
{"id":1946,"date":"2012-06-12T00:00:00","date_gmt":"2012-06-12T00:00:00","guid":{"rendered":"http:\/\/otava.test\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/"},"modified":"2012-06-12T00:00:00","modified_gmt":"2012-06-12T00:00:00","slug":"liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale","status":"publish","type":"post","link":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/","title":{"rendered":"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale"},"content":{"rendered":"<p>I&#8217;m liveblogging from the iHT2 Health IT Summit conference in Fort Lauderdale from June 12-13, and\u00a0Online Tech will be sponsoring and exhibiting our\u00a0<a href=\"https:\/\/otavawebsite.wpengine.com\/compliance-security\/hipaa-compliant-cloud\/\">HIPAA hosting<\/a>\u00a0solutions as well.<\/p>\n<p>The conference focuses on healthcare IT as the industry evolves, including the latest implications of ARRA (American Recovery and Reinvestment Act of 2009) and meaningful use changes and how it affects practices and hospitals. Other presentations will focus on electronic protected health information (ePHI) security, using EHR systems for health information exchange (HIE), healthcare delivery reform and other topics on improving patient care with data technology.<\/p>\n<p>I will be speaking on the panel\u00a0<em>The hCloud at 30,000 Feet: Cloud Computing Solutions for Mobile Healthcare<\/em>. The panel will discuss how\u00a0HIPAA cloud hosting\u00a0can offer a way for mobile devices to capture, store and process healthcare information securely, supporting a range of healthcare applications.<\/p>\n<hr \/>\n<p>We\u2019re off! iHT2 welcome from Barry Chaiken, MD, MPH Senior Fellow &amp; Health IT Chair iHT2 introducing Dr. Martin Harris.<\/p>\n<p>At the crossroads of a new transformation, a less predictable transformation than the move to DRGs. What\u2019s coming next is a major change in delivery system focused on managing costs by fundamentally changing the way we care for patients.<\/p>\n<p>1. Talk about the challenges to deliver high-quality healthcare to all Americans in an affordable model<br \/>\n2. Talk about the tools. HIT is one of the fundamental pieces of the new delivery model<br \/>\n3. Example<\/p>\n<p>Strategic Imperative in the Age of Healthcare Reform. President Obama visited the Cleveland Clinic to learn about how to accomplish changes.<br \/>\n1. Quality<br \/>\n2. Safety<br \/>\n3. Care Coordination &#8211; here\u2019s where we really begin to see the transformation of the delivery system.<br \/>\n4. How to do the first 3 in a way that\u2019s accessible to everyone in an affordable way<\/p>\n<p>Tools for transformation<br \/>\nThe Cleveland Clinic founded in 1021 with hospitals all over the country and even internationally. Non-profit.<\/p>\n<p>In the dot.com era, CC began thinking about their \u201cinternet strategy\u201d. CC understood that the internet represented an oppty to rethink care delivery and to change the whole model and cost structure.<\/p>\n<p>Strategy developed called e|Cleveland Clinic<br \/>\nThinking about \u201cany patient, anywhere\u201d<\/p>\n<p>Primarily information services. But the distinction between practice and IT begins to blur. Care delivery starts to become impossible without the technology.<\/p>\n<p>1. Within the 4 walls of the CC. Main campus 1200 bed hospital. Distributed family health center model w\/fixed facilities (about 1 dozen). \u00bd dozen inpatient hospitals.<\/p>\n<p>MyPractice EMR for all people involved in the practice: registrars, schedulers, researchers, residents, patients, front desk, nurses, physicians<\/p>\n<p>7000 physicians use the tool . 2635 residents\/fellows. Downtime has become a VERY bad word. \ud83d\ude42<\/p>\n<p>Ambulatory Functionality includes messaging, schedule, results, documentation, physician order entry, best proactive alerts.<\/p>\n<p>Inpatient &#8211; exactly the same tool, with a different face: inpatient census, all results, medication administration record (they know when, how much, who gave meds), vital signs and I&amp;O, documentation, and integrated image management.<\/p>\n<p>\u201cDocumentation is a journey\u201d. Their system allowed typing, transcription, any way to get the in there. Now their documentation entry is becoming more structured to measure.<br \/>\neHealth services:<\/p>\n<ol>\n<li>Transition to a consumer-driven model<\/li>\n<li>Enable patients<\/li>\n<li>Health services anytime, anywhere<\/li>\n<\/ol>\n<p>Capacity question:\u00a0We&#8217;re going to have to become MUCH more efficient, learning about ambulatory patients and whether they are likely to predictive modeling to understand the demand of a patient population over time. Like airports, they assume that certain number won&#8217;t show up.<\/p>\n<p>The model of care shouldn&#8217;t be CC-centric. If info is readily exchangeable, it enables people to practice at the top of their license with a team that is really focused on the patient. If they have the right tools, to make the right decisions, providers can practice at the top of their game.<\/p>\n<p>You&#8217;re not going to increase the number of medical school or shorten the training period. eEnabled information exchange can help. Capacity managment for patients NOT yet in the facilities.