Electronic Medical Files: A Threat to Privacy? Essay

Although the EHR is still in a transitional state, this major shift that electronic medical records are taking is bringing many concerns to the table. Two concerns at the top of the list are privacy and standardization issues. In 1996, U.S. Congress enacted a non-for-profit organization called Health Insurance Portability and Accountability Act (HIPAA). This law establishes national standards for privacy and security of health information. HIPAA deals with information standards, data integrity, confidentiality, accessing and handling your medical information. They also were designed to guarantee transferred information be protected from one facility to the next (Meridan, 2007). But even with the HIPAA privacy rules, they too have their shortcomings. HIPAA can’t fully safeguard the limitations of who’s accessible to your information. A short stay at your local

There are many problems that could arise from a patient’s information landing into the hands of a stranger, a boss, an enemy, or any other individual that does not have permission to view that information.

This affects the delivery of healthcare in that the information needed by providers, physicians, medical staff, and the patients themselves, may not be delivered correctly, timely, and of course securely. Various systems will be discussed and each how they affect healthcare delivery, in particular Electronic Health Record (EHR), Electronic Medical Records (EMR) and Computerized Physician Order Entry (CPOE) (also sometimes referred to as Computerized Provider Order Entry).

There are three major ethical priorities for electronic health records: privacy and confidentiality, security, and data integrity and availability. The key to preserving confidentiality is making sure that only authorized individuals have access to information. The process of controlling access begins with authorizing users. The user’s access is based on pre-established, role-based privileges. Hence, designating user privileges is a critical aspect of medical record security: all users have access to the information they need to fulfill their roles and responsibilities, and they must know that they are accountable for use or misuse of the information they view and change.

Another downfall or disadvantage of using this software is the concerns of client’s security. Most individuals think a disadvantage would be the security vulnerability for the client’s medical records. The ultimate concern is that hackers are still out there and may steal client’s personal information and possible compromise their identity. It does not matter how many password encryptions, security features added, and firewalls are put up, hackers can get in there. However, there are also companies that specialize in security measures for the maintenance of Electronic Health Records software.

Data privacy is vital to healthcare organizations and the health information they store. Johns (YEAR) defines data security as “a collection of protection measures and practices that safeguard data, computers, and associated resources from undesired occurrences and exposures” (p. 207). To protect their information, organizations must develop a data security program to meet the needs of Health Information Portability Accountability Act (HIPAA), stakeholders, and the business’s needs. Additionally following the guidelines set by HIPAA is key to being in compliance with the law. These programs differ depending on the organizations that are required to establish them, however, they all follow the same steps in creating and implementing this program

This paper is intended to summarize the objectives of HIPAA in safeguarding the privacy of individual’s private health information from unauthorized access in general and security requirements for HIPAA compliance in particular. The HIPAA privacy rule requires covered entities to protect patient’s health records and any other identifiable health information by using appropriate safeguard to protect privacy. The HIPAA security rule requires that covered entities implement a security technology to safeguard the integrity, confidentiality and availability of individual’s electronic private health information while exercising quality service for patients. Healthcare providers have shifted towards the use of electronic health records

According to the HIPAA, several laws have been introduced to protect the rights of individuals with regard to accessing their personal information. Proposals such as patient’s having the right to control their personal files while at the same time, medical professionals can have access to pertinent information on a need to know basis. Controlled access gives the patient an opportunity to control disclosure of select information in the Electronic Health Record so that certain information can be available to health providers. The broad networking capabilities enabled by the internet

Privacy and security law questions can become challenging in a telemedicine setting because of the nature of the data and the ways in which it is being used.  Telemedicine is increasingly becoming a medium for generating, transmitting and storing large volumes of electronic health information, and as telemedicine platforms and delivery models continue to evolve, the ways in which providers are creating and using health information are constantly changing.

“The electronic health record is a secure, real-time, point-of-care, patient centric information resource for clinicians” (Davis & LaCour, 2014, p. 71). The electronic health record can be viewed by several different caregivers at a time in different locations. A paper record is only accessible where the patient is being treated. The electronic record has a secured password in order to gain access to the information on the computer. Caregivers are able to have immediate access to past medical history such as lab results, previous problem list, medications, and hospitalizations.

In a world full of electronics it would only seem logical to have health records electronic. Not only are medical records efficient, reliable, and quick to access, new technology allow patients to access their own personal medical records with a simple to use login and password. “People are asking whether any kind of electronic records can be made safe. If one is looking for a 100% privacy guarantee, the answer is no”(Thede, 2010). At my hospital, upon every admission we ask the patient for a password for friends and family to have to have if they would like an update on the patient 's condition. We do not let visitors come up and see the patient without the patient 's consent. In doing these things, we help to ensure the safety and protection of the patient 's health information and privacy.

Security refers directly to protection, and specifically to the means used to protect the privacy of health information and support professionals in holding that information in confidence. The concept of security has long applied to health records in paper form; locked file cabinets are a simple example. As use of electronic health record systems grew, and transmission of health data to support billing became the norm, the need for regulatory guidelines specific to electronic health information became more apparent.

The rapid adoption of the electronic medical record (EMR) is transforming how the healthcare industry functions in its entirety. EMR is being used to improve care coordination and communication among disparate healthcare providers, improve the efficiency and efficacy of the healthcare delivery system, and it is used to successfully reduce health cost. However, despite the great benefits afforded by the utilization of the EMR system; the adaptation of this modern technology comes with some unintended consequences. The data contained in the EMR system are searchable by content, whether for use in patient care area, research purposes, or for legal purposes (Bigelow et al, nd). One

Medical Center data is extremely important to keep very secure. Hackers may have the ability to alter treatments to be initiated to paitients if they are able to alter documents: paitients must be informed therefore and agree with all treatment protocols to be initiated. If patients are correctly informed about their treatments they can be given the ability to remember and know when things have changed. Uninformed patients may not even know the details of their treatments, this cannot happen. Don't assume that hackers will not try to do things of this nature if they can. In addition people may hire hackers to do certain things: medical centers cannot rely on their electronic systems alone, because if they do..

In the modern era, the use of computer technology is very important. Back in the day people only used handwriting on the pieces of paper to save all documents, either in general documents or medical records. Now this medical field is using a computer to kept all medical records or other personnel info. Patient's records may be maintained on databases, so that quick searches can be made. But, even if the computer is very important, the facility must remain always in control all the information they store in a computer. This is because to avoid individuals who do not have a right to the patient's information.