Bloomberg BNA's Health IT Law & Industry Report brings you concise, comprehensive, and timely news and analysis of the regulatory, legal, and compliance issues surrounding our nation’s...
By Kendra Casey Plank
A majority of physicians use the text messaging capabilities on their so-called smart phones to exchange information about patients with other health care providers, but doing so could be a violation of federal privacy and security rules, a health information technology firm executive said Oct. 17.
More than 70 percent of physicians use text messaging to communicate with other doctors about patients because the technology provides the ability to send and receive real-time information without actually calling other providers or relying on e-mail, said Brad Brooks, president and cofounder of TigerText, a company that provides secure text messaging capabilities to health care organizations and other industries.
However, he cautioned, while text messaging among health care providers presents a “huge opportunity” to improve communication among physicians and potentially improve the cost and quality of care, there are big compliance risks under the Health Insurance Portability and Accountability Act Privacy and Security Rules if messages contain protected health information and are not properly safeguarded.
Speaking during a webinar hosted by his company, Brooks said that text message conversations often start out as casual, non-work related messages, but eventually evolve into work-related messaging about patient care. While text messaging among physicians and other providers is efficient and convenient—more so than some traditional communication methods among provider—it is not always HIPAA-compliant.
Brooks said that as text messaging increasingly becomes a priority channel for communicating among health care providers, the challenge will be to “wrap” the technology in a secure, encrypted, HIPAA-compliant layer—a service his company provides to health care organizations.
Adam Greene, an attorney with Davis Wright Tremaine LLP, explained to the webinar audience that the HIPAA Security Rule applies to all electronic protected health information and that the broad definition of PHI could apply to data contained in text messages.
For example, a text message between two treating physicians could be considered containing PHI if it includes admission or discharge date information that could lead to the identification of an individual patient. Similarly, a message between a doctor and patient could be considered PHI, and thus covered by HIPAA, if it indicated a treatment relationship, Green said.
Prior to joining Davis Wright Tremaine, Greene was with the Department of Health and Human Services Office for Civil Rights, which is responsible for HIPAA rules.
Greene recommended that health care organizations include providers' text messaging capabilities and text message content in their HIPAA risk analysis activities to determine where vulnerabilities exist. Such risk analysis should consider the security of mobile devices used for text messaging and how those devices are disposed of when they are no longer used by physicians.
James French, executive director of the Cone Health Hospitalist Program in Greensboro, N.C., said that text messaging among physicians in his multi-hospital organization has provided a better platform for communication than traditional methods that largely relied on paging systems and answering services.
He said that HIPAA concerns typically are not foremost on the minds of doctors and other providers, and that providers instead are concerned with improving workflow.
However, French said that when Cone Health sought to replace its cumbersome communication network among providers with a text messaging solution, it chose one provided by TigerText that was HIPAA-compliant and allowed physicians, nurses, and other providers within the health care network to share patient information in a safe and secure manner.
French said that text messaging among providers at Cone Health is contained in a closed, secure network and that messages are funneled through providers' smart phones.
In addition, he said the text message solution was cost-effective compared to other options, including the legacy pager system that had been in place previously.
TigerText's Brooks said the network provides end-to-end encrypted messaging, ensures messages have a limited lifespan, and allows the health care organization to audit messaging.
All Bloomberg BNA treatises are available on standing order, which ensures you will always receive the most current edition of the book or supplement of the title you have ordered from Bloomberg BNA’s book division. As soon as a new supplement or edition is published (usually annually) for a title you’ve previously purchased and requested to be placed on standing order, we’ll ship it to you to review for 30 days without any obligation. During this period, you can either (a) honor the invoice and receive a 5% discount (in addition to any other discounts you may qualify for) off the then-current price of the update, plus shipping and handling or (b) return the book(s), in which case, your invoice will be cancelled upon receipt of the book(s). Call us for a prepaid UPS label for your return. It’s as simple and easy as that. Most importantly, standing orders mean you will never have to worry about the timeliness of the information you’re relying on. And, you may discontinue standing orders at any time by contacting us at 1.800.960.1220 or by sending an email to firstname.lastname@example.org.
Put me on standing order at a 5% discount off list price of all future updates, in addition to any other discounts I may quality for. (Returnable within 30 days.)
Notify me when updates are available (No standing order will be created).
This Bloomberg BNA report is available on standing order, which ensures you will all receive the latest edition. This report is updated annually and we will send you the latest edition once it has been published. By signing up for standing order you will never have to worry about the timeliness of the information you need. And, you may discontinue standing orders at any time by contacting us at 1.800.372.1033, option 5, or by sending us an email to email@example.com.
Put me on standing order
Notify me when new releases are available (no standing order will be created)