Skip to main content
Sister Publication Links
  • ESG: THE IMPLEMENTATION IMPERATIVE
Subscribe
  • Sign Up Free
  • Login
  • Subscribe
  • News
    • Current News
    • Providers
    • Insurance
    • Digital Health
    • Government
    • Finance
    • Technology
    • Safety & Quality
    • Transformation
    • People
    • Regional News
    • Digital Edition (Web Version)
    • Patients
    • Operations
    • Care Delivery
    • Payment
    • Midwest
    • Northeast
    • South
    • West
  • Unwell in America
  • Opinion
    • Bold Moves
    • Breaking Bias
    • Commentaries
    • Letters
    • Vital Signs Blog
    • From the Editor
  • Events & Awards
    • Awards
    • Conferences
    • Galas
    • Virtual Briefings
    • Webinars
    • Nominate/Eligibility
    • 100 Most Influential People
    • 50 Most Influential Clinical Executives
    • Best Places to Work in Healthcare
    • Excellence in Governance
    • Health Care Hall of Fame
    • Healthcare Marketing Impact Awards
    • Top 25 Emerging Leaders
    • Top 25 Innovators
    • Diversity in Healthcare
      • - Luminaries
      • - Top 25 Diversity Leaders
      • - Leaders to Watch
    • Women in Healthcare
      • - Luminaries
      • - Top 25 Women Leaders
      • - Women to Watch
    • Digital Health Transformation Summit
    • ESG: The Implementation Imperative Summit
    • Leadership Symposium
    • Social Determinants of Health Symposium
    • Women Leaders in Healthcare Conference
    • Best Places to Work Awards Gala
    • Health Care Hall of Fame Gala
    • Top 25 Diversity Leaders Gala
    • Top 25 Women Leaders Gala
    • - Hospital of the Future
    • - Value Based Care
    • - Hospital at Home
    • - Workplace of the Future
    • - Digital Health
    • - Future of Staffing
    • - Hospital of the Future (Fall)
  • Multimedia
    • Podcast - Beyond the Byline
    • Sponsored Podcast - Healthcare Insider
    • Video Series - The Check Up
    • Sponsored Video Series - One on One
  • Data Center
    • Data Center Home
    • Hospital Financials
    • Staffing & Compensation
    • Quality & Safety
    • Mergers & Acquisitions
    • Data Archive
    • Resource Guide: By the Numbers
    • Surveys
    • Data Points
  • MORE+
    • Contact Us
    • Advertise
    • Media Kit
    • Newsletters
    • Jobs
    • People on the Move
    • Reprints & Licensing
MENU
Breadcrumb
  1. Home
  2. People
March 02, 2013 12:00 AM

The next steps for health IT

Annual survey shows privacy, ICD-10 issues rank high among industry concerns

Joseph Conn
  • Tweet
  • Share
  • Share
  • Email
  • More
    Reprints Print

    By early 2004, Eric Drew was supposed to die. His doctors thought he would.

    So did Richard Gibson, who was an employee at the Seattle cancer treatment center where Drew had been a leukemia patient since the prior September.

    Thinking the patient's death would cover his tracks, Gibson took home from work enough information about Drew to steal his identity and go on a credit-card shopping spree in Drew's name.

    Unobligingly, though, Drew didn't die. So when the charges for Gibson's fraudulent purchases showed up on accounts Drew never opened, he and a local TV news reporter tracked down the culprit. In 2005, a U.S. attorney in Seattle put Gibson behind bars, the first person convicted of a criminal violation of the privacy rule under the Health Insurance Portability and Accountability Act.

    But for Drew, it wasn't over. Gibson's escapade ruined his credit rating. Banks that issued the fraudulent credit cards to Gibson and the major credit-reporting agencies were either slow or spotty in removing payment delinquencies for Gibson's purchases from his record, Drew says. The stress from battling them and cancer took a toll.

    “It was three years just getting the mess cleaned up, letters, phone calls,” says Drew, who survived after having two experimental cord-blood stem-cell transplants. “I lost two mortgage applications and then the real estate market collapsed, and all of this was an indirect affiliation with this one episode.”

    From bitter experience, Drew is passionate about patient privacy. So he was both pleased and dismayed by the answers of healthcare IT leaders on six privacy-related questions in this year's Modern Healthcare/Modern Physician 2013 Survey of Executive Opinions on Key Information Technology Issues.

    Congress passed the American Recovery and Reinvestment Act in 2009, providing a host of stringent privacy and security provisions, many of which were fleshed out in a 563-page final privacy rule HHS released in February.

