Special focus: Data security and privacy
M
innesota health care providers, clinics, and hospitals have made great progress in adopting electronic health records (EHRs). As Figure 1 on page 36 shows, nearly all hospitals in the state, as well as 87 percent of clinics, have adopted EHRs. This movement toward the adoption and effective use of EHRs, as well as the secure, standards-based exchange of health information, will continue to accelerate as Minnesota and the nation implement federal meaningful-use standards for the use and exchange of electronic health information. A critical piece of this progress is that patients must have confidence in the integrity of the data being shared and must trust that providers using the data have procedures in place to keep their information safe and secure. Without patients’ trust and confidence, the sharing of health information may be limited or nonexistent, increas-
Putting the pieces in place Minnesota takes steps to protect health information By Lisa Moon, RN, BSN, and Bob Johnson, MPP
ing the opportunity for negative care results, poor quality, gaps or delays in the delivery of care, and increased redundancy—
Patients must have confidence in the integrity of the data being shared and must trust that providers using the data have procedures in place to keep their information safe and secure. and costs—in the health care system.
Read us online Wherever you are!
www.mppub.com
26
The real value in EHR systems comes from using them effectively to support efficient workflows and effective clinical
Minnesota Physician February 2014
decisions that have a positive and lasting effect on the health of individuals and populations. Providers, clinics, and hospitals need to have accurate and complete information at all times in order to deliver high quality patient care that is coordinated across the care continuum. To gain the confidence and trust of patients, all providers of health care services, regardless of size or specialty, must implement standards established by the HIPAA Security Rule to ensure that appropriate safeguards are in place to protect electronic health data from unauthorized access. These administrative, technical, and physical safeguards, together with sound policies, procedures, and practices for use of technology in delivering patient care, will create a framework for meaningful exchange of health information. Minnesota focus on e-health, privacy, and security Minnesota has long been committed to leveraging technology to improve health care. The Minnesota e-Health Initiative, formed 10 years ago, supports the ongoing e-health efforts of health care providers and
organizations in Minnesota. This diverse group includes physicians, nurses, and other representatives of health care associations, clinics, hospitals, consumers, local public health departments, academic health settings, and other health care organizations. The Minnesota e-Health Initiative and its Advisory Committee are charged by the Legislature to advise the commissioner of health on all relevant e-health topics. Their work to advance the Minnesota e-Health Vision “to accelerate the adoption and use of HIT in order to improve health care quality, increase patient safety, reduce health care costs, and improve public health” has provided a model for effective public-private collaboration. Privacy & Security Workgroup. Reporting to the Minnesota e-Health Advisory Committee, the Minnesota e-Health Initiative’s Privacy & Security Workgroup has been in existence since 2005. The workgroup, composed of experts from the legal community, health information management, and stakeholder groups from across Minnesota, provides necessary expertise and feedback to the eHealth Initiative. With input from consumers and other interested parties, the workgroup’s transparent, structured approach drives consensus to motivate collaborative action statewide. LaVonne Wieland, a compliance and privacy officer for a large integrated delivery network in the Twin Cities, has been a part of the Privacy & Security Workgroup since the workgroup began. Wieland, who currently serves as a co-chair, notes: “The collaboration of members has been instrumental in addressing the annual work tasks. The representation of members from throughout the state provides excellent work products for use by all Minnesota health care facilities in their e-health journey.” It is the group’s composition that keeps its members engaged in the workgroup process, Wieland adds.