<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Avoid Breach Notification - Experior helps PHI Encryption &#187; Pretty Good Privacy</title>
	<atom:link href="http://www.experiordata.com/blog/tag/pretty-good-privacy/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.experiordata.com/blog</link>
	<description>Encrypt your PHI, and avoid breach notification</description>
	<lastBuildDate>Tue, 18 May 2010 04:09:33 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Security for Meaningful Use: Part 2 &#8211; Electronic Access to Protected Health Information (PHI)</title>
		<link>http://www.experiordata.com/blog/2009/12/31/security-for-meaningful-use-part-2-electronic-access-to-protected-health-information-phi/</link>
		<comments>http://www.experiordata.com/blog/2009/12/31/security-for-meaningful-use-part-2-electronic-access-to-protected-health-information-phi/#comments</comments>
		<pubDate>Thu, 31 Dec 2009 17:34:34 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Encyption]]></category>
		<category><![CDATA[PGP]]></category>
		<category><![CDATA[Rulings]]></category>
		<category><![CDATA[Add new tag]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[Health Insurance Portability and Accountability Act]]></category>
		<category><![CDATA[PHI]]></category>
		<category><![CDATA[Pretty Good Privacy]]></category>

		<guid isPermaLink="false">http://www.experiordata.com/blog/?p=352</guid>
		<description><![CDATA[Standards Set for Providing Secure Access to Patient Records





Image via Wikipedia



According to the Initial Set of Standards for Electronic Health Records patients must be provided with their health information (most certainly protected health information -PHI- under HIPAA) electronically and securely within 96 hours.


