Electronic health information rule...

Electronic health information rules rapidly are becoming the norm in hospitals, surgery center and the offices of health care providers. In each case, these health organizations and professionals face novel risks related to the integrity, security, and confidentiality of these vital sources of health care information.

The meaning of this article is to review the instant and emerging laws, regulations, and industry standards governing these electronic records, all of which must be incorporated into operating conducts and management controls that safeguard these records throughout time. Ultimately, a code of actions must be adopted by all clan within the health care organization who have an opportunity to "touch" these electronic databases, whether for authorized or unauthorized aims so that any violations can be obstructed detected, or otherwise resolved before civil, criminal, or level professional licensing sanctions result.

theory COMPLIANCE

An electronic health record that is created and maintained in the perioperative setting must comply with as well-as; not only-but also; not only-but; not alone-but state and federal laws and regulations. Until lately federal protections for health information have been limited to the Privacy Act, which applies sole to information collected by governmental agencies (5 USC 552a), and the federal alcohol and put drugs into abuse regulations applicable only to federal or federally foundationed treatment facilities (42 USC 290dd-3290ee-3) Constitutional protections have also faltered to be paid to a lack of enforcement of the informational privacy rights advocated by way of the United States Supreme Court in Whalen v sperm of fishes (429 US 589 [1977]).

The passage of the Health Insurance Portability and Accountability Act of 1996 (Act) now enables the federal guidance to address wrongful disclosure of individually identifiable health information between the sides of the imposition of civil and criminal penalties (PL 104-91) The Act also requires the Secretary of the US Department of Health and Human Services (HHS) to establish standards for health information security and the processing of certain control transactions through electronic means, one as well as the other of which are currently subordinate to review by Congress.

Medicare's conditions of participation, which hospitals and other facilities must satisfy as a participating provider, also establish certain requirements for record access and use, maintenance and storage, and ultimately, scheme integrity. With regard to electronic health records, there are three applicable requirements. First, the Medicare conditions do not restrict the emblems of media used for creating or storing medical records (42 CFR 48224) The Medicare conditions also permit authentication of medical records by way of signature, written initials, or computer hall (42 CFR 482.24[d][i][ii]).

Finally, participating providers must have a body of record identification and maintenance to make secure the integrity of authentication and to secure the security of record entries (42 CFR 48224[b]) forward Dec 19, 1997, the HH Health Care Financing Administration issued a propos regularity reforming these conditions of participation (62 F Reg 66726)

The particular masterys for information management offer no substantive changes to the rife conditions of participation other than to update the original record hypothesis requirements to better reflect the increasing automation and integration of patient care data (42 CFR 120 [a] and [b]) Electronic health records that suitable the criteria set forth in the passing from hand to hand conditions of participation, therefore, should continue to be permitted on the Medicare program if these propos lordships are adopted without substantive change.

Many of the state laws and regulations have been amended in latter years to permit the use of electronic records in hospitals and health care rules On the other hand, more [i]or[/i] less state regulations still either assume or appear to require that hospitals maintain and retain at least any paper-based patient records, restrict the protoplasts of media or methods used for record storage, or impose signature requirements that may be incompatible with authentication of records according to computer. Increasingly, however, state statutes and regulations have expanded their definitions of health information to include electronic records as the official record of care delivered to patients (See Wyoming Statutes 35-2605 [al [vii]. The broad definition of health care information fix forth in Wyoming's Hospital Records and Information Act includes "any information, whether oral or recorded in any form or medium, that identifies or can readily be associated with the identity of a patient or relates to the patient's health care, and includes any record of disclosures of that information." (emphasis added)].

The Joint Commission upon Accreditation of Healthcare Organizations also publishes accreditation standards each year for hospitals and health care networks that are similarly make uneasyed with the proper management of health care information a whole s These accreditation standards for hospitals permit the use of computer technology in clinical information management (see eg Joint Commission forward Accreditation of Healthcare Organizations, 1996 Accreditation Manual for Hospitals, IM 2)