The UVa Healthcare System

Medical Privacy

"Whatsoever things I see or hear concerning the life of men, in my attentance on the sick or even apart therefrom, which ought not be noised abroad, I will keep silence thereon, counting such things to be as sacred secrets."

- Oath of Hippocrates, 4th Century, B.C.E.

Where has your record been?

“Medical Records Fall Out of Vehicle, Blown Through Street” – Associated Press, May 26, 2000

“Prozac Maker Reveals Patient E-Mail Addresses” – The Washington Post, July 4, 2001

“Patients’ Records Found in Unsecured Dumpsters” – The Daily Herald, June 18, 2000

“Settlement in Privacy Suit Against Drug Store; Children Allegedly Learned of Dad’s AIDS from Son of a Pharmacy Clerk” – Chicago Tribune, January 9, 1998

“Allen Makes Diagnosis of Depression Public; Medical Records Mailed Anonymously” – The Washington Post, August 26, 2000

“Robert Downey Did Drugs in Rehab!” – The National Enquirer, June 19, 2001

Your Medical Records Today

Mostly paperIncorrect InformationMany organizations have access

Protecting the Record

The Doctors: Hippocratic OathThe State: State LawThe Hospital: Lock & KeyLimited guidelines for digitization

HIPAA

Health Insurance Portability and Accountability Act of 1996

Electronic Health Transactions Standards

Unique Identifiers Privacy & Confidentiality Standards Security & Electronic Signature

Standards

                                              

    

Privacy

Consents & AuthorizationInternal Policies Minimum NecessaryTraining

Rights of Individuals

NoticesAccessAdditionsAccounting of DisclosuresRight of Restriction

Security

Computer & Network SecurityEmployee SecurityBusiness Operation SecurityContingency Plans

Liability

Who can sue? HHS You

Criminal Penalties

Implementing HIPAA is easy, right?

HIPAA is complexIt’s about people8,000 of ThemVarious Levels of EducationRecords Difficult to TrackDoctors are Unsure

How Will They Do It?

New Administrative FunctionsComputer Systems to track and manage recordsPaperless RecordsTraining

Critiques

HIPAA Initiatives and Risk ManagementSmall practices do not have the resourcesTight ScheduleTransition Phase is the most risky

But…UVa Hospital cares about privacy

Questions