Electronic Health Record (EHR) applications are digital versions of paper-based patient's health information. They are increasingly adopted to improved quality in healthcare, such as convenient access to histories of patient medication and clinic visits, easier follow up of patient treatment plans, and precise medical decision-making process. EHR applications are guided by measures of the Health Insurance Portability and Accountability Act (HIPAA) to ensure confidentiality, integrity, and availability. Furthermore, Office of the National Coordinator (ONC) for Health Information Technology (HIT) certification criteria for usability of EHRs. A compliance checking approach attempts to identify whether or not an adopted EHR application meets the security and privacy criteria. There is no study in the literature to understand whether traditional static code analysis-based vulnerability discovered can assist in compliance checking of regulatory requirements of HIPAA and ONC. This paper attempts to address this issue. We identify security and privacy requirements for HIPAA technical requirements, and identify a subset of ONC criteria related to security and privacy, and then evaluate EHR applications for security vulnerabilities. Finally propose mitigation of security issues towards better compliance and to help practitioners reuse open source tools towards certification compliance.

Compliance Checking of Open Source EHR Applications for HIPAA and ONC Security and Privacy Requirements

Analyzing the technology of acceptance model of Ghanaian crowdfunding stakeholders

Electronic Health Record (EHR) applications are digital versions of paper-based patient's health information. They are increasingly adopted to improved quality in healthcare, such as convenient access to histories of patient medication and clinic visits, easier follow up of patient treatment plans, and precise medical decision-making process. EHR applications are guided by measures of the Health Insurance Portability and Accountability Act (HIPAA) to ensure confidentiality, integrity, and availability. Furthermore, Office of the National Coordinator (ONC) for Health Information Technology certification criteria, which focuses on usability aspects of EHRs, have overlapping security and privacy requirements. A compliance checking approach attempts to identify whether or not an adopted EHR application meets the security and privacy criteria. Among others, static code analysis is a common approach to discover vulnerabilities in software applications. However, there is no study in the literature to know whether traditional static code analysis-based vulnerability discovered can assist in compliance checking of regulatory requirements of HIPAA and ONC. The aim of this thesis is to (i) Identify key security requirements of HIPAA and ONC framework; (ii) Evaluate a number of open-source EHR applications for security vulnerabilities using open source scanner tools; (iii) Compare and contrast security vulnerabilities identified by scanner tools with HIPAA and ONC security requirements; and (iv) Propose an approach to secure personal health identifier information within EHR applications.

/pdf/compliance-of-open-source-ehr-applications-with-hipaa-and-50th9ofr51.pdf

Compliance of Open Source EHR Applications with HIPAA and ONC Security and Privacy Requirements

Electronic health record (EHR) applications are digital versions of paper-based patients health information. EHR applications are increasingly being adopted in many countries. They have resulted in improved quality in healthcare, convenient access to histories of patient medication and clinic visits, easier follow up of patient treatment plans, and precise medical decision-making process by doctors. EHR applications are guided by measures of the Health Insurance Portability and Accountability Act (HIPAA) to ensure confidentiality, integrity, and availability. However, there have been reported breaches of protected health identifier (PHI) data stored by EHR applications. In many reported breaches, improper use of EHRs has resulted in disclosure of patient’s protected health information. The goal of this chapter is to (1) provide an overview of HIPAA security and privacy requirements; (2) summarize recent literature works related to complying with HIPAA security and privacy requirements; (3) map some of the existing vulnerabilities with HIPAA security rules. Compliance of Electronic Health Record Applications With HIPAA Security and Privacy Requirements

Compliance of Electronic Health Record Applications With HIPAA Security and Privacy Requirements

Electronic Health Records sharing is extremely healthful for medical data analysis while preserving of patients' privacy also play a major role. While cloud computing and the emergence of big data phenomena presents significant opportunity for health care, they also elicit privacy concerns during the sharing of data for analysis and research. The privacy of the patients are at risk while using the electronic healthcare system for the submission of healthcare data through the internet for analysis. The leakage of personal health information can easily be compromise for medical insurance fraud or medical identity theft. These concerns indicate the need to ensure privacy protection when collecting medical data for analyzing or publishing. This study presents a mathematical model for identity based encryption protocol for privacy preservation of the patient during the collection of patient health data for analysis. This has become an integral part of human daily life in which health data are submitted for analysis. The model delinks the patient's identity from the examined data during data submission for the preservation of the patient's privacy.

Armah MaryMargaret

Papers

A Mathematical Model for a Hybrid System Framework for Privacy Preservation of Patient Health Records