Welcome to the NEW CHUG— your ultimate destination for cutting-edge insights and discussions at the intersection of healthcare and technology.

Our platform is dedicated to exploring the dynamic landscape of healthcare technology, empowering professionals, enthusiasts, and innovators alike with the knowledge and resources to navigate the rapidly evolving field.

From telemedicine revolutionizing patient care to the transformative potential of artificial intelligence in diagnostics, we delve into a myriad of topics shaping the future of healthcare delivery. Whether you’re a seasoned healthcare IT professional, an aspiring entrepreneur in the digital health space, or simply curious about the latest innovations, our curated content, expert interviews, and thought-provoking articles provide a comprehensive exploration of healthcare technology’s most pressing issues.

Join us as we navigate the forefront of innovation, driving forward the transformation of healthcare for a healthier, more connected world.

Have questions or suggestions? Please use the contact button below.

Notifications

Clear all

EMR security

General Discussion

Last Post by watkinsd 9 years ago

4 Posts

3 Users

0 Reactions

52 Views

RSS

SLHV

(@slhv)

Posts: 478

Honorable Member

Topic starter

Chart update security is primarily based on permission to sign various document types.

Clinical folks can sign clinical document types of course, but what's to prevent a non-clinical user (bad actor) with signing privileges for a non-clinical document type from making changes to clinical information, then signing the update? It seems to me this has potential for abuse.

For example, what if a user starts a phone note, edits a patient's problems, meds, orders, etc, then signs it? What if a user changes a patient's name and DOB to their own (a test patient would probably be a good target for this), writes a prescription (perhaps controlled substance), prints it, then changes the demographics back to the original?

Sure it's in the audit logs, but it could be a long time before the activity is caught.

This is just one that comes to mind. A bad actor could make any number of changes. The update shows who actually signed the phone note in this example. However, who would notice? The bad actor could actually make it look like a legit phone note pretty easily. It could be a phone note or some other type of update that is unlikely to be scrutinized. It would be normal behavior for my non-clinical user to sign a phone note.

Hoping users notice unusual activity and report it doesn't seem like good practice. Hoping that spot audits of user and chart activity will catch it also doesn't seem like a good idea.

I'd be curious to know what others are doing to detect/prevent such behavior.

Thanks

Posted : October 9, 2015 9:08 am

Anonymous

(@Anonymous)

Posts: 0

New Member Guest

no users should have access to write prescription.
but physicians.

in any case, any users that is not state certified as a Primary care, Nurse practitioner and/or registered nurse. should have the ability to update medication in any patient chart.

beside users, should not have access to provide final signature for any documentation, if they are require to write some of the documentation for example secretaries: Physician or an authorize personnel should always provide the final signature of any document written into a patient chart.

Posted : October 9, 2015 9:34 am

SLHV

(@slhv)

Posts: 478

Honorable Member

Topic starter

@David B, only your clinical staff can final sign any document type, including non-clinical?

It would be nice to deny unauthorized users access to generate and sign prescriptions, but I'm not finding it. It all seems to be based on the document type signing permission.

Posted : October 9, 2015 10:16 am

watkinsd

(@watkinsd)

Posts: 21

Eminent Member

We always have the problem with the "print" access. It's all or nothing and there's a HUGE difference in printing a full super bill, letter, work/school excuse and printing office notes. It would be nice if that could be more broken down as well.

Posted : October 13, 2015 3:49 am

Share:

24 Forums
9,940 Topics
39.9 K Posts
1 Online
6,470 Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed

Powered by wpForo Powered by wpForo version 2.4.0