Physicians may be responsible when employees commit HIPAA violations - July 5, 2010
Orlando Florida
Dr. Eczema has a very large dermatology practice. He also regularly performs studies on new treatments for a variety of dermatoses. Because he has been doing these studies for more than 10 years, he has accumulated both demographic and physical data on thousands of patients. All data is stored in his HIPAA-compliant electronic medical record (EMR) system.
Recently, one of the pharmaceutical companies with which Dr. Eczema works contacted his research nurse to ask her to provide the company with a copy of all of this electronic data. The company wants to use this data to develop better treatments for atopic dermatitis. Trying to be helpful, the nurse gives the pharmaceutical company all of the data in question.
Not long after, one of Dr. Eczema's other employees finds out about this transfer of data. Because of her ill feelings toward her fellow employee, she tells some friends about what has occurred. One of these friends is a former research patient in Dr. Eczema's office, and she is furious at this breach of her medical privacy. She hires an attorney who reaches out to Dr. Eczema. The attorney tells Dr. Eczema that he will sue him for a HIPAA violation unless he settles with his client for $100,000. Should Dr. Eczema settle this case? Should he pay the $100,000?
Electronic future is now
EMR is here to stay. In spite of all the benefits offered by electronic medical records, their use has also introduced a number of problems and issues. Perhaps the most important of these are the potential privacy breaches associated with electronic record and data storage. As more personal information, such as school records, credit card information and bank account data goes online and is stored electronically, people seem to have become more accustomed to accepting the risks associated with storing personal data this way, especially in view of the convenience and other benefits that this method offers. Medical records, however, are possibly the most private and personal information available about a person, and therefore are subject to unique privacy and security concerns.
While breaches of other personal data are intrusive and potentially harmful, medical records are unique by their very nature. Once private medical information is breached, it is nearly impossible to mitigate the potentially associated harm.
In view of these concerns, Congress passed the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its associated regulations. Under HIPAA, the Department of Health and Human Services (HHS) has the authority to adopt standards for HIPAA-specified entities to follow in protecting, using and disclosing patients' medical information and records. In the act, Congress listed the following parties as covered entities subject to the HHS-adopted standards: health plans, healthcare clearinghouses, and healthcare providers who transmit any health information in electronic form in connection with specified financial and administrative transactions.
Using its congressionally delegated authority, HHS enacted regulations commonly referred to collectively as the "Privacy Rule," which took effect April 14, 2003. This rule established specific obligations for covered entities regarding the safekeeping and privacy of protected health information.
The Privacy Rule defines protected health information (PHI) as medical information that is "individually identifiable" as pertaining to a specific patient. Individually identifiable information includes health information that is maintained in any form or medium; relates to, identifies or could identify the person that the health information concerns; and is transmitted or maintained by a covered entity. More specifically, the Privacy Rule covers information that a patient's doctors, nurses and other healthcare providers put in his/her medical record; conversations a doctor has about a patient's care or treatment with nurses and others; information about a patient in his health insurer's computer system; billing information about a patient at his/her office; and most other health information about a patient that is held by covered entities.
----------
For more information please call (407) 494-4EHR (4347) or visit us at: http://www.sencilo.com and let us "Uncomplexify your Information
Technology"
Sencilo HealthIT Solutions eHealthcare Architecture: More than technology With Sencilo HealthIT Solutions eHealthcare Architecture, you can leverage the same productivity tools and technology resources that have transformed business. And you get a full portfolio of services too. By working with Sencilo HealthIT Solutions, you can get:
A dedicated customer team
A website customized for your institution
A full portfolio of robust solutions
Easy setup, implementation and maintenance
Simple ordering and delivery
Technology training
Flexible financing options
Sencilo HealthIT Solutions Professional Services makes it easy.
In addition to providing high-quality technology at a low cost, Sencilo HealthIT Solutions Professional
Services can help you plan your healthcare computing from the ground up. By working with you from the initial construction phases, we can help you save time and money and lead to a truly customized solution.
Sencilo HealthIT Solutions Professional Services offers complete services that include:
Design
Procurement
Installation
Training
Maintenance
Support
About Us
Sencilo HealthIT Solutions is a Florida-based integrator specializing in EHR Cost Cutting storage, security and managed services solutions. Sencilo delivers a comprehensive portfolio of products from best-of-breed hardware and software from multiple manufacturers including Allscripts, VMware, Dell Fujitsu EMC, Hitachi, Symantec, IBM, HP, Cisco, Microsoft, Gateway Sencilo has offices throughout Florida including: Orlando Lake Mary Daytona, Medical City solutions include Security "meaningful use" "meaningful usage" EMC HP IBM Quantum Compliance Gartner Magic Quadrant Quadrent LTO Daytona Beach Deland Melborne Tampa Clearwater, Dragon, Voice Recognition, Dragon Dictation
Network Backup appliance Data Recovery Backup Health IT Healthcare IT Digital Hospital Allscripts Patient Data electronic health record P4P rules and the HITECH Act PayerView Rankings practice management tools $44,000 in Medicare or $66,000 in Medicaid from the American Recovery and Reinvestment Act eClinicalWorks, Allscripts, NextGen, GE Centricity, and Meditech Electronic Healthcare IT Medical Records EHR Clinical Practices eClinicalWorks Allscripts Florida EMR, EHR, electronic medical record, health, records, practice management systems solutions, medication services, PHR Otolaryngology, Orthopaedics, pediatrics, eprescribe, dermatology, electronic documention, CCI edits, CPT codes, ICD 9 Codes, ICD 10 codes, comploiance, electronic medical records, Pain Nuerosurgery, Urology, Ophthalmology, Cardiology, Billing, Appointment Scheduling, clinicalworks, eClinicalWorks, solutions for physicians, hospitals, clinical education and medical services Computerized Patient CPR, Order Entry, CPOE, Document Clinical Information Informatics, Computer-based, SOAP, HIT, Healthcare Encounter Forms, web based, online, clinical rules database, electronic prescribing, e-prescribing, eprescribing, athenaClinicals, certified EMR, certified EHR, HITECH Act VAR Reseller Dealer hipaa privacy doctor, healthcare performance management, data security, hosting, arra, free, InterFAX, MyWay, HIPPA, EasyPayMedicare, MedicAID, SureScripts, FNC, billing, superbill iMedica Tiger on Windows, eprescribe pqri simple practice management revenue cycle e-cw e-clinicalworks greenway emds nextgen ge sage athena epic klas Dragon NaturallySpeaking speech recognition Google Health, Microsoft Healthvault Health Internet certified "meaningful use" violations HealthPresence Health Presence Sencilo “transformative” telemedicine medicaid medicare Seminole County Medical Society Orange county Orlando Medical News Trusted Advisor e-Prescription e-Rx CareTracker paperless scanning document storage hippa audits iscribe document scanning fi-6130 fi-6040 CCHIT ARRA surescript