<\/p>\n<p>Q. 2nd opinion platform, does it give the patient feedback. If their diagnoses are a match with the MyConsult, they get the entire list of the information needed. The patient is empowered to know all of the information needed. Turns the paradigm on its head.<\/p>\n<p>Q. How realistic is the cost?<br \/>\nThere is no cost for DR Connect &#8211; it&#8217;s free to any referring physician. Patients pay CC up front they submit the receipts for insurance reimbursement.<\/p>\n<p>Strategy &#8211; what&#8217;s the basic plan?<br \/>\n2 models: Historic best-of-breed, find the best technology for function.<br \/>\n2nd model: a monolithic system &#8211; might be CC model is slightly right of center. Things that are core to the practice of medicine are integrated (not interfaced). As you drive the care paradigm, true integration and real-time decision support can only be achieved w\/ a real-time integrated data base.<\/p>\n<p>Some things some can be best-of-breed like lab, radiology, monitoring systems. Rx became core instead of best-of-breed. Because CC was so early, they found an integrated system, but it didn&#8217;t have both sides of the system &#8211; good ambulatory, but not for in-patient yet. CC went out-patient to in-patient, which worked well for CC.<\/p>\n<p>Epic is the core vendor. Lab vendor is SunQuest. Agra for integrated imaging. Interfaced system, not integrated.<\/p>\n<p>Why wouldn&#8217;t we go with an integrated system? The role of the care giver who may be a family member. W\/ MyChart, the elderly patient needed the tool, but couldn&#8217;t use it personaly. Used the care-giver model in Ohio; it works very well for them to designate someone else who is driving the tool.<\/p>\n<p>More challenging is the adult-&gt;child. From 0-13 works, from 13-18 harder, 18+ in the adult-adult model.<\/p>\n<p>Image retrieval, as we think about medicine in the future, imaging will be the primary method by which we understand if an organ is functioning the way we want it too. The actual image will display the context of the medication and care delivery.<\/p>\n<p>&#8220;Became clear we had to &#8216;e-enable&#8217; the enterprise.&#8221; CC wanted to make sure that all the information was in front of all 6.4 million patients in MyPractice.<br \/>\nAs we move to adopt technology, the patients must come along with us, preferably at the same time. Personal Health Record, for CC it&#8217;s called &#8220;MyChart&#8221; &#8211; provides access for patients anywhere in the world. The lab test they see is EXACTLY that same lab test their physician is looking at. It&#8217;s consumerized to they can understand it, but there is one standard source of their health information throughout the system.<\/p>\n<p>All alerts can be turned around to the patient to act on. They can see their schedule &#8211; future and past appointments. They can go online and book a follow-up appointment online.<\/p>\n<p>Rx renewal is an online process &#8211; it&#8217;s the single most frequent reason a patient calls. They can go online to renew all Rxs now. Patients spend very little time in the facility. On the CC MyChart iPhone App, patients can see test results, messages, appts, preventative card, health summary &#8211; meds allergies, etc.<\/p>\n<p>450,000 patients use the tool and think about their health care in a very different way and interact with their physicians in a fundamentally different way.<\/p>\n<p>Physicians need to think about how patients select their healthcare team. 50% patients that come to the CC have another physician who is now part of the CC, but the patient wants the confidence of knowing that everyone on their care team is communicating.<\/p>\n<p>DRConnect is a portal for doctors to give a window into the EMR REGARDLESS of physician relationship to the CC. When the patient comes to the hospital, the EMR knows about the patient relationship w\/ the referring physician. An alert pops up during registration, which triggers the registration person to ask the patient if they want their information sent to their referring physician. If so, ALL information about the patient is sent in real-time. This is the CCs fastest growing program. 150,000 patients are sent by referral. It&#8217;s growing even outside of Ohio.<\/p>\n<p>Where are we headed next? There is going to be an explosion of digital medical technology. This holds great promise to tell us where the patient is physiologically.<\/p>\n<p>MyMonitoring &#8211; example, someone coming in for a PaceMaker would go see the cardiologist who asks if they want traditional or the OnStar model. Traditional, you make 4 visits to monitoring the pace maker. In the OnStar version, 3 times\/yr patients use software on their laptop to access info about the device. Tomorrow, it will include a physiological snapshot of the patient.<\/p>\n<p>All use the same EMR &#8211; it doesn&#8217;t matter where the patient is, all info needs to end up in a structured manner. The right info, to the right provider, at the right time.The HIE space w\/ public &amp; private model.<\/p>\n<p>MyVault &#8211; patient driven. CC didn&#8217;t want to be in the plumbing business to connect all the various health information sources, so they followed the NHIN model. This will allow any care team to follow any patient regardless of location. This is a real opportunity to fundamentally innovate in the way we think about patient care.