Written on June 9th, 2010 by tasha
I loathe phone tag. Don’t you? And while email is not ideal for everything, you can’t argue with the convenience of sending a non-urgent question when you have the time, and the respondent answering when they have the time. In the Web world, this is called “asynchronous communication” and it has improved access to resources and revolutionized many businesses.
Despite initial reservations, studies of provider/patient email have shown that both parties benefit. Patients are not nearly as demanding as providers fear, and providers get information that can save the need for a physical visit (often saving on expenses, thereby improving the bottom line). In clinical trials within the same practice, patients who used online communications expressed greater satisfaction with their health providers and rated the practice at higher levels than patients who only had telephone phone access. It’s not surprising, therefore, that large companies, such as Kaiser-Permanente, are adopting secure communications systems and making them a regular part of their health care delivery.
Email is handy, but can it be made HIPAA-complaint? Email in and of itself cannot. But web applications that take advantage of the simplicity of blog-like software, can allow for online communications that behave like email, but offer HIPAA-protection. This facilitates communication, not only with families, but also with other providers across the care continuum. Technology in the service of collaboration. I LOVE it! (For those who don’t know, the original name of “Elder Pages Online” was “Let’s Collaborate!”)
How can companies with small budgets engage in secure communications? There are services, now, that are set up specifically to offer HIPAA-compliant, online exchange of information. These services make the investment in necessary software and hardware protections. By renting time or space on their equipment, you pay only a fraction of the cost it would take to set something up yourself.
To be HIPAA compliant, online communication services will, among other things:
- Restrict access to authorized personnel: Generally, this means only those with the right username and password can have access to the information.
- Encrypt the information: When you think of encryption, think of spies and coding machines. Encryption scrambles the information using special codes. To further protect against hackers, encryption is set up so only those who log in with the correct authorization (e.g., username and password) have the key to decipher the message. For instance, companies that work with credit card information online (e.g., PayPal), transmit and store it in encrypted form. You can tell you’re on an encrypted page on a secure server because the web address will start with “https”.
- Test their systems periodically for points of vulnerability. Protection against unauthorized use is key to HIPAA compliance. If you are going to hire a company to help you with secure online communications, ask about their risk assessment procedure and what they do to reduce the risk of a security breach.
Imagine when the telephone was first invented, all of the new issues that came to the fore! Providers had to get receptionists, answering services, then eventually pagers and cell phones. Today, we can’t fathom elder care without the telephone. I believe we are at just such a juncture now, but the paradigm shift is to digital communications. Ten years from now, HIPAA-protected email will be common-place; we just aren’t there yet.
In up-coming posts I will be talking about innovative communication services that are using new technologies on secure servers to help providers and consumers reap the benefits of HIPAA-compliant online communication.
Many thanks to John and the engineers at my hosting company, INetU Managed Hosting, for their assistance in preparing this article.
Any tips to share about HIPAA and online communications?
Tags: Care continuum, HIPAA
Posted in Collaboration, Family Caregivers, Research Results, Technology
Leave a Reply