Survey: Half of Americans Concerned That Electronic Health Records Will Negatively Impact Privacy

CDW Healthcare, part of the public sector subsidiary of CDW LLC, recently announced the results of a national survey on patient perceptions of electronic health records (EHRs) and the security of personal health information (PHI).

The report, “Elevated Heart Rates:  EHR and IT Security,” found that while patients trust their doctors to protect their information, 49 percent believe that EHRs will have a negative impact on the privacy of their PHI and health data.

As healthcare organizations transition to EHRs, they will be responsible for maintaining and protecting a significant amount of personal data electronically.  According to the survey, patients not only require that PHI be held securely, but also believe that healthcare organizations are responsible for protecting financial information (86 percent), personally identifiable information (93 percent) and any information provided about a patient’s family (94 percent).

“The new era of EHR brings with it a whole new set of requirements for healthcare organizations -- particularly in the area of IT security,” said Bob Rossi, vice president of CDW Healthcare.  “Digital files are not inherently less secure than paper files, but they do require a completely different set of technologies, processes and internal policies for protection.”

In fact, recent research from CDW Healthcare indicates that many physician practices have not yet prioritized IT security.  According to CDW Healthcare’s Physician Practice EHR Price Tag, 30 percent of physician practices report that they lack basic anti-virus software and 34 percent report that they do not use network firewalls.  Both elements are considered basic steps in developing a minimum IT security profile.

According to the U.S. Department of Health and Human Services, patients should expect significant benefits from the PHI included in EHRs, including:

  • The reduction of adverse drug events, medical errors and redundant tests and procedures when used in conjunction with e-prescribing.
  • The regular use of preventive services such as health screenings, which can help reduce health care costs.
  • Improved communication between patients and providers, giving patients better access to timely information.
  • The reduction of office waiting time by improving office efficiency.

Both the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and the Health Information Technology for Economic and Clinical Health (HITECH) Act set standards for protecting PHI and create penalties for any violations.  Beyond those formal penalties, however, patients may respond to any breach of trust with a changed business relationship. 

For survey respondents who were notified of a breach of their personal data from any business or organization in the past, 33 percent changed their relationship with the offending organization, including 9 percent that severed the relationship, 12 percent that reduced spending and 12 percent that no longer trust that organization.

Ultimately, survey respondents put responsibility for the protection of their information directly on physician practices.  When asked who they hold primarily responsible for the privacy and security of their health information, 84 percent of respondents cited either a staff member at the doctors’ office by role, or the medical practice as a whole.

“For physician practices, IT security must be a primary part of any EHR,” said Rossi.  “Right now, patients trust their doctors more than anyone else to protect their personal information.  But like any relationship based upon trust, even one breach can fundamentally change the dynamic.”

CDW Healthcare conducted a survey of 1,000 respondents across the United States from January 24 to January 31.  The age and gender distribution of the survey sample match that of the overall U.S. population.  All survey respondents had been to both a doctors’ office and hospital/outpatient clinic in the previous 18 months.

A full copy of CDW Healthcare’s Elevated Heart Rates:  EHR and IT Security Report is available at http://www.cdw.com/HeartRates

 

Featured

  • The Need for a Comprehensive Strategy Addressing Cybersecurity and Quantum Technology

    The Need for a Comprehensive Strategy Addressing Cybersecurity and Quantum Technology

    Over the past two years, the