Events Calendar

Mon
Tue
Wed
Thu
Fri
Sat
Sun
M
T
W
T
F
S
S
1
2
5
6
8
11
12
13
14
15
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
1
2
3
4
Forbes Healthcare Summit
2014-12-03    
All Day
Forbes Healthcare Summit: Smart Data Transforming Lives How big will the data get? This year we may collect more data about the human body than [...]
Customer Analytics & Engagement in Health Insurance
2014-12-04 - 2014-12-05    
All Day
Using Data Analytics, Product Experience & Innovation to Build a Profitable Customer-Centric Strategy Takeaway business ROI: Drive business value with customer analytics: learn what every business [...]
mHealth Summit
DECEMBER 7-11, 2014 The mHealth Summit, the largest event of its kind, convenes a diverse international delegation to explore the limits of mobile and connected [...]
The 26th Annual IHI National Forum
Overview ​2014 marks the 26th anniversary of an event that has shaped the course of health care quality in profound, enduring ways — the Annual [...]
Why A Risk Assessment is NOT Enough
2014-12-09    
2:00 pm - 3:30 pm
A common misconception is that  “A risk assessment makes me HIPAA compliant” Sadly this thought can cost your practice more than taking no action at [...]
iHT2 Health IT Summit
2014-12-10 - 2014-12-11    
All Day
Each year, the Institute hosts a series of events & programs which promote improvements in the quality, safety, and efficiency of health care through information technology [...]
Design a premium health insurance plan that engages customers, retains subscribers and understands behaviors
2014-12-16    
11:30 am - 12:30 pm
Wed, Dec 17, 2014 1:00 AM - 2:00 AM IST Join our webinar with John Mills - UPMC, Tim Gilchrist - Columbia University HITLAP, and [...]
Events on 2014-12-03
Forbes Healthcare Summit
3 Dec 14
New York City
Events on 2014-12-04
Events on 2014-12-07
mHealth Summit
7 Dec 14
Washington
Events on 2014-12-09
Events on 2014-12-10
iHT2 Health IT Summit
10 Dec 14
Houston
Articles

EHR Security: IOM report a great begin, yet more could be finished

iom

There’s been a lot of fanfare about the Institute of Medicine’s (IOM) recent report calling for a new federal watchdog agency to oversee the safety of health information technology (HIT) and investigate adverse events related to HIT. While IOM acknowledges that some components of HIT have improved the quality of healthcare and reduced medical errors, patient safety overall has not improved to the extent that the organization had hoped for. Moreover, new patient safety issues are emerging that are directly attributable to HIT.

And while the report notes that the safety incidents involve a variety of HIT tools–such as personal health records, patient portals, and health information exchanges–there’s no denying that the bulk of IOM’s emphasis is on electronic health records.

Yes, the report says that EHRs can be used to detect, document, and analyze patient safety problems, that their alerts and reporting can improve the health of individual patients, and that EHR data can be used to improve the safety of populations. But IOM also points out that there was “little published evidence to quantify the magnitude of the risk” involved with the use of EHRs and that “contract barriers” in vendor agreements, such as confidentiality and nondisclosure clauses prevent users from sharing information about patient safety issues with their EHR systems.

“Vendors contractually have been trying to hide errors rather than discuss them and make design changes,” Dr. Deborah Peel, a Texas-based psychiatrist and head of Patient Privacy Rights, a leading health watchdog group, tells FierceEMR. This means that while user error certainly contributes to adverse events and the creation of unsafe patient conditions, the issue is far more complicated.

“With the gold rush by EHR vendors to sell [their systems], there are problems with these technologies,” Peel says. “EHRs are pretty primitive and not ready for prime time. They haven’t even been tested for patient safety.”

Several design flaws Peel is aware of include:

  • Usability problems: Too many screens or clicks needed to use the EHR system, causing user error;
  • Coding software problems;
  • System glitches: Incorrectly recorded information or disappearing data;
  • Keys/bars too close together: This can cause clinicians to misplace decimal points or click on the wrong dose or name of a medication;
  • Backfiring features: For example, a substitution of one clinician’s name for another intended in one entry applied by the software to the entire medical record, changing the clinician’s name throughout.

“This is why we took a strong stance on the need for reporting,” Peel says.

Many of IOM’s recommendations, if adopted, would have a tremendous impact on the EHR vendor industry, such as:

  • Safety testing of EHRs for high-prevalent, high-impact patient safety risks;
  • Adoption of criteria by accrediting organizations relating to EHR safety;
  • Making users’ experiences across vendors publicly available;
  • Adopting a mechanism for users and vendors to report deaths, injuries and unsafe conditions, and to learn from them.

Still, Peel believes that the industry should go even further, taking such steps as barring vendors from shifting liability for vendor errors to providers and creating an easy rating system so providers can compare EHR systems for patient safety. She also is in favor of prohibiting ‘grandfathering’ existing EHRs as safe and reliable, and creating strong whistleblower protections.

“The public and Congress have unrealistic hopes regarding technologies in healthcare,” Peel says. “This report is a cautionary tale. Self-policing [by the vendor industry] doesn’t work.”

(Source)