Breaching The Security Of An Internet Patient Portal

In the health care business, there are certain standards and laws that have been put in place to protect our patients and their personal health information. When a health care facility fails to protect their patient’s confidential information, the US Government may get involved and facilities may be forced to pay huge sums of money in fines, and risk damaging their reputation.

Kaiser Permanente is a large nonprofit integrated healthcare plan. This organization serves a tremendous amount of patients all over the United States with more than 38 hospitals and more than 600 medical offices. They offer medical care from chronic care visits to deliveries and prescription refills ("Who We Are - Kaiser Permanente," n.d.) Kaiser Permanente conducts campaigns to spread their care knowledge to others. They perform sick care, prevention care, and treatment for those who need it.

Kaiser Permanente is a managed care facility that provides services across the health care continuum. Over the years the organization has continually made efforts toward improvements since it was first founded in 1945. These improvements generate a series of successes that set Kaiser apart from similar organizations. But, just as any health care delivery system, Kaiser has faced challenges in the past, present and may continue to do so in the future. In this paper I will explain what attributes to the success of Kaiser Permanente and some of the challenges they face.

As a managed care organization Kaiser Permanente has served as a model for informational healthcare systems and the recent demand for affordable care has prompted the organization to lower cost in services without hindering the quality of care. Kaiser Permanente has integrated a system in which the organization assumes all financial risk and a bundled enrollment fee for service strategy. What makes Kaiser Permanente unique from other HMOs is their accountability for quality, utilization management, financial risk, and business strategies (Kaiser Permanente, 2009).

Explanation: According to both HIPAA and ARRA regulations, healthcare organizations compels to allow all reasonable efforts to limit the disclosure of information to the minimum necessary data to accomplish the purpose of the request (McWay, 2010). Based on the information provided, the request for PHI fails to specify the date of validity of the release of PHI. According to the HIPAA privacy rule, a request for the release of PHI is invalid if the request meets the following specifications (1) expiration date not specified that is related to purpose of disclosure, or the date on the request for information has elapse, (2) If the authorization request have been revoked, (3) failure to clearly state the intended purpose of release of information, (4) failure to provide signature and date of authorizing the disclosure of information ( or failure to provide specification of the representative’s authority to act on behalf of the patients), and (5) failure to specify the entity disclosing and the recipient entity (Department of Health & Human Services, 2004). There

Kaiser Permanente is one of the largest integrated healthcare delivery systems. Serving over eight million individuals across nine states, and the District of Columbia. Kaiser Permanente developed a internet patient portal, KP Online in 1990. The KP Online patient portal offers patients immediate access to health information and enables members to schedule appointments, request prescription refills, seek clinical advice, obtain health care information, and interact in forums.

Let’s analyze about financial impact of HIPAA violations in healthcare companies and find out how to prevent security breaches. Patients and healthcare facilitators both need to be informed on how to help these companies be protected and be prevented from identity theft. Also, there will be emphasis on what the penalties are in result to violation of HIPAA

The breach of patients’ confidential information does not only jeopardize our reputation and reduce the public trust in our organization, it could also lead to severe financial consequences. Under HIPAA law, if an organization is found guilty of unauthorized disclosure of patient medical record, they could face prison time harsh privacy violation penalty. We are sure that none of us want this to happen to our organization. So how can we prevent medical record security leak and better protect our patients’ privacy while also providing the best care possible to all our patients? The following guidelines and

Kaiser Permanente Phone Application- Kaiser Permanente Phone Application- Amongst the healthcare industry Kaiser has led technology by developing a Kaiser phone application known as KP health. This application allows any member to access their health

Changes in current health care practices, the aging baby-boomer population, and the higher acuity of patients has created a need for change and adaptability with the health care industry. Kaiser is an organization who has shown the ability to continuously change in order to reduce costs while improving efficient quality patient care. The investment on information technology (IT) advancements such as the implantation of electronic health records (EHRs) and use of a patient portal system is one way the organization has shown readiness to meet the health care needs of patients. KP in collaboration with five other healthcare organizations created a Care Connectivity Consortium, enabling secure electronic retrieval of current

Kaiser Permanente is a health system which serves over eight million members in nine states and the District of Columbia. In the 1990’s the KP Northern California region created an Internet Patient Portal known as “Kaiser Permanente Online” (KP Online)(Wager, 2009). KP Online provides members access to request appointments and prescription refills, obtain health information, and receive medical advice from staff.

Kaiser Permanente (KP) was founded in California in 1945. It is one of the largest non-profit healthcare organizations in the United States, made up of three entities: the Kaiser Foundation Hospital, the Kaiser Foundation Health Plan and the Permanente Medical Groups. It currently serves about 9.1 members within the following states: California, Colorado, Washington DC, Maryland, Virginia, Washington, Oregon, Hawaii, and Georgia. With a few exceptions, it mostly operates under a managed care model, owning the physician network and the facilities its members use to receive medical services (Fast Facts, 2013).

Privacy of health information has become an area of emphasis across the healthcare industry. It is important to understand what data is protected under federal regulations, how it can be shared, and how to prevent any accidental exposure of protected data. It is possible that data that should be protected can be exposed without anyone even realizing a violation has occurred. Exposure of protected healthcare data can result in medical identity theft and is therefore a very important and hot topic. The security and privacy of healthcare data is necessary to ensure consumer confidence in the healthcare industry and to prevent medical identity theft.

Security breaches of EMRs vary from someone without consent viewing the patient’s information, to a hacker using the information to steal one’s identity. According to Privacy Rights Clearing House, more than 260 million data breaches have occurred in the United States, including those of health related records. Approximately 12 percent of data breaches involve medical organizations (Gellman, 2012). According to Redspin, a provider of Health Insurance Portability and Accountability Act risk analysis and IT security assessment services, more than 6 million individual’s health records were compromised during a period from August 2009 and December 2010 (Author Unknown, 2010). A provision of the Health Information Technology for Economic and Clinical Health (HITECH) Act requires all breaches affecting 500 or more people to be reported to the Department of Health and Human Services. This reporting is to be accomplished within 60 days of discovery. The Redspin report covering the period above involved 225 breaches of protected health information. The amount of people with access to an individual’s health record creates concern with confidentiality. According to the Los Angeles

The department of Health and Human Services protects and guides the health and well being of individuals here in America (Thacker, 2014). They fulfill these duties providing Americans with adequate and efficient health and human services and monitoring services designed to increase the efficiency of care in the health system (Thacker, 2014). One of the services being monitored by the department of Health and Human Services is the electronic health record system, which carries private and vital information of patient’s health record enabling all eligible participating health workers access to these records (Thacker, 2014). A breach of the protective health information of patients in a health organization creates chaos as these are against the health insurance portability and accountability (HIPAA) law (Thacker, 2014). Hence, measure will have to be put in place to determine what caused the breach and how to rectify it to ensure the breach never happens again (Thacker, 2014).