Information Governance : The Center Of The Healthcare Industry

The advancement in technology has rapidly transformed the world today, and the increase in the number of web-enabled devices has completely changed peoples ' lives especially the way they communicate. Electronic Health Record system, which is a digital copy of a patient’s medical history is one of the revolutionary ideas that have come with this advancement. Electronic Health Records (EHRs) are instantaneously updating records that are patient-centered designed with the aim of providing real-time information to the authorized users (Cohen, 2010). It contains all the patient’s information that is in the hand of the medical providers including their medical history, treatment dates and types, immunizations conducted to the patient and their dates, radiology images and all the laboratory results from the tests conducted in the past. All this information is held in a digital format and can only be updated by authorized users who are stationed in the medical facilities. Electronic records are designed to make it easy for different health providers and organizations to share patients’ information which streamlines their operations since all the necessary information and history can be accessed from any location at any time.

Health information is a fundamental piece of data which represents a person, business, organization, or a community. This data is vital in monitoring and coordination of care for individuals and communities. It not only monitors and coordinates patient care, but reduces costly mistakes and prevent duplication of treatments as well as taking a pivotal role in preserving, securing, and protecting personal health information. Since, this information is extremely essential and sensitive, it must remain secure and safe to prevent frauds and cyber-attacks. First of all, this paper discusses vitality of the health information in regards to individuals, professionals, and organizations along with its benefits to improve overall quality of life. Secondly, it discusses the role of information technology in various aspects of the industry and the what the future holds within IT.

After decades of paper based medical records, a new type of record keeping has surfaced - the Electronic Health Record (EHR). EHR is an electronic or digital format concept of an individual’s past and present medical history. It is the principle storage place for data and information about the health care services provided to an individual patient. It is maintained by a provider over time and capable of being shared across different healthcare settings by network-connected information systems. Such records may include key administrative and clinical data relevant to that persons care under a particular provider. Examples of such records may include: demographics, physician notes, problems or injuries, medications and allergies, vital

Health Information Exchange (HIE) supports both transferring and sharing of health related information that is usually stored in multiple organizations, while maintaining the context and integrity of the information being exchanged (HIE, 2014). The goal of health information exchange is to expedite access to and retrieve clinical data to provide safe efficient, effective, equitable, timelier patient-centered care (HIE, 2014). HIE “provides access and retrieval of patient information to authorized users in order to provide safe, efficient, effective, and timely patient care” (HIE, 2014).

In a large service-related Healthcare organization with the staff to patient ratio approximately 1:100, there is a greater threat by technology of breaching security records. Medical records include information about ones physical and mental being. They may contain information about ones relationship with family members, sexual behavior, drug or alcohol problems and HIV status ( Burke & Weill, 2005). The confidentiality is threatened when the medical records information is put on the Internet, by use of telemedicine, and by the use of e-mail by healthcare workers. Although this is the fastest way to store and share

Data security is used to prevent anything that is unauthorized, and it helps to protect all of the data from any corruption. Almost daily, media reports highlight the failure of health care organizations to safeguard the privacy and security of patient data, whether electronic or paper. Preventing data breaches has become more complex, and at the same time, the fines being levied against health care organizations for violating the Health Insurance, (Zamosky, 2014).# In this paper, I will discuss the security measures, how the security measures used and how well did the security measure work.

The significance of patient privacy and the security of confidential information are increasingly vital given the approval of electronic health records. Healthcare providers have recognized striking prices due to security threats and subsequent breaches. According to U.S. Department of Health and Human Services (2002), under the Privacy Rule healthcare establishments must establish protections that establish procedures and rules that guarantee least levels of privacy in relation to patient information. When violations are recognized, it is required that a compliant be created by the individual or unit experiencing the violation. In the complaint, the name of the person who participated in the violation, in addition to the nature of the violation, must be comprehensive. The filing of the complaint initiates an investigation by the Secretary of the U.S. Department of Health and Human Services under HIPAA values (U.S. Department of Health and Human Services, 2013). The establishment of a procedure related to privacy violations has resulted in many cases relating to electronic data breaches. Next is a consideration of two such cases to demonstrate the role of privacy in regards to HIPAA and electronic health database breaches.

