Balancing Health Information Exchange and Privacy Governance from a Patient-Centred Connected Health and Telehealth Perspective

Craig E. Kuziemsky; Shashi B. Gogia; Mowafa Househ; Carolyn Petersen; Arindam Basu

doi:10.1055/s-0038-1641195

Yearbook of Medical Informatics, Table of Contents

CC BY-NC-ND 4.0 · Yearb Med Inform 2018; 27(01): 048-054
DOI: 10.1055/s-0038-1641195

Special Section: Between Access and Privacy: Challenges in Sharing Health Data

Working Group Contributions

Georg Thieme Verlag KG Stuttgart

Balancing Health Information Exchange and Privacy Governance from a Patient-Centred Connected Health and Telehealth Perspective

A Contribution from the IMIA Organizational and Social Issues and Telehealth Working Groups

Craig E. Kuziemsky

¹Telfer School of Management, University of Ottawa, Ottawa, Ontario, Canada

,

Shashi B. Gogia

²Society for Administration of Telemedicine and Healthcare Informatics, New Delhi, India

,

Mowafa Househ

³College of Public Health and Health Informatics, King Saud Bin Abdul Aziz University for Health Sciences, King Abdullah International Medical Research Center, Riyadh, Saudi Arabia

,

Carolyn Petersen

⁴Senior editor at Mayo Clinic, Rochester, Minnesota, United States

,

Arindam Basu

⁵University of Canterbury School of Health Sciences, Christchurch, New Zealand

› Author Affiliations

Abstract

Summary

Objectives: Connected healthcare is an essential part of patient-centred care delivery. Technology such as telehealth is a critical part of connected healthcare. However, exchanging health information brings the risk of privacy issues. To better manage privacy risks we first need to understand the different patterns of patient-centred care in order to tailor solutions to address privacy risks.

Methods: Drawing upon published literature, we develop a business model to enable patient-centred care via telehealth. The model identifies three patient-centred connected health patterns. We then use the patterns to analyse potential privacy risks and possible solutions from different types of telehealth delivery.

Results: Connected healthcare raises the risk of unwarranted access to health data and related invasion of privacy. However, the risk and extent of privacy issues differ according to the pattern of patient-centred care delivery and the type of particular challenge as they enable the highest degree of connectivity and thus the greatest potential for privacy breaches.

Conclusion: Privacy issues are a major concern in telehealth systems and patients, providers, and administrators need to be aware of these privacy issues and have guidance on how to manage them. This paper integrates patient-centred connected health care, telehealth, and privacy risks to provide an understanding of how risks vary across different patterns of patient-centred connected health and different types of telehealth delivery.