    In our survey, we asked healthcare leaders about four provisions of that rule and whether they would have a positive, negative or no impact on their organizations. We also asked two questions about patient-consent procedures involving health information exchanges.

    The rule bans the sale of patient medical data; adds a breach notification requirement; partially restores patients' rights to control the disclosure of their medical records—if they pay for the care out of pocket; and provides much stiffer penalties—up to $1.5 million—for privacy or security rule violations under HIPAA. (These and some subsequent percentages do not equal 100% because of rounding or some respondents did not answer the question.)

    Related content

    How we did it

    Ready to hit the pause button

    No pullback on spending

    Setting their priorities

    Ready for the next stage

    Download the full set of IT survey charts

    A substantial majority (61%) of respondents said the ban on patient data sales would have no impact on their organizations. Another 35% reported it would have a positive effect, while just 5% indicated it would have a negative effect.

    “People need the right to choose,” Drew says. “So, I'm really happy that the CIOs and CEOs and the decisionmakers are saying this would have no impact or say it has a positive impact.”

    Leaders' views on the breach notification requirements, which went into effect soon after passage of the ARRA, were more varied. Some 39% indicated that the breach law had no impact on their organizations, 36% said it had a negative impact and 22% said it had a positive effect.

    The self-pay consent requirement would have no effect, according to nearly 44% of health leaders surveyed, while nearly 35% said it would have a negative effect and about 22% said it would have a positive effect.

    A majority of survey respondents (55%) indicated stiffer penalties for HIPAA violations would have a negative impact, 35% indicated no impact and 8% a positive impact.

    In one question about health information exchange, a substantial majority of leaders (nearly 63%) responded that their healthcare organizations obtain a patient's consent before they disclose that information outside their organizations—for example, to a health information exchange or regional health information organization, commonly called HIEs or RHIOs. Another 24% indicated their organization does not require patient consent to share patient information through an exchange, while 14% were unsure.

    The survey also asked leaders which method patients should be able to use to manage their participation in an HIE or RHIO. A plurality (45%) selected opt-out, meaning that by default patients' information will be exchanged unless they take action to prevent it.

    Some 17% of survey respondents supported opt-in—by default patients' information will not be exchanged unless they request it—and 18% indicated patients should have no choice, meaning their information would be disclosed as part of providing them care. Another 19% of respondents chose offering patients so-called “granular” consent, in which some parts of their records, particularly those involving more sensitive areas such as treatment for being HIV-positive or mental-health issues, could be controlled by the patient and withheld from exchange.

    Drew argues that patients should be able to control whether their records are shared or disclosed with others, although that right has been undermined by commercial interests.

    “The basic principle is that somebody's information should belong to them and they should have ultimate control over who buys and sells it and who should profit from it,” says Drew, who lives in Los Gatos, Calif. He says he has successfully sued several banks and credit-reporting agencies for violating state and federal fair-credit laws and has since launched the Eric Drew Foundation to assist seriously or terminally ill patients.

    Live at HiMSS

    Follow Modern Healthcare's coverage of the Healthcare Information and Management Systems Society's 2013 annual conference in New Orleans on our Website and live via twitter at #MHHIMSS

    “What if somebody steals my identity, goes into a hospital, accesses my medical records and gets a bunch of treatments and it ends up on my medical records?” Drew asks. “What if they're allowed to sell it?” If so, he says, the potential exists that erroneous, possibly life-threatening records could be sold and resold. If that happens, “the tracing is infinite and you can never get things cleaned up,” he says.

    In filling out his IT survey questionnaire, Doug Torre, vice president and chief technology officer of North Shore-Long Island Jewish Health System, Great Neck, N.Y., indicated that all four HIPAA provisions would have a negative impact on operations at his organization, but Torre says his objections were “at kind of the global level.”

    The ban on selling patient data, for example, “would not cause my health system a problem at all,” he says.

    “There are absolutely good reasons for a lot of this,” Torre says, adding, “The reason I came out on a side, they all have potential to add complexity and overhead. That's the challenge that all of us in the technology sector have to manage, all that complexity.”

    Dr. Neil Kudler, vice president and chief medical information officer at Baystate Health, Springfield, Mass., says he has switched his consent management preference. On the survey, Kudler, an HIV treatment specialist, chose granular consent when he filled out the survey, which was sent out in November.

    “At the time, I think I was putting myself in the position of the patient, who might want to have those control levers,” Kudler says. But in the months since, having worked on linking Baystate to a HIE, he says he “can't really support” that position and now favors opt-in.