With growing scrutiny in healthcare and a record number of breaches increasing at an alarming rate, healthcare organizations are taking preventive measures in order to avoid breaches and possible fines. However, healthcare organizations are confused on what measures they need to take in order to protect healthcare information

Data privacy is vital to healthcare organizations and the health information they store. Johns (YEAR) defines data security as “a collection of protection measures and practices that safeguard data, computers, and associated resources from undesired occurrences and exposures” (p. 207). To protect their information, organizations must develop a data security program to meet the needs of Health Information Portability Accountability Act (HIPAA), stakeholders, and the business’s needs. Additionally following the guidelines set by HIPAA is key to being in compliance with the law. These programs differ depending on the organizations that are required to establish them, however, they all follow the same steps in creating and implementing this program

It has only been within the last five years that health information management (HIM) has experienced exponential changes, due to the healthcare reform. The electronic health record (EHR) is connected to health information exchanges and other systems of interoperability. The timely completion of charts, coding and release of information (ROI) has become much more efficient with the electronic record. Traditional HIM functions will just be transformed and will always be an integral part of successful patient care. Professionals must be flexible and willing to adapt and even generate change. As Health Information Technology continues to evolve, so will the roles

Health information management professionals ensure that patient information under a provider’s care is correct, complete, and safe (Gartee, 2011). Patient health information is sensitive and must be handled only by trained professionals with experience in the field. HIM professionals such as the Registered Health Information Administrators manage employees in the HIM department that work with patient information. Registered Health Information Administrators must “Possesses comprehensive knowledge of medical, administrative, ethical and legal requirements and standards related to healthcare delivery and the privacy of protected patient information” (“RHIA”, 2015), In addition, the RHIA role is actively involved with the forms control process and involved with all units that utilize patient information in any way (Gartee, 2011).

Health information exchange and information technology are essential tools that healthcare providers and consumers often utilize to assist in improving health care. An electronic health information exchange promises potential benefits for health care systems through improved clinical care, reduced cost and the needed elements for a national health information network. As with any other industry, the exchange of such information has its many benefit, but it

The department of Health and Human Services protects and guides the health and well being of individuals here in America (Thacker, 2014). They fulfill these duties providing Americans with adequate and efficient health and human services and monitoring services designed to increase the efficiency of care in the health system (Thacker, 2014). One of the services being monitored by the department of Health and Human Services is the electronic health record system, which carries private and vital information of patient’s health record enabling all eligible participating health workers access to these records (Thacker, 2014). A breach of the protective health information of patients in a health organization creates chaos as these are against the health insurance portability and accountability (HIPAA) law (Thacker, 2014). Hence, measure will have to be put in place to determine what caused the breach and how to rectify it to ensure the breach never happens again (Thacker, 2014).

In light of available security measures and their widespread acceptance within the information security community, there is no excuse for healthcare organizations to fail in fulfilling their duty to protect personal patient information. Guaranteeing the confidentiality and privacy of data in healthcare information is crucial in safeguarding the data of patients as there should be a legal responsibility to protect medical records from unauthorized access.

The rapid changes in technology over the past few decades has left the healthcare industry ill-prepared to operate in today’s environment. Most substantial protections of sensitive consumer information has come as a result of federal regulation, most notably in 1996 with the Health Insurance Portability and Accountability Act and 2009 as part of the American Recovery and Reinvestment Act. Protection of information in the healthcare industry has lagged behind all other industries, perhaps because the records aren’t financial in nature or sensitive government information. Implementing simple steps for many organizations may be enough to limit the vast majority of breaches, although a layered, comprehensive security approach should be the ultimate goal for companies.