Keywords

Telehealth - privacy - patient-centred care - connected healthcare

Full Text

References

References
1 Kannampallil TG, Schauer GF, Cohen T, Patel VL. Considering complexity in healthcare systems. J Biomed Inform 2011; 44 (06) 943-7
2 Kuziemsky C. Decision-making in healthcare as a complex adaptive system. Healthc Manage Forum 2016; 29 (01) 4-7
3 Tulchinsky TH, Varavikova EA. 2 - Expanding The Concept of Public Health. The New Public Health. San Diego: Academic Press; 2000: 55-112
4 Porter ME. What Is Value in Health Care?. N Engl J Med 2010; 363 (26) 2477-81
5 Carroll N, Kuziemsky C, Richardson I. Software engineering for connected health (journal first session). Proceedings of the 2017 International Conference on Software and System Process; Paris, France. 3087675: ACM; 2017. p. 3-4.
6 Hosseini M, Jones J, Faiola A, Vreeman DJ, Wu H, Dixon BE. Reconciling disparate nformation in continuity of care documents: Piloting a system to consolidate structured clinical documents. J Biomed Inform 2017; 74: 123-9
7 Kuperman GJ, McGowan JJ. Potential unintended consequences of health information exchange. J Gen Intern Med 2013; 28 (12) 1663-6
8 Kuziemsky CE. Review of Social and Organizational Issues in Health Information Technology. Healthc Inform Res 2015; 21 (03) 152-60
9 Mackert M, Mabry-Flynn A, Champlin S, Donovan EE, Pounders K. Health Literacy and Health Information Technology Adoption: The Potential for a New Digital Divide. J Med Internet Res 2016; 18 (10) e264
10 Bodolica V, Spraggon M, Tofan G. A structuration framework for bridging the macro-micro divide in health-care governance. Health Expect 2016; 19 (04) 790-804
11 Carroll N. Key Success Factors for Smart and Connected Health Software Solutions. Computer 2016; 49 (11) 22-8
12 Toh N, Pawlovich J, Grzybowski S. Telehealth and patient-doctor relationships in rural and remote communities. Can Fam Physician 2016; 62 (12) 961-3
13 Gagnon M-P, Duplantie J, Fortin J-P, Landry R. Implementing telehealth to support medical practice in rural/remote regions: what are the conditions for success?. Implement Sci 2006; 1 (01) 18
14 Anwar M, Joshi J, Tan J. Anytime, anywhere access to secure, privacy-aware healthcare services: Issues, approaches and challenges. Health Policy Technol 2015; 4 (04) 299-311
15 Reinsmidt E, Schwab D, Yang L. , editors. Securing a Connected Mobile System for Healthcare. 2016 IEEE 17th International Symposium on High Assurance Systems Engineering (HASE); 2016 7-9 Jan. 2016
16 Li J, Robertson T. Physical space and information space: studies of collaboration in distributed multi-disciplinary medical team meetings. Behav Inf Technol 2011; 30 (04) 443-54
17 Heart T, Ben-Assuli O, Shabtai I. A review of PHR, EMR and EHR integration: A more personalized healthcare and public health policy. Health Policy Technol 2017; 6 (01) 20-5
18 Weber-Jahnke JH, Price M, Williams J. , editors. Software engineering in health care: Is it really different?. And how to gain impact. 5th International Workshop on Software Engineering in Health Care (SEHC); 2013 20-21 May 2013
19 Berwick DM. What ‘Patient-Centered’ Should Mean: Confessions Of An Extremist. Health Aff (Millwood) 2009; 28 (04) w555-w65
20 Institute of Medicine Committee on Quality of Health Care in A. Crossing the Quality Chasm: A New Health System for the 21st Century. Washington (DC): National Academies Press (US) Copyright 2001 by the National Academy of Sciences. All rights reserved; 2001
21 Perrotta PL, Karcher DS. Validating Laboratory Results in Electronic Health Records: A College of American Pathologists Q-Probes Study. Arch Pathol Lab Med 2016; 140 (09) 926-31
22 Ding H, Fatehi F, Russell AW, Karunanithi M, Menon A, Bird D. , et al. User Experience of an Innovative Mobile Health Program toAssist in Insulin Dose Adjustment: Outcomes of a Proof-of-Concept Trial. Telemed J E Health 2017 Dec 20
23 Esch T, Mejilla R, Anselmo M, Podtschaske B, Delbanco T, Walker J. Engaging patients through open notes: an evaluation using mixed methods. BMJ Open 2016 6(1).
24 Kruse SC, Argueta AD, Lopez L, Nair A. Patient and Provider Attitudes Toward the Use of Patient Portals for the Management of Chronic Disease: A Systematic Review. J Med Internet Res 2015; e40
25 Lai AM, Hsueh PS, Choi YK, Austin RR. Present and Future Trends in Consumer Health Informatics and Patient-Generated Health Data. Yearb Med Inform 2017; 26 (01) 152-9
