New advancements in health record technology raise questions about privacy and security. Consumers are worried that someone might be able to hack into health systems to gain access to private health information.

Federal and state privacy laws such as HIPAA are designed to protect both paper and electronic health records. Systems must be designed to meet these stringent requirements. Any certified electronic system must be password protected, and all files need to be encrypted.

Unlike with paper health records, a log is created every time someone views an electronic health record. In addition, access to certain parts of health records can be regulated by password and system design.

Just like paper records, EHR must comply with the federal Health Insurance Portability and Accountability Act (HIPAA) as well as other state and federal laws on privacy. Patient privacy security is built into all systems. Unlike paper records, electronic health records can be encoded so that only authorized individuals can view them.

System developers and governmental agencies are working to protect patient security. EHR systems use state-of-the-art computer programs to block hackers and those who might want access to private information without permission. Patients can rest assured their records are secure.

Privacy and Security Principles

Federal and state privacy laws, such as HIPAA, are designed to protect both paper and electronic health records. Systems must be designed to meet these stringent requirements:

• Individuals should know how their personally identifiable health information may be used and who has access to it.
• Individuals should have control over whether and how their personally identifiable health information is shared.
• Systems must protect the integrity, privacy, security and confidentiality of an individual’s information.
• The governance and administration of electronic health information exchanges and networks should be transparent and publicly accountable.

Contact:

Patricia Ruddick, Project Director of West Virginia Health Information Security and Privacy Collaboration (HISPC)

Phone: 304-346-9864, ext. 4211
Toll Free: 800-642-8686, ext. 4211
Fax: 304-342-5527

Source: http://www.ehealthwv.org/