<\/p>\n<p>Over the next 20 yrs, the largest cohort of Americans is retiring (10,000 enroll in MediCare every DAY). We can NOT take care of these people in the current model &#8211; there aren&#8217;t enough doctors or facilities. We need to think about how to deliver care utilizing any tool within our reach.<\/p>\n<p>The example: A patient is diagnosed w\/ a heart condition requiring surgery. Any patient anywhere in the world can seek the opinion of the CC online for about 200 diagnoses (very high-end, very objective illnesses), i.e., a new cancer diagnosis that comes with advance pathology so that someone from a distance could render a professional and informed opinion remotely.<\/p>\n<p>Patient Jones signed up for the service online instead of travelling. Physicians in CC can visit &#8220;the pizza box&#8221; which has all of the information organized in the way they need it to make an informed decision. They render their opinion back to the patient virtually over the internet. They see the bio of the physician, they see all of the notes. About 36 hours, a follow up conversation is scheduled with the patient to follow up AFTER they have been able to review and digest the doctor&#8217;s notes.<\/p>\n<p>Usually, patients hear about 25% of what a doctor says. Perhaps the patient signs up for \u00a0surgery at the CC. Before travelling, the patient signs up for Microsoft HealthVault, a personal health information management service, and imports all of the info into the system.<\/p>\n<p>This ensures that the patient has ALL of the necessary information in place BEFORE they get on an airplane.<\/p>\n<p>The information arrives well before the patient in a structure format. CC can use this information to coordinate the first day of care for that patient.<\/p>\n<p>The operating room is the most expensive resource. If you cancel the operation, you will NEVER recover those costs. CC will give the information back to the referring physician in<br \/>\nreal-time and can get the input of the referring physician DURING the course of care. Their remote referring physician is an engaged part of the care delivery team. For recovery, patients are going to have new technologies to give info back to the care provider in real-time, i.e. scale, thermometer, glucometer, blood pressure cuff.<\/p>\n<p>The patient and all participants in the care team are united.<\/p>\n<hr \/>\n<p><strong>Panel<\/strong><em><strong>\u00a0\u201cInnovation in Healthcare: How Meaningful Use is Impacting the Evolution of Healthcare\u201d<\/strong><\/em><br \/>\nWhile the current HITECH incentives and penalties will raise the bar of meaningful use for information systems across the country, it may cause some challenging long term challenges to the meaningful use of data. Providers will certainly begin to make meaningful use of information systems as defined by the law, but will they be able to assure the meaningful use of clinical data to continue to drive our national healthcare to the highest quality at a sustainable cost? This is an issue confronted by our nation\u2019s leading healthcare organizations as they push the envelope in defining care models and leveraging technology to improve care.<\/p>\n<p>This session will discuss:<\/p>\n<ul>\n<li>Maintaining innovation in healthcare<\/li>\n<li>Innovating while complying with Meaningful Use<\/li>\n<li>Using MU as a guide, not a goal<\/li>\n<\/ul>\n<p>Moderator: Gienna Shaw, Editor-in-Chief, FierceHealthcare<\/p>\n<p>Doris Crain, VP &amp; Chief Information Officer, Broward Health \u2013 iHT\u00b2 Advisory Board Member<br \/>\nJeanette Schreiber, JD, MSW, AVP, Medical Affairs &amp; Chief Legal Officer, UCF College of Medicine and Chair, Central Florida RHIO<br \/>\nGarett Trumpower, RN, VP, Strategy &amp; Consulting, MEDSEEK<br \/>\nShane Hade, Chief Executive Officer, Avhealio, LLC<\/p>\n<p>How does #MU limit innovation?<br \/>\nGarett Trumpower sees that many organizations are implementing the \u201ccheckbox\u201d strategy, and are not looking beyond the minimum requirements.<\/p>\n<p>Jeanette Schreiber, Medical Affairs and Chief Legal Officer Central Florida RHIO sees #MU as a key driver, and is thankful for it\u2019s role to push innovation.<\/p>\n<p>Shane Hade, CEO Avhealio notes that Stage 1 may have been a checkbox initiative for some, but Stage 2 will push organizations to do more with the infomraiton.<\/p>\n<p>Doris Crain sees #MU as a reward for doing the right thing that organizations should be looking at anyway.<\/p>\n<p>How is the data a driver of innovation and what are specific ways organizations are actually using the data?<\/p>\n<p>Garett Trumpower: Starting to see organizations using it to predict facility use. Example: who is using ambulatory vs ERs. Now organizations are using traditional communication systems to coordinate care with patient engagement &#8211; this is missing in a lot of #MU Stage 1 users.<\/p>\n<p>Doris Crain: Nurses generate a plan that th predictive tool mines into the data and reminds them of medication alerts or candidates who may be high-risk fall candidates. This can improve patient-safety and value-based purchasing to understand the quality improvment plans for readmissions in the Emergency Rooms.<\/p>\n<p>Shaw: Any results to share about ER readmissions?