26 Bush RA, Connelly CD, Fuller M, Perez A. Implementation of the Integrated Electronic Patient Portal in the Pediatric Population: A Systematic Review. Telemed J E Health 2015
27 Hattink B, Droes R-M, Sikkes S, Oostra E, Lemstra AW. Evaluation of the Digital Alzheimer Center: Testing Usability and Usefulness of an Online Portal for Patients with Dementia and Their Carers. JMIR Res Protoc 2016; 5 (03) e144
28 Standardization IOf. ISO/IEC 2382-8:1998 Information technology -- Vocabulary -- Part 8: Security. 1998
29 Standardization IOf. ISO/IEC 27000:2009 Information technology -- Security techniques -- Information security management systems -- Overview and vocabulary; 2009
30 Standardization IOf. IEC 62304:2006. Medical device software—Software life cycle processes; 2006
31 Standardization IOf. IEC 80001-1:2010 - Application of risk management for IT-networks incorporating medical devices -- Part 1: Roles, responsibilities and activities; 2010
32 Standardization IOf. IEC 82304-1:2016 - Health software -- Part 1: General requirements for product safety; 2016
33 Standardization IOf. ISO 14971:2007 - Medical devices -- Application of risk management to medical devices; 2007
34 Standardization IOf. ISO 27799:2016 - Health informatics -- Information security management in health using ISO/IEC 27002; 2016.
35 Standardization IOf. ISO 25237:2017 Health informatics -- Pseudonymization; 2017
36 Centre PENftIDR. Protecting medical information in eHealth projects London School of Economics and PoliticalScience; 2010
37 Mettler T, Eurich M. , editors. What is the business model behind e-health? A pattern-based approach to sustainable profit. ECIS 2012 - Proceedings of the 20th European Conference on Information Systems; 2012
38 Townsend A, Leese J, Adam P, McDonald M, Li LC, Kerr S. , et al. eHealth, Participatory Medicine, and Ethical Care: A Focus Group Study of Patients' and Health Care Providers' Use of Health-Related Internet Information. J Med Internet Res 2015; 17 (06) e155
39 Ozkaynak M, Brennan PF, Hanauer DA, Johnson S, Aarts J, Zheng K. , et al. Patient-centered care requires a patient-oriented workflow model. J Am Med Inform Assoc 2013; 20 (e1): e14-6
40 Rutenberg C, Oberle K. Ethics in Telehealth Nursing Practice. Home Health Care Manag Pract 2008; 20 (04) 342-8
41 Canada H. The Health Canada Policy Toolkit for Public Involvement in Decision Making. Corporate Consultation Secretariat, Health Policy and Communications Branch; 2000. Report No.: 0-662-29243-X
42 Society HIaMS. HIMSS Patient Engagement Framework; 2014.
43 Kvedar J, Coye MJ, Everett W. Connected health: a review of technologies and strategies to improve patient care with telemedicine and telehealth. Health Aff (Millwood) 2014; 33 (02) 194-9
44 Gogia SB, Maeder A, Mars M, Hartvigsen G, Basu A, Abbott P. Unintended Consequences of Tele Health and their Possible Solutions: Contribution of the IMIA Working Group on Telehealth. Yearb Med Inform 2016; (01) 41-6
45 Fiksdal AS, Kumbamu A, Jadhav AS, Cocos C, Nelsen LA, Pathak J. , et al. Evaluating the process of online health information searching: a qualitative approach to exploring consumer perspectives. J Med Internet Res 2014; 16 (10) e224
46 Demiris G, Oliver DP, Courtney KL. Ethical considerations for the utilization of tele-health technologies in home and hospice care by the nursing profession. Nurs Adm Q 2006; 30 (01) 56-66
47 Denecke K, Bamidis P, Bond C, Gabarron E, Househ M, Lau AYS. , et al. Ethical Issues of Social Media Usage in Healthcare. Yearb Med Inform 2015; 10 (01) 137-47
48 Asiri E, Asiri H, Househ M. Exploring the concepts of privacy and the sharing of sensitive health information. Stud Health Technol Inform 2014; 202: 161-4
49 Househ M. Sharing sensitive personal health information through Facebook: the unintended consequences. Studi Health Technol Inform 2011; 169: 616-20
50 Househ M. Re-examining perceptions on healthcare privacy: Moving from a punitive model to an awareness model. HEALTHINF 2012 - Proceedings of the International Conference on Health Informatics; 2012
51 Asiri E, Khalifa M, Shabir SA, Hossain MN, Iqbal U, Househ M. Sharing sensitive health information through social media in the Arab world. Int J Qual Health Care 2017; 29 (01) 68-74