Overview
Healthcare information privacy and security have always been concerns. Before the advent of EHRs, it was certainly possible for unauthorized individuals to access health information, but it required physical travel to where the data was stored. EHRs have created multiple ways to gain access to protected healthcare information. Other concerns about privacy and security surround patient rights regarding information about their healthcare. The Health Insurance Portability and Accountability Act was passed in 1996 (with additional rules implemented in 2013) and provides a wide set of complex healthcare rules. We’ll focus on the privacy and security rules of HIPAA. HIPAA’s privacy rules cover health information in any form (electronic, paper, or oral). The security rules are more focused and cover only electronically protected health information.
While most would agree that health information privacy and security are paramount, there is less agreement on our ability to guarantee privacy and security. Additionally, we must ensure that safeguards don’t make it too difficult for authorized users to access needed information. This week will focus on healthcare information privacy and security. It will include a review of HIPAA’s privacy and security rules and healthcare IT/healthcare informatics professionals’ role in ensuring the privacy and security of health information.
Learning Objectives
Analyze the issues encountered when securing provider and consumer acceptance of health information exchange
Explain how safeguards are used to ensure the privacy and security of health information
Describe provider and consumer concerns regarding privacy and security of health information
Discuss trade-offs between protection of health information and ease of authentication and use when unique needs arise
Required Readings
Chapters: 7 & 11: Digital Health Care: Perspectives, Applications, and Cases
Supplemental Readings
The 17 Biggest Data Breaches of the 21st Century
How Is Covid-19 Creating Data Breaches?
Privacy, security, and public health in a pandemic year
Guide to Privacy and Security of Electronic Health Information.
How Is Covid-19 Creating Data Breaches?
Resources
Video: What is the HITECH Act: An Overview by Athenahealth
Video: Navigating the impact of COVID-19 on analytics models
Module Two Discussion & Participation: Compliance and Privacy of Health Information
Module Two Discussion & Participation: Compliance and Privacy of Health Information
Healthcare is not the only industry that has strict privacy and security regulations. For example, the financial sector also has stringent regulations, known as the Financial Privacy Rule.
Healthcare providers, patients, and administrators all say they are concerned about the privacy and security of health information. One of the main reasons it has been difficult to implement a healthcare information exchange is the lack of trust in protecting health information. Problems with privacy and security can be caused by providers, patients, and healthcare organizations.
Everyone says they value privacy and security, but it is difficult to comply with regulations. As you think about this, answer the following:
Why do you think it has been difficult to comply with health information privacy and security in healthcare?
Why do you think we still see large security/privacy breaches?
To prepare for this Discussion:
Review this week’s Learning Resources.
Post by Day Three (Wednesday):
Your initial answer. Your initial answer post should be (min.) 300 – 400 (max.) words long. The post should demonstrate your understanding of specific learning concepts related to this assignment.
The initial post must require four (4) current quality references. Two (2) of them are from current peer-reviewed journals in the UC online library. Including references in your replies to classmates is optional but recommended.