<br \/>\nCrain: Every month readmissions are reported to the board, and Broward Health is seeing great progress from a high readmission rate to a much lower readmission rate.<\/p>\n<p>Trumpower asked Crain: How hard was it for nurses to learn the new model? Was is adopted easily, forced with resistance?<br \/>\nCrain: Many still struggle. The challenge is selling the value it brings, which ultimately does create the motivation for participation.<\/p>\n<p>Schreiber: Some physician providers want help to establish the medical home model. It can be used to manage care across provider lines, detect fraud and abuse. It opens a whole world of opportunities to communities to use the data.<\/p>\n<p>Shaw: One of the big parts of Stage 2 is accomplishing patient engagement. One way hospitals are trying to reach patients is by creating patient portals.<br \/>\nTrumpower: Many portals are very check-the-box. 1. How will they access it? 2. How will they know about it? Patient portals aren\u2019t a \u201cbuild-it-and-they-will-come\u201d initiative. Healthcare is like a refrigerator &#8211; I don\u2019t know all the brands and features until I need it.<br \/>\nThey\u2019re looking as search engine optimization and social media strategies to create awareness to find out who will actually use patient portals.<br \/>\nGetting into the device management will be a key area of innovation to connect patients to their health care data in a patient-readable form on their phones.<\/p>\n<p>Schreiber: In terms of how portals that can work with HIEs, imagine you only need to go to one place to communicate with all of the physicians you deal with. Advanced directives can be used to communicate throughout all organizations. Home monitoring programs could share information into the systems. If there\u2019s a place to manage care and payment for care in a single place, that\u2019s worth putting together.<\/p>\n<p>Shaw: Do we know high-risk patients are engaged? How do we get them engaged?<\/p>\n<p>Trumpower: The issue of patient engagement is moving from a CIO owned initiative to a CMO initiative. At Scripps Health seeing huge physician involvement on the front end to promote portals to patients.<\/p>\n<p>Crain: The problem with portals is that many underserved patients don\u2019t have computers, internet access, or smart-phones. For Broward Health, they are looking to their employee base first.<\/p>\n<p>Hade: The reality is that most people using the portals, probably have access to good care already. Key question is how to make better use of the data that is already in the portal. The use of mobile and portable devices has eclipsed desktop use. Push technologies can provide huge opportunity, IF patients can and will adopt them.<\/p>\n<p>Crain: 80% of the dollars spent are on chronic diseases. This has been an area where the use of patient portals has been proven to improve care.<\/p>\n<p>Audience: #MU is interpreted as innovation. Technology is unusable if it doesn\u2019t do anything directly for the patients. It\u2019s all about \u201cME\u201d &#8211; \u201cManaging Expectations\u201d.<\/p>\n<p>Hade: Usability in the healthcare industry lags behind other industries because the design investment isn\u2019t leveraged. Make it easier. Present more relevant information in an easier format, not just MORE information.<\/p>\n<p>Audience: If physician is a key gatekeeper. If you open your phone to the patient record (i.e. mine is 152 pages), I don\u2019t want to use my phone for that. We want the physician to read and interpret that information.<\/p>\n<p>Shaw: We\u2019re not only talking about mobile, we\u2019re talking about all of Meaningful Use and patient engagement for Stage 2.<\/p>\n<p>Crain: We need a solid and flexible foundation that will let hospitals grow in multiple directions and communicate with all participants in care delivery.<\/p>\n<p>Schreiber: Design and usability is absolutely needed.<\/p>\n<p>Hade: Design informed usability to present relevant information will be needed to promote real engagement.<\/p>\n<p>Audience: By delivery PHI into a mobile device, how do you maintain the privacy and security of the information?<\/p>\n<p>Trumpower: Opt-in is a state by state issue right now.<\/p>\n<p>Schreiber: Florida is an opt-in state and we may be a little ahead of ourselves in this area.<\/p>\n<p>Me: There\u2019s a good opportunity and challenge to enable patients to customize the interface and make it their own. Perhaps usability and design can help provide an interface that allows patients to create their own health space instead of pre-supposing what patients want.<\/p>\n<p>Trumpower: The good news about being late to the game is that we can learn from other industries.<\/p>\n<p>Audience: One of the thing HIPAA promised us was a unique patient identifier, which has gotten pushed out farther and farther. As we push this information out to patients, how do we make sure it\u2019s getting to the right patients?<\/p>\n<p>Trumpower: Canada does have a single ID, and sometimes there are still mistakes with mis-entries, but vendors do offer some sophisticated products from other industries like banking to ask identification questions based on credit reports that are starting to enter the healthcare space.<\/p>\n<p>Crain: We have to secure ePHI, but having a unique identifier wouldn\u2019t necessarily make it more risky.