from one facility to the next (Meridan, 2007). But even with the HIPAA privacy rules, they too have their shortcomings. HIPAA can’t fully safeguard the limitations of who’s accessible to your information. A short stay at your local

The purpose of this paper is to discuss the electronic health record mandate. Who started it and when? I will discuss the goals of the mandate. I will discussion will how the Affordable Care Act ties into the mandate of Electronic Health Record. It will describe my own facility’s EHR and what steps are been taken to implement it. I will describe the term “meaningful use,” and it will discuss possible threats to patient confidentiality and the what’s being done by my facility to prevent Health Information and Portability Accountability Act or HIPAA violations.

Discuss security standards and methods, including the need for data storage integrity and data backup and recovery. In addition to complying with Health Insurance Portability and Accountability Act (HIPPA), SMC needs to be valiant in how the organization will protect information and manage network security. Information security is the protection of information against risk to its integrity, inadvertent disclosure, or availability (Hawkins, 2013a). The most common threats an organization's network will face are hackers, spyware, viruses, worms, Trojan horses, and malicious insider (Hawkins, 2013a). To protect SMC from hackers, they will use firewalls and intrusion-detection devices. Firewalls protect network systems by obstructing unauthorized entry while allowing approved communications (Hawkins, 2013a). Intrusion-detection systems monitor who the user is and what the user accesses. To promote HIPPA, SMC will track the last names of users who accessed patients with the same last name to reveal inappropriate use of client information.

There were concerns related to risks of hackers, malware attacks, password changes which can be disruptive to the clinical workflow and can lead to inefficiency. Human errors, inadequate knowledge and ability to use PHR (health literacy). Are the patients aware of the HIPAA regulations? Some patients of a particular age group refrain from using PHR. Interoperability which is the core purpose of electronic health records is also one of the primary concerns. The use of unauthorized USB drives can lead to the malware attack which may interoperability. The other questions that needs to be answered is despite encryption, firewalls which have been initiated to maintain security, there are still concerns about data security

The hospital will establish policies and standards that protect patient privacy of the health care information. These policies should determine levels of access to the EHR. The Cerner® system will provide many layers of protection. A major piece of maintaining patient privacy is managing access to the EHR. This is accomplished through password management. The system will require case sensitive passwords with mandated password change every 90 days. There is employee badge swipe access that automatically enters the user log in ID but requires the password be entered. If a user has not accessed the system in a designated time period, which will be determined by the hospital (typically 90 days) then the system will automatically drop the

be physically abused. There are signs or indicators to show physical abuse and there are ways in which victims and abusers act or

Financial abuse – Like emotional abuse, this may not leave physical signs of abuse caused by the abuser, but should the victim withhold money or property that the abuser may want, then there may be bruises or scratches from being hit or punched. The victim may turn to self-harm as a way of dealing with stress.

Before a health care organization implements an EMR system, they should have a security system in place, which includes “access control” component. Access control within an EMR system is controlled by distinct user roles and access levels, the enforcement of strong login passwords, severe user verification/authorization and user inactivity locks. Health care of professionals regardless of their level, each have specific permissions for accessing data. Even though the organization have the right security system in place to prevent unauthorized users from access patient records, autonomous patients will expect to have access to his or her records with ease. Access their record will ensure that their information is correct and safe.

“An electronic health record (EHR) is a digital version of a patient’s paper chart. EHRs are real-time, patient-centered records that make information available instantly and securely to authorized users.” (healthit.gov) The EHR mandate was created “to share information with other health care providers and organizations – such as laboratories, specialists, medical imaging facilities, pharmacies, emergency facilities, and school and workplace clinics – so they contain information from all clinicians involved in a patient’s care.” ("Providers & Professionals | HealthIT.gov", n.d., p. 1) The process has proved to be quite challenging for providers. As an

The department of Health and Human Services protects and guides the health and well being of individuals here in America (Thacker, 2014). They fulfill these duties providing Americans with adequate and efficient health and human services and monitoring services designed to increase the efficiency of care in the health system (Thacker, 2014). One of the services being monitored by the department of Health and Human Services is the electronic health record system, which carries private and vital information of patient’s health record enabling all eligible participating health workers access to these records (Thacker, 2014). A breach of the protective health information of patients in a health organization creates chaos as these are against the health insurance portability and accountability (HIPAA) law (Thacker, 2014). Hence, measure will have to be put in place to determine what caused the breach and how to rectify it to ensure the breach never happens again (Thacker, 2014).

In a world full of electronics it would only seem logical to have health records electronic. Not only are medical records efficient, reliable, and quick to access, new technology allow patients to access their own personal medical records with a simple to use login and password. “People are asking whether any kind of electronic records can be made safe. If one is looking for a 100% privacy guarantee, the answer is no”(Thede, 2010). At my hospital, upon every admission we ask the patient for a password for friends and family to have to have if they would like an update on the patient 's condition. We do not let visitors come up and see the patient without the patient 's consent. In doing these things, we help to ensure the safety and protection of the patient 's health information and privacy.