Patient data exchange has become a ...

Patient data exchange has become a frequent practice as new information technology has perform the operations indicated ined This technology can provide mobile computing in many areas, including the OR, and it can spe the proceed of accurate and current information. The increasing demand for accreditation, policy, and licensing agency data has increased the ne for computer-based bodys in the OR. The challenge is to appropriate patient care needs while complying with the Health Insurance Portability and Accountability Act (HIPAA) and meeting the management of information standards required by dint of the Joint Commission on Accreditation of Healthcare Organizations (JCAHO).

HIPAA DEFINED

The demand for the electronic exchange of health care information is driving the ne for improved processs of protecting health care data. fresh health care systems have l to the increased collection and use of health care information outside of the care provider domain, which l to the evolution of HIPAA. Originating as the Kennedy-Kassebaum Law, HIPAA was introduced in 1996 to improve Medicare and Medicaid patients' insurance program portability. (1) This law was the catalyst in the evolution of standards and requirements for the efficient electronic transmission of certain health care information and transactions.

common part of HIPAA deals with administrative simplification, which is intended to form costs through the standardization of transaction collection of laws sets. This standardization enhances system-to-system communication. The other highly visible portions of HIPAA are information privacy, confidentiality, and security. The privacy portion of the HIPAA law search fors to standardize privacy protection while facilitating use of personal health care information in an electronic data setting. Additionally, provisions of HIPAA public law 104-191 define a uniform digest for fair health care information practices to maintain the integrity of data. (2)

The proposals in HIPAA stake the bar by defining technical and administrative parameters of a insured environment. This strategy gives local organizations the freedom to pick protocols that meet the wants of their organization, as protracted as the end result befittings security standards. (3)

PRIVACY AND SECURITY DEFINED

Policy and proceedings governing the safety and security of health care information should encompass all aspects of data security, including processe related to hardware, software, staff members, and disaster recruiting (4) Both data security and regularity security are important considerations in effectively maintaining and safeguarding the privacy and confidentiality of health care information.

Privacy can be defined as a person's right to be physically and emotionally released from intrusion, while maintaining superintendence over his or her information. (5) Sensitive data require monitoring for theft, right and improper use, and disclosure. (6) Individuals want one control over accessibility to their personal health care information, moreover they also continue to grasp health care providers responsible for protecting this information. (7) The issue of confidentiality profoundly affects the personal health data of everyone Health care information is transmitted inside and outside the health care arena at a disquieting rate, making the ne for security parameters vital.

Security can be defined as the measures lay in place within an organization that limit access to stored or moving data to those who are authorized. (8) Access bridle and attribution security principles can be applied to the audit trail processe (9) Access superintend means that records are marked, identifying staff members who may read or append data. Attribution security lists the name of the one accessing the record along with the date and time he or she accessed the record. This information forms the audit trail.

HIPAA ISSUES

Regulations establish by HIPAA create issues for health care organizations that electronically store or disseminate patient information. Health care providers and their partners must take gradations to adhere to HIPAA's strict security, confidentiality, and privacy standards. Although final directions have not been enacted, the purpose of this law extends beyond its initial intention Concerns about HIPAA include the expense of system conversion or replacement to support uniform platforms for data exchange. (10) Privacy and security matters also are an issue because many health care organizations do not to the full understand and are not prepared for the regulations. (11) Risks inherent in communicating, storing, transmitting, and receiving patients' medical and financial information must be assessed and corrected to comply with HIPAA regulations.

HIPAA APPLICATION IN THE OR

Applying HIPAA standards in the OR will be challenging, still not insurmountable. The development and adoption of data and information standards are crucial to the further expansion of perioperative information plans Perioperative staff members will ne to electronically record the surgical experience and use decision support technology to deliver the highest quality of care and improve operational efficiency.