Handbook of Information Security: Threats, Vulnerabilities, Prevention, Detection, and Management, Volume 3

Medical Records Security

Norm and M. Martel, Medical Technology Research Corp.

Introduction

The Diversity of Health Data

The Paradox of Health Data

The Value of Health Data in an Information Society

Health Records

Traditional Paper Record: Pros and Cons

Structure and Functions of the Electronic Health Record

Electronic Health Record: Pros and Cons

Future Direction: Portable Health Record

Electronic Health Record Standards Bodies

ANSI X12N

Health Level Seven (HL7)

Security Concerns

Who Has Access to Health Records?

Identifying Threats to the Security of the EHR

Internal Threats

External Threats

The Security Solution

The Virtual Policy Notebook

Security Step By Step

Summary and Recommendations: Service Providers

Recommendations: Patients

Regulations, Policies, and Organizations

United States National Regulations (HIPAA)

Standards Organizations

Oversight Bodies

Grassroots Privacy Groups

Patient Advocacy Groups

Glossary

Cross References

References

Further Resources

INTRODUCTION

The patient health record is a sensitive collection of information. It is meant to serve in part as a reference for medical providers but as more records become electronic, the patient health record creates potential liability concerns for those involved with its use and safe-keeping.

According to the Health Information Portability and Accountability Act (HIPAA), security and privacy legislation passed by the United States Department of Health and Human Services (HHS), the keepers of health records are required ...