<\/p>\n<p>Shaw: If Mint can figure out mortgage, 401K, credit lines, surely the healthcare space can figure it out.<\/p>\n<p>GE: #MU is driving functionality over the next few years.<br \/>\nWe need to make sure our representatives know about the law on the books that prevents HHS and CMS from looking at the issue of unique identifiers.<br \/>\nAre there any programs looking at the value of texting?<\/p>\n<p>How can we help if the vast majority is based on the best of 1979 infrastructure &#8211; how do we move our industry towards a SOA architecture?<\/p>\n<p>How do we educate the consumer of the value of the new architecture with the challenge of having to re-write the legacy systems?<\/p>\n<p>Hade: Separate the applications in the appropriate layers, have a designer on the presentation layer, and invest the majority of effort into make sure the integration layer is in place.<\/p>\n<p>Trumpower: CCD will allow us to have more innovative technologies and provide some open architecture and new developers to connect new systems and still be certified.<\/p>\n<p>Hade: It doesn\u2019t matter how you write the technology &#8211; you can write it in anything, as long as you are designing the presentation layer to present the right information in a usable way.<\/p>\n<p>Trumpower: #MU is causing some delay on both the vendor and the hospital side.<\/p>\n<p>Audience: Vendors need to continue to innovate and work in #MU and compliance.<\/p>\n<p>Audience: What is the panel\u2019s view on allowing payers to participate in the HIE and their role?<\/p>\n<p>Schreiber: Many divergent views with some providers being anxious. One of the big issues is sustainability. For organizations who have made it, how have they done it? So far, it\u2019s the ones who have crossed the whole community, including the payer side. THere are an increasing number of ways that payers and providers can help each other and provide efficiencies and provide administrative activities around the HIE. I\u2019m having trouble seeing the downside of including payers in the HIE.<\/p>\n<p>Trumpower: Without claims data, how do providers know if the patient has gone outside the provider network? Providers are going to be dinged by patients leaving the ACO, but have no awareness about it.<\/p>\n<p>Schreiber: Many have already crossed that threshold and I\u2019m optimistic.<\/p>\n<p>Trumpower: I\u2019ve very optimistic and for bringing in payers to the HIEs.<\/p>\n<p>Hade: In the examples I know of, providers wouldn\u2019t be able to manage care and cost basis without payers at the table. It\u2019s kind of like \u201cIf I show you mine if you show me yours,\u201d but once the trust can be established, it can be a good thing.<\/p>\n<p>Shaw: What about the patients being able to manipulate the information?<\/p>\n<p>Hade: Vast explosion of consumer health is around the in-home monitoring and it\u2019s usually disconnected.<br \/>\nSchreiber: With my lawyer hat on, maybe we need to give them their own area to enter information, but we don\u2019t want to create a huge mess in the patient EMR.<\/p>\n<p>Crain: Can you imagine what happens when all of us become patients? We\u2019ll all be really hard patients because we know what\u2019s possible. We\u2019re creating these systems of patients like ourselves.<\/p>\n<p>Audience: There\u2019s mental health information that shouldn\u2019t always be shared directly with a patient if it\u2019s not in the best interest of patient care.<\/p>\n<p>Schreiber: All of those laws are state-specific and wreck havoc on everything so the systems will have to be built to integrate mental health information and it\u2019s another area where the law needs help.<\/p>\n<p>Trumpower: None of the HIE implementations I\u2019ve seen include mental health. No one is touching it right now.<\/p>\n<p>Shaw: Patients feel ownership of their patient health data.<\/p>\n<p>Crain: You can be sure I\u2019ll get ALL of my patient data. \ud83d\ude42<\/p>\n<hr \/>\n<p>4pm panel: <em><strong>&#8220;Preventative Security for Electronic Personal Health Information&#8221;<\/strong><\/em> kicking off with iHealthtran&#8217;s #iHT2FTL \u2026<\/p>\n<p>Jayne Bassler: moderator<br \/>\nGay Madden, RN<br \/>\nLeon Hoover, CIO<br \/>\nJulie Meadows-Keefe, Counsel<\/p>\n<p>Bassler: Gay, can you talk about security in the mobile environment.<\/p>\n<p>Madden: The biggest security issue is with the end-user and getting users to understand policies. WIthout accountability and understanding with the end-user, the vulnerability is very high.<\/p>\n<p>Meadows-Keefe: 50,000 encryption licenses, but only 2000 users were using it. The blurring of boundaries in today\u2019s work environment that extends beyond 9-5 in the office is extensive.<\/p>\n<p>Hoover: When I arrived, there was no documentation at all and they started from scratch. Security starts with policies before technology. Encryption is used extensively, but it creates complexity and there needs to be a balance between the complexity and usability.<\/p>\n<p>Bassler: What about the security risks of smart phones?<\/p>\n<p>Madden: It\u2019s another layer of security to be managed and with the same staff that can\u2019t remember how to change their passwords. Demands of the consumers are up, IT resources are down, and it leaves security officers in a lose-lose position.