&#8220;Consistent with the HIT Policy Committee&#8217;s recommendations, we propose the following additional clarification [...]]]></description>
			<content:encoded><![CDATA[<h2>Standards Set for Providing Secure Access to Patient Records</h2>
<p><br class="spacer_" /></p>
<div class="zemanta-img" style="margin: 1em; display: block;">
<div>
<dl class="wp-caption alignright" style="width: 310px;">
<dt class="wp-caption-dt"><a href="http://en.wikipedia.org/wiki/Image:VistA_Img.png"><img title="Sample patient record view from VistA Imaging" src="http://upload.wikimedia.org/wikipedia/en/thumb/8/8f/VistA_Img.png/300px-VistA_Img.png" alt="Sample patient record view from VistA Imaging" width="300" height="225" /></a></dt>
<dd class="wp-caption-dd zemanta-img-attribution" style="font-size: 0.8em;">Image via <a href="http://en.wikipedia.org/wiki/Image:VistA_Img.png">Wikipedia</a></dd>
</dl>
</div>
</div>
<p>According to the <a title="Initial set of standards for certified electronic health records (EHRs) released by HHS/CMS" href="http://www.experiordata.com/blog/2009/12/31/regulation-bonanza-hhs-releases-two-interim-rules-on-123009/">Initial Set of Standards</a> for <a class="zem_slink" title="Electronic health record" rel="wikipedia" href="http://en.wikipedia.org/wiki/Electronic_health_record">Electronic Health Records</a> patients must be provided with their health information (most certainly <strong>protected</strong> health information -PHI- under <a class="zem_slink" title="Health Insurance Portability and Accountability Act" rel="wikipedia" href="http://en.wikipedia.org/wiki/Health_Insurance_Portability_and_Accountability_Act">HIPAA</a>) electronically <strong>and</strong> securely within 96 hours.</p>
<p><br class="spacer_" /></p>
<address>
<p>&#8220;Consistent with the HIT Policy Committee&#8217;s recommendations, we propose the following additional clarification of this objective. Electronic copies may be provided through a number of secure electronic methods (for example, personal health record (</p>
</address>
<address>
<p>PHR), patient portal, CD, <a class="zem_slink" title="Universal Serial Bus" rel="wikipedia" href="http://en.wikipedia.org/wiki/Universal_Serial_Bus">USB</a> drive).</p>
<p><br class="spacer_" /></p>
<p>Provide patients with timely electronic access to their health information (including lab results, problem list, medication lists, allergies) within 96 hours of the information being available to the EP. Also, consistent with the HIT Policy Committee recommendations, we propose the following additional clarification of this objective. Electronic access may be provided by a number of <span style="font-style: normal;"><strong>s</strong></span><strong>ecure electronic methods (for example, PHR, patient portal, CD, USB drive).</strong> Timely is defined as within 96 hours of the information being available to the EP either through the receipt of final lab results or a patient interaction that updates the EP&#8217;s knowledge of the patient&#8217;s health. We judge 96 hours to be a reasonable amount of time to ensure that certified EHR technology is up to date. We welcome comment on if a shorter or longer time is advantageous.&#8221;</p>
</address>
<address> </address>
<h2><span style="font-style: normal;">How to Secure Health Records</span></h2>
<div class="zemanta-img" style="margin: 1em; display: block;">
<div>
<dl class="wp-caption alignright" style="width: 310px;">
<dt class="wp-caption-dt"><a href="http://commons.wikipedia.org/wiki/Image:USBVacuumCleaner.jpg"><img title="USB Vacuum Cleaner, a giveaway from an IBM event" src="http://upload.wikimedia.org/wikipedia/commons/thumb/7/77/USBVacuumCleaner.jpg/300px-USBVacuumCleaner.jpg" alt="USB Vacuum Cleaner, a giveaway from an IBM event" width="300" height="225" /></a></dt>
<dd class="wp-caption-dd zemanta-img-attribution" style="font-size: 0.8em;">Image via <a href="http://commons.wikipedia.org/wiki/Image:USBVacuumCleaner.jpg">Wikipedia</a></dd>
</dl>
</div>
</div>
<p><span style="font-style: normal;">You may be wondering how can patient information be secured. The best way to secure information is by encrypting the </span><span style="font-style: normal;">media. However, note that <strong>patients must be able to decrypt the information</strong> on their own computer equipment. One of the product Experior Data implements is called <a title="PGP Portable allows you to encrypt data on removable media but lets people decrypt it on other computers without requiring special software to be installed" href="http://www.pgp.com/products/portable/index.html" target="_blank">PGP Portable</a>. For example, the patient provides a USB drive for you to copy the PHI onto it. PGP Portable encrypts the entire USB device after the information is copied to it. The patient must provide a passphrase during the <a class="zem_slink" title="Encryption" rel="wikipedia" href="http://en.wikipedia.org/wiki/Encryption">encryption</a> process. When the patient goes home he/she inserts the USB drive into their home computer and is prompted for the passphrase. After the passphrase is entered access to the patient information is provided.</span></p>
<h6 class="zemanta-related-title" style="font-size: 1em;">Related articles by Zemanta</h6>
<ul class="zemanta-article-ul">
<li class="zemanta-article-ul-li"><a href="http://projecthealthdesign.typepad.com/project_health_design/2009/08/hies-are-beginning-to-link-patients-directly-to-their-own-health-data.html">HIEs are Beginning to Link Patients Directly to their Own Health Data</a> (projecthealthdesign.typepad.com)</li>
<li class="zemanta-article-ul-li"><a href="http://chilmarkresearch.com/2009/09/23/pushing-onc-to-act-on-consumers-behalf/">Pushing ONC to Act on Consumer&#8217;s Behalf</a> (chilmarkresearch.com)</li>
<li class="zemanta-article-ul-li"><a href="http://www.medicineandtechnology.com/2009/12/medfusion-maintains-leadership-in.html">Medfusion Maintains Leadership in Patient Portal Performance</a> (medicineandtechnology.com)</li>
<li class="zemanta-article-ul-li"><a href="http://blogs.wsj.com/health/2009/12/30/how-to-get-20-billion-for-using-electronic-medical-records/">How to Get $20 Billion for Using Electronic Medical Records</a> (blogs.wsj.com)</li>
</ul>
<div class="zemanta-pixie" style="margin-top: 10px; height: 15px;"><a class="zemanta-pixie-a" title="Reblog this post [with Zemanta]" href="http://reblog.zemanta.com/zemified/76960f38-a396-49b1-bf12-c9961f5125fc/"><img class="zemanta-pixie-img" style="border: medium none; float: right;" src="http://img.zemanta.com/reblog_e.png?x-id=76960f38-a396-49b1-bf12-c9961f5125fc" alt="Reblog this post [with Zemanta]" /></a><span class="zem-script more-related pretty-attribution"><br />
<script src="http://static.zemanta.com/readside/loader.js" type="text/javascript"></script></p>
<p><br class="spacer_" /></p>
<p><br class="spacer_" /></p>
<p><br class="spacer_" /></p>
<p><br class="spacer_" /></p>
<p><br class="spacer_" /></p>
<p><br class="spacer_" /></p>
<p><br class="spacer_" /></p>
<p><br class="spacer_" /></p>
<p></span></div>
]]></content:encoded>
			<wfw:commentRss>http://www.experiordata.com/blog/2009/12/31/security-for-meaningful-use-part-2-electronic-access-to-protected-health-information-phi/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