    “Our heads have been spinning over this,” Kudler says. “We're trying to abide by the regulations and do what's best for our patients.”

    Letter
    to the
    Editor

    Send us a letter

    Have an opinion about this story? Click here to submit a Letter to the Editor, and we may publish it in print.

    Recommended for You
    Oscar’s Schlosser out as CEO, ex-Aetna chief Bertolini in
    Oscar’s Schlosser out as CEO, ex-Aetna chief Bertolini in
    Chris Van Gorder
    How volunteerism shaped the Scripps Health CEO's leadership
    Most Popular
    1
    More healthcare organizations at risk of credit default, Moody's says
    2
    Centene fills out senior executive team with new president, COO
    3
    SCAN, CareOregon plan to merge into the HealthRight Group
    4
    Blue Cross Blue Shield of Michigan unveils big push that lets physicians take on risk, reap rewards
    5
    Bright Health weighs reverse stock split as delisting looms
    Sponsored Content
    People on the Move Newsletter: Sign up to receive a bi-monthly, sponsored content newsletter announcing new hires, promotions, and special accomplishments in the healthcare industry.
    Get Newsletters

    Sign up for enewsletters and alerts to receive breaking news and in-depth coverage of healthcare events and trends, as they happen, right to your inbox.

    Subscribe Today
    MH Magazine Cover

    MH magazine offers content that sheds light on healthcare leaders’ complex choices and touch points—from strategy, governance, leadership development and finance to operations, clinical care, and marketing.

    Subscribe
    Connect with Us
    • LinkedIn
    • Twitter
    • Facebook
    • RSS

    Our Mission

    Modern Healthcare empowers industry leaders to succeed by providing unbiased reporting of the news, insights, analysis and data.

    Contact Us

    (877) 812-1581

    Email us

     

    Resources
    • Contact Us
    • Advertise with Us
    • Ad Choices Ad Choices
    • Sitemap
    Editorial Dept
    • Submission Guidelines
    • Code of Ethics
    • Awards
    • About Us
    Legal
    • Terms and Conditions
    • Privacy Policy
    • Privacy Request
    Modern Healthcare
    Copyright © 1996-2023. Crain Communications, Inc. All Rights Reserved.
    • News
      • Current News
      • Providers
      • Insurance
      • Digital Health
      • Government
      • Finance
      • Technology
      • Safety & Quality
      • Transformation
        • Patients
        • Operations
        • Care Delivery
        • Payment
      • People
      • Regional News
        • Midwest
        • Northeast
        • South
        • West
      • Digital Edition (Web Version)
    • Unwell in America
    • Opinion
      • Bold Moves
      • Breaking Bias
      • Commentaries
      • Letters
      • Vital Signs Blog
      • From the Editor
    • Events & Awards
      • Awards
        • Nominate/Eligibility
        • 100 Most Influential People
        • 50 Most Influential Clinical Executives
        • Best Places to Work in Healthcare
        • Excellence in Governance
        • Health Care Hall of Fame
        • Healthcare Marketing Impact Awards
        • Top 25 Emerging Leaders
        • Top 25 Innovators
        • Diversity in Healthcare
          • - Luminaries
          • - Top 25 Diversity Leaders
          • - Leaders to Watch
        • Women in Healthcare
          • - Luminaries
          • - Top 25 Women Leaders
          • - Women to Watch
      • Conferences
        • Digital Health Transformation Summit
        • ESG: The Implementation Imperative Summit
        • Leadership Symposium
        • Social Determinants of Health Symposium
        • Women Leaders in Healthcare Conference
      • Galas
        • Best Places to Work Awards Gala
        • Health Care Hall of Fame Gala
        • Top 25 Diversity Leaders Gala
        • Top 25 Women Leaders Gala
      • Virtual Briefings
        • - Hospital of the Future
        • - Value Based Care
        • - Hospital at Home
        • - Workplace of the Future
        • - Digital Health
        • - Future of Staffing
        • - Hospital of the Future (Fall)
      • Webinars
    • Multimedia
      • Podcast - Beyond the Byline
      • Sponsored Podcast - Healthcare Insider
      • Video Series - The Check Up
      • Sponsored Video Series - One on One
    • Data Center
      • Data Center Home
      • Hospital Financials
      • Staffing & Compensation
      • Quality & Safety
      • Mergers & Acquisitions
      • Data Archive
      • Resource Guide: By the Numbers
      • Surveys
      • Data Points
    • MORE+
      • Contact Us
      • Advertise
      • Media Kit
      • Newsletters
      • Jobs
      • People on the Move
      • Reprints & Licensing