<\/p>\n<p>Meadows-Keefe: I\u2019ve heard it called BYOD or Bring Your Own Disaster. Whether we like it or not, the Blackberries are going to be pried out of our hands, so like it or not, we\u2019ll need to address other platforms.<\/p>\n<p>Hoover: For us, I celebrate the fact that our EMR doesn\u2019t have a mobile option yet, but we establish a policy that if you\u2019re going to have hospital data on your phone, we have the ability to wipe the device. And in our tests, the wipe works REALLY well &#8211; back to factory reset. With BYOD there\u2019s an expectation that IT staff can help manage it, and we\u2019re not set up for that. It takes time, productivity goes down.<\/p>\n<p>Bassler: It\u2019s a real concern about cost where we can\u2019t control the devices but are expected to manage them. What have the laws done to put us in this position?<\/p>\n<p>Meadows-Keefe: The technical standards and privacy standards are merging together. You\u2019re expected to speak both tech and privacy law now. You can\u2019t speak to just one side of the fence. We\u2019re getting to the point where investing in tech is going to be essential to meet the law.<\/p>\n<p>Madden: When I look at my costs and budget, they\u2019re not always the same. For me, I look at these costs that could go to patient care instead of privacy. Can we ever buy enough technology to prevent a breach.<\/p>\n<p>Meadows-Keefe: Definition includes \u201cpeople\u201d in the Information System.<\/p>\n<p>Hoover: There are 2 components: people and data. How do you educate people to not use the camera in the hospital. Data at rest, data at work, Data on the move. How much investment can you make to safeguard the data and protect the patient.<\/p>\n<p>Audience: Have you found any policies that have been successful?<br \/>\nMeadows-Keefe and Madden: We disabled cameras on the blackberrys.<\/p>\n<p>Madden: We\u2019re tried to relate the importance of the patient to the staff, but we haven\u2019t found this to be successful. It goes back to the people issue and how we control that part of the problem. We try to talk about it from the patient perspective.<\/p>\n<p>Meadows-Keefe: Many people feel overwhelmed with the message about security. They don\u2019t want to hear more. The theft of medical ID is worth about $50, the value of a social security number is worth about $1.<\/p>\n<p>Bassler: Have any of you shared information about penalties and breeches?<\/p>\n<p>Meadows-Keefe: Yes, we called it \u201cbreach of the week\u201d. \ud83d\ude42<\/p>\n<p>Madden: We even conducted our own mock-trial. They fined the nurse the maximum fine and the organization.<\/p>\n<p>I think encrypted email is wonderful I sleep better at night knowing that there is a lexicon protecting my email. We put all of our staff on blackberrys, moving to email and IM and away from text. Everyone loves texting because it\u2019s so fast and direct, but before you know it, you have text going out with ePHI.<\/p>\n<p>Meadows-Keefe: Major HIE initiatives is to manage protected text messages.<\/p>\n<p>Audience:<\/p>\n<p>Meadows-Keefe: HHS is employing some reason about their expectations. You can\u2019t realistically expect that every organization is going to be able to upgrade immediately to the highest level of security protection available. With the fines structure in HITECH, they vary based on level of culpability.<\/p>\n<p>Hoover: Does your encryption look at mobile devices. Can you get reporting on emails?<\/p>\n<p>Madden: A couple other things. When we started in this arena, the Security Office. Now there is a whole security team and put it on the organization\u2019s shoulders. We have a partner who is a forensics and security company to audit us once per year which gives the IT department clout. A respected outside partner can really give support throughout the management team to support security initiatives. Tampa Bay seems to be the place for SS # mining. We had 2 external people notify us that a staff member was mining SS#s. Local police can\u2019t do anything and the IRS doesn\u2019t really care unless the victim has lost more than $60k. In the breech world, you have to prove that nothing bad happened, but it\u2019s hard when you can\u2019t find the person.<\/p>\n<p>Bassler: Do you do any mock disasters?<\/p>\n<p>Madden &amp; Hoover: No, not yet. But we should. I wake up in the mornings wondering, how would I know if there\u2019s a breech. It\u2019s tough for a smaller hospital to know what to do or have a response team.<\/p>\n<p>Meadows-Keefe: It\u2019s equally challenging in a large corporation as well because there were so many stakeholders who want to be involved. Personally, I solved it by saying \u201cif you have any data issues, please send it directly to me\u201d. You could have a great breach notification policy, but if people are reluctant to report it in the employment environment, it doesn\u2019t help. You have to make it a safe environment for transparency. It\u2019s much scarier what you don\u2019t know about.<\/p>\n<p>Hoover: Outside healthcare, you want to find out about the breach, but you also want to know how to stop the breach. Who in healthcare has that kind of thing.<\/p>\n<p>Audience: I\u2019m interested in the type of program that you have to institute, because even disgruntled employees should know better.