Welcome to the NEW CHUG— your ultimate destination for cutting-edge insights and discussions at the intersection of healthcare and technology.

Our platform is dedicated to exploring the dynamic landscape of healthcare technology, empowering professionals, enthusiasts, and innovators alike with the knowledge and resources to navigate the rapidly evolving field.

From telemedicine revolutionizing patient care to the transformative potential of artificial intelligence in diagnostics, we delve into a myriad of topics shaping the future of healthcare delivery. Whether you’re a seasoned healthcare IT professional, an aspiring entrepreneur in the digital health space, or simply curious about the latest innovations, our curated content, expert interviews, and thought-provoking articles provide a comprehensive exploration of healthcare technology’s most pressing issues.

Join us as we navigate the forefront of innovation, driving forward the transformation of healthcare for a healthier, more connected world.

Have questions or suggestions? Please use the contact button below.

Notifications

Clear all

Protected Health Information (PHI) outside of Centricity

General Discussion

Last Post by tnc 7 years ago

2 Posts

2 Users

0 Reactions

59 Views

RSS

burnsh

(@burnsh)

Posts: 155

Estimable Member

Topic starter

Dear CHUG users -

We are updating our policy about PHI within communications and wonder if anyone would be willing to share or discuss their policies. How do you handle PHI outside of Centricity when communicating internally and externally (e.g., email, instant messaging, or other forms of communication)?

Thanks.

Posted : January 16, 2018 12:56 am

tnc

(@tnc)

Posts: 517

Honorable Member

1. We use the patient portal to communicate with patients

2. We do not email PHI to patients but we have encryption through Symantec on all outbound emails just in case. We do get false positives at times as well as recipient refusals to open (like some at GE support) so it can be frustrating. If the recipient refuses to open the email I ask them for their fax number and use Biscom and they will receive a fax from me instead. Internally we email all the time as there is no plain text going over the Internet. Smartphone access to PHI is allowed but is encrypted on each phone, forced by ActiveSync policy.

3. No SMS or instant messaging except through Tiger Text. I have read that some organizations are using iMessage thinking they are covered but they absolutely breaching privacy with every message containing PHI. Apple currently will not sign a BAA, and they do keep messages on their servers where they are not encrypted. Also, it is not always a guarantee that the iMessage stays iMessage as it can be converted to standard SMS for various reasons.

4. Many printers have hard drives in them and do store things which are printed. I make sure we retain the hard drive to be destroyed after disposal of the printer. We do the same with workstation and server hard drives.

Off the top of my head that is what we do, and have written policies about.

Mike Zavolas

Tallahassee Neurological Clinic

Posted : January 18, 2018 8:09 am

Share:

24 Forums
9,940 Topics
39.9 K Posts
1 Online
6,470 Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed

Powered by wpForo Powered by wpForo version 2.4.0