Transcript The UVa Healthcare System Medical Privacy

The UVa Healthcare System
Medical Privacy
"Whatsoever things I see or hear concerning the life of men,
in my attentance on the sick or even apart therefrom, which
ought not be noised abroad, I will keep silence thereon,
counting such things to be as sacred secrets."
- Oath of Hippocrates, 4th Century, B.C.E.
Where has your record been?
“Medical Records Fall Out of Vehicle, Blown Through Street” –
Associated Press, May 26, 2000
“Prozac Maker Reveals Patient E-Mail Addresses” –
Post, July 4, 2001
The Washington
“Patients’ Records Found in Unsecured Dumpsters” –
Herald, June 18, 2000
The Daily
“Settlement in Privacy Suit Against Drug Store; Children
Allegedly Learned of Dad’s AIDS from Son of a Pharmacy Clerk”
– Chicago Tribune, January 9, 1998
“Allen Makes Diagnosis of Depression Public; Medical Records
Mailed Anonymously” – The Washington Post, August 26, 2000
“Robert Downey Did Drugs in Rehab!” –
2001
The National Enquirer, June 19,
Your Medical Records Today
Mostly paper
Incorrect Information
Many organizations have access
Protecting the Record
The Doctors: Hippocratic Oath
The State: State Law
The Hospital: Lock & Key
Limited guidelines for digitization
HIPAA
Health Insurance Portability and
Accountability Act of 1996




Electronic Health Transactions Standards
Unique Identifiers
Privacy & Confidentiality Standards
Security & Electronic Signature Standards
Privacy
Consents & Authorization
Internal Policies
Minimum Necessary
Training
Rights of Individuals
Notices
Access
Additions
Accounting of Disclosures
Right of Restriction
Security
Computer & Network Security
Employee Security
Business Operation Security
Contingency Plans
Liability
Who can sue?


HHS
You
Criminal Penalties
Implementing HIPAA is easy,
right?
HIPAA is complex
It’s about people
8,000 of Them
Various Levels of Education
Records Difficult to Track
Doctors are Unsure
How Will They Do It?
New Administrative Functions
Computer Systems to track and manage
records
Paperless Records
Training
Critiques
HIPAA Initiatives and Risk Management
Small practices do not have the resources
Tight Schedule
Transition Phase is the most risky
But…
UVa Hospital cares about privacy
Questions