<\/p>\n<p>Meadows-Keefe: Maybe we\u2019re not talking enough about the fear factor, but talking about consequences of being caught and knowing what the discipline actions will be. I would always recommend that the person be automatically dismissed. They need to be reported to law enforcement and their board of licensure.<\/p>\n<p>Madden: I think there\u2019s a fundamental problem and it\u2019s still seen as \u201cdocumentation\u201d. The word \u201cdocumentation\u201d means nobody reads it. You would write prolific notes, and then leave sticky notes to get the attention of the physicians. It\u2019s somehow getting rid of the word \u201cdocumentation\u201d and putting value on it as part of \u201ccare\u201d. People would view is as part of patient care instead of as unvalued documentation.<\/p>\n<p>Audience: Do you think our staff knows the difference between an \u201coops\u201d and willful ill-intent? No one thinks it\u2019s happening to them, but no one knows the consequences either.<\/p>\n<p>Meadows-Keefe: we would have people fax to the wrong fax number, and for me, that was a training opportunity. But those people shouldn\u2019t be thrown out. But some common sense needs to apply. It doesn\u2019t need to be as complex as some people make it out to be.<\/p>\n<p>Madden: There\u2019s a sense of secrecy in the organization when something bad happens. When I use that example, are they going to whistle-blow to the state if I haven\u2019t reported the breech?<\/p>\n<p>Madden: When the ONC starts making unannounced visits, that\u2019s going to start shaking people up to the point of realizing it\u2019s not just a joke.<\/p>\n<p>Online Tech: You\u2019ve expressed a lot of concerns with security within your organization but a majority of the patient records breeched involve a business associate. Do you worry about ePHI security with outside vendors and how does this compare with your in-house concerns:<\/p>\n<p>Madden: It\u2019s been eye opening to understand how much the SS# matters to everything we do. We spent the last month working on stopping giving out SS#s to anyone and explaining to 3rd party vendors that we don\u2019t have any rights to give out their SS#. We\u2019ve struggled to get the ambulance and labs to work with us without the SS$. I do worry a lot about outside vendors.<\/p>\n<p>Hoover: We want Dell to come in and do maintenance on the SAN we bought from them. THey have access to the data when they do that, but is Dell going to sign a BAA? Probably not.<\/p>\n<p>Madden: We already know that patients don\u2019t trust us because they are ready the same releases we are about breeches. If we\u2019re going to regain the trust of the patients, we have to get security figured out.<\/p>\n<p>Hoover: You have to realize that protecting the data is protecting the patient.<\/p>\n<hr \/>\n<p><span style=\"color: #000000;\"><strong>\u00a0<\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>I&#8217;m liveblogging from the iHT2 Health IT Summit conference in Fort Lauderdale from June 12-13, and\u00a0Online Tech will be sponsoring and exhibiting our\u00a0HIPAA hosting\u00a0solutions as well. The conference focuses on healthcare IT as the industry evolves, including the latest implications of ARRA (American Recovery and Reinvestment Act of 2009) and meaningful use changes and how it affects practices and hospitals. Other presentations will focus on electronic protected health information (ePHI) security, using EHR systems for health information exchange (HIE), healthcare delivery reform and other topics on improving patient care with data technology. I will be speaking on the panel\u00a0The hCloud at 30,000 Feet: Cloud Computing Solutions for Mobile Healthcare. The panel will discuss how\u00a0HIPAA cloud hosting\u00a0can offer a way for mobile devices to capture, store and process healthcare information securely, supporting a range of healthcare applications. We\u2019re off! iHT2 welcome from Barry Chaiken, MD, MPH Senior Fellow &amp; Health IT Chair iHT2 introducing Dr. Martin Harris. At the crossroads of a new transformation, a less predictable transformation than the move to DRGs. What\u2019s coming next is a major change in delivery system focused on managing costs by fundamentally changing the way we care for patients. 1. Talk about the challenges&#8230;<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"other_category":[],"class_list":["post-1946","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale | OTAVA<\/title>\n<meta name=\"description\" content=\"The conference focuses on healthcare IT as the industry evolves, including the latest implications of ARRA and meaningful use changes and how it affects practices and hospitals.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale\" \/>\n<meta property=\"og:description\" content=\"The conference focuses on healthcare IT as the industry evolves, including the latest implications of ARRA and meaningful use changes and how it affects practices and hospitals.