Small practices

In Case of Disaster, Break Glass

by Jerome Carter on April 30, 2012 · 0 comments

Backups are important. However, when things really go wrong, they alone are not enough.    “Disaster” may sound overly dramatic, but, in fact, catastrophic data losses are not rare.  Depending on where you live, floods, tornados, hurricanes or earthquakes are a fact of life.   Of course, man-made misery (e.g., viruses, tampering, sabotage) accounts for its share [...]

{ 0 comments }

Managing Test Results, It’s a Process

by Jerome Carter on April 23, 2012 · 0 comments

Dealing with abnormal test results was one of the main misery points during my years in practice.    It was too easy for things to fall through the cracks.    When clinicians receive an abnormal result, the usual steps are: review the patient’s chart, decide what to do, and take action.  Proper management may require additional tests, [...]

{ 0 comments }

Encryption, an Ounce of Prevention…

by Jerome Carter on April 16, 2012 · 0 comments

Increasingly, data breaches are in the news.  Reports of stolen desktops, lost jump drives, and misplaced laptops seem to show up constantly.   If it seems that you are now hearing more about breaches than in years past, you are correct, and the HITECH Act is probably the major reason. One component of the privacy/security provisions [...]

{ 0 comments }

Usability as an EHR Selection Tool

by Jerome Carter on April 2, 2012 · 0 comments

Decreased productivity is  one of the most often complained-about side effects of EHR adoption.   Documentation time usually leads the pack in terms of complaints.   One way to avoid “buyer’s remorse” when choosing an EHR is to conduct extensive product testing before signing a contract.   Of course, for busy clinicians, this is easier said than done.   [...]

{ 0 comments }

The hubbub over meaningful use and Medicare incentives has been so distracting that the advantages of the Medicaid EHR incentive program seem to have been lost in the noise.  It also doesn’t help that seven states still have not launched their programs.   Here are a few important differences between the programs. Eligibility Medicare Medicaid Doctors [...]

{ 0 comments }

HIPAA Requirements for Meaningful Use Objective 15

by Jerome Carter on December 12, 2011 · 0 comments

Each of the three previous posts in this series addressed a different aspect of security: information security principles, HIPAA changes in the HITECH Act, and the components of the HIPAA security rule. The subject of this post is meaningful use objective 15, which states: Objective: Protect electronic health information created or maintained by the certified [...]

{ 0 comments }

The HIPAA Security Rule: Components and Compliance

by Jerome Carter on December 5, 2011 · 0 comments

The security rule was one of four provisions of the HIPAA law passed in 1996. The final compliance date for all covered entities was April 20, 2006.  Unlike the privacy rule provision of HIPAA, the security rule applies only to protected health information in electronic form (ePHI).  The security rule is independent of the EHR [...]

{ 0 comments }

Conducting Effective Site Visits

by Jerome Carter on November 30, 2011 · 0 comments

Site visits are a staple of the EHR selection/evaluation process.   Unfortunately, I regularly hear complaints from doctors who have purchased EHRs after seeing them working wonderfully during a site visit, but who later have difficulties in their practices.  Site visits can be a helpful component of EHR selection, but only when used appropriately. When used [...]

{ 0 comments }

Be Warned, Now HIPAA Has Teeth

by Jerome Carter on November 28, 2011 · 0 comments

Enacted in 1996, HIPAA has long been a source of irritation for healthcare organizations, but not much of a threat.    In fact, until recently, being hit by lightning was far more likely than being punished for violating any of the rule’s privacy or security provisions.  Naturally, many began to view HIPAA as a paper tiger.  [...]

{ 0 comments }