Question

2. Health Information Exchange Case Study Lynn has just been hired as the Director of Data Services at Cure-All Hospital. In this role she is expected to prepare the organization to meet Meaningful Use criteria for health information exchange. She has been tasked with preparing a report for the hospital administrators regarding the needs of the organization, recommendations, and next steps related to HIE. a. What are some of the questions Lynn needs to ask to begin understanding the state of HIE at her organization? b. Discuss the information that needs to be in Lynn’s report, including models for HIE, technical requirements, methods to assure privacy and security, policies and procedures that need to be developed, and the role of patient engagement.

Answer 1

Ans:-

The following question should be asked by Lynn:-

• What are the different types of data or information which are required to be exchanged?
• What process will be used in defining the data ownership?
• What plan will be adopted for information or data communication and interaction with the consumer and various patients?
• What is the process of authorization or authentication of data or information access?

Answer:- In my opinion, a centralized model should be used for the report of Lynn for HIE. The centralized model is quite capable of storing the different types of records of various patients in a single database. In comparison o federated model, this model will be able to store the information quite easily. In case of the federated model, there will be a requirement of having sync between the various networks or virtual private networks and it can also require the collaborating from different IT department members. With this type of model or anything which includes the medical report, the main focus of the report should be on security. The report of Lynn should include PKI security. This is the security model which is used to authenticate the system with a specific username and password or a security token s used for accessing the system. Under the guidelines of HIPAA, all PHI data will require the encryption to make sure the proper compliance. In fact, the report can also give place to accurate patient identification use case scenario which explains the significance of having the correct patient identification in order to capture the identity of the patient accurately. The role of patient engagement should also be mentioned in the report which is mainly a strategy which deals with the different actions to be taken by the patients and healthcare facilitators for enabling an informed decision.