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/\" \/>\n<meta property=\"og:site_name\" content=\"OTAVA\" \/>\n<meta property=\"article:published_time\" content=\"2012-06-12T00:00:00+00:00\" \/>\n<meta name=\"author\" content=\"Irma Brillantes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Irma Brillantes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"23 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/\"},\"author\":{\"name\":\"Irma Brillantes\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263\"},\"headline\":\"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale\",\"datePublished\":\"2012-06-12T00:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/\"},\"wordCount\":5329,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.otava.com\/#organization\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/\",\"url\":\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/\",\"name\":\"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale | OTAVA\",\"isPartOf\":{\"@id\":\"https:\/\/www.otava.com\/#website\"},\"datePublished\":\"2012-06-12T00:00:00+00:00\",\"description\":\"The conference focuses on healthcare IT as the industry evolves, including the latest implications of ARRA and meaningful use changes and how it affects practices and hospitals.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.otava.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.otava.com\/#website\",\"url\":\"https:\/\/www.otava.com\/\",\"name\":\"OTAVA\u00ae\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.otava.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.otava.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.otava.com\/#organization\",\"name\":\"OTAVA\u00ae\",\"url\":\"https:\/\/www.otava.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg\",\"contentUrl\":\"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg\",\"caption\":\"OTAVA\u00ae\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263\",\"name\":\"Irma Brillantes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"caption\":\"Irma Brillantes\"},\"url\":\"https:\/\/www.otava.com\/blog\/author\/ibrillantesotava-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale | OTAVA","description":"The conference focuses on healthcare IT as the industry evolves, including the latest implications of ARRA and meaningful use changes and how it affects practices and hospitals.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/","og_locale":"en_US","og_type":"article","og_title":"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale","og_description":"The conference focuses on healthcare IT as the industry evolves, including the latest implications of ARRA and meaningful use changes and how it affects practices and hospitals.","og_url":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/","og_site_name":"OTAVA","article_published_time":"2012-06-12T00:00:00+00:00","author":"Irma Brillantes","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Irma Brillantes","Est. reading time":"23 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/#article","isPartOf":{"@id":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/"},"author":{"name":"Irma Brillantes","@id":"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263"},"headline":"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale","datePublished":"2012-06-12T00:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/"},"wordCount":5329,"commentCount":0,"publisher":{"@id":"https:\/\/www.otava.com\/#organization"},"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/","url":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/","name":"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale | OTAVA","isPartOf":{"@id":"https:\/\/www.otava.com\/#website"},"datePublished":"2012-06-12T00:00:00+00:00","description":"The conference focuses on healthcare IT as the industry evolves, including the latest implications of ARRA and meaningful use changes and how it affects practices and hospitals.","breadcrumb":{"@id":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.otava.com\/blog\/liveblogging-from-the-iht2-health-it-summit-in-fort-lauderdale\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.otava.com\/"},{"@type":"ListItem","position":2,"name":"Liveblogging from the iHT2 Health IT Summit in Fort Lauderdale"}]},{"@type":"WebSite","@id":"https:\/\/www.otava.com\/#website","url":"https:\/\/www.otava.com\/","name":"OTAVA\u00ae","description":"","publisher":{"@id":"https:\/\/www.otava.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.otava.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.otava.com\/#organization","name":"OTAVA\u00ae","url":"https:\/\/www.otava.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.otava.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg","contentUrl":"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg","caption":"OTAVA\u00ae"},"image":{"@id":"https:\/\/www.otava.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263","name":"Irma Brillantes","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","caption":"Irma Brillantes"},"url":"https:\/\/www.otava.com\/blog\/author\/ibrillantesotava-com\/"}]}},"_links":{"self":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts\/1946","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/comments?post=1946"}],"version-history":[{"count":0,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts\/1946\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/media?parent=1946"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/categories?post=1946"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/tags?post=1946"},{"taxonomy":"other_category","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/other_category?post=1946"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}