Events Calendar

Mon
Tue
Wed
Thu
Fri
Sat
Sun
M
T
W
T
F
S
S
29
30
1
2
3
4
6
7
8
9
10
11
13
14
15
16
17
18
19
20
22
23
24
25
26
27
28
29
30
31
1
2
12:00 AM - NextGen UGM 2025
Pathology Visions 2025
2025-10-05 - 2025-10-07    
8:00 am - 5:00 pm
Elevate Patient Care: Discover the Power of DP & AI Pathology Visions unites 800+ digital pathology experts and peers tackling today's challenges and shaping tomorrow's [...]
AHIMA25  Conference
2025-10-12 - 2025-10-14    
9:00 am - 10:00 pm
Register for AHIMA25  Conference Today! HI professionals—Minneapolis is calling! Join us October 12-14 for AHIMA25 Conference, the must-attend HI event of the year. In a city known for its booming [...]
Federal EHR Annual Summit
2025-10-21 - 2025-10-23    
9:00 am - 10:00 pm
The Federal Electronic Health Record Modernization (FEHRM) office brings together clinical staff from the Department of Defense, Department of Veterans Affairs, Department of Homeland Security’s [...]
NextGen UGM 2025
2025-11-02 - 2025-11-05    
12:00 am
NextGen UGM 2025 is set to take place in Nashville, TN, from November 2 to 5 at the Gaylord Opryland Resort & Convention Center. This [...]
Events on 2025-10-05
Events on 2025-10-12
AHIMA25  Conference
12 Oct 25
Minnesota
Events on 2025-10-21
Events on 2025-11-02
NextGen UGM 2025
2 Nov 25
TN

Events

Articles

EHR Security: IOM report a great begin, yet more could be finished

iom

There’s been a lot of fanfare about the Institute of Medicine’s (IOM) recent report calling for a new federal watchdog agency to oversee the safety of health information technology (HIT) and investigate adverse events related to HIT. While IOM acknowledges that some components of HIT have improved the quality of healthcare and reduced medical errors, patient safety overall has not improved to the extent that the organization had hoped for. Moreover, new patient safety issues are emerging that are directly attributable to HIT.

And while the report notes that the safety incidents involve a variety of HIT tools–such as personal health records, patient portals, and health information exchanges–there’s no denying that the bulk of IOM’s emphasis is on electronic health records.

Yes, the report says that EHRs can be used to detect, document, and analyze patient safety problems, that their alerts and reporting can improve the health of individual patients, and that EHR data can be used to improve the safety of populations. But IOM also points out that there was “little published evidence to quantify the magnitude of the risk” involved with the use of EHRs and that “contract barriers” in vendor agreements, such as confidentiality and nondisclosure clauses prevent users from sharing information about patient safety issues with their EHR systems.

“Vendors contractually have been trying to hide errors rather than discuss them and make design changes,” Dr. Deborah Peel, a Texas-based psychiatrist and head of Patient Privacy Rights, a leading health watchdog group, tells FierceEMR. This means that while user error certainly contributes to adverse events and the creation of unsafe patient conditions, the issue is far more complicated.

“With the gold rush by EHR vendors to sell [their systems], there are problems with these technologies,” Peel says. “EHRs are pretty primitive and not ready for prime time. They haven’t even been tested for patient safety.”

Several design flaws Peel is aware of include:

  • Usability problems: Too many screens or clicks needed to use the EHR system, causing user error;
  • Coding software problems;
  • System glitches: Incorrectly recorded information or disappearing data;
  • Keys/bars too close together: This can cause clinicians to misplace decimal points or click on the wrong dose or name of a medication;
  • Backfiring features: For example, a substitution of one clinician’s name for another intended in one entry applied by the software to the entire medical record, changing the clinician’s name throughout.

“This is why we took a strong stance on the need for reporting,” Peel says.

Many of IOM’s recommendations, if adopted, would have a tremendous impact on the EHR vendor industry, such as:

  • Safety testing of EHRs for high-prevalent, high-impact patient safety risks;
  • Adoption of criteria by accrediting organizations relating to EHR safety;
  • Making users’ experiences across vendors publicly available;
  • Adopting a mechanism for users and vendors to report deaths, injuries and unsafe conditions, and to learn from them.

Still, Peel believes that the industry should go even further, taking such steps as barring vendors from shifting liability for vendor errors to providers and creating an easy rating system so providers can compare EHR systems for patient safety. She also is in favor of prohibiting ‘grandfathering’ existing EHRs as safe and reliable, and creating strong whistleblower protections.

“The public and Congress have unrealistic hopes regarding technologies in healthcare,” Peel says. “This report is a cautionary tale. Self-policing [by the vendor industry] doesn’t work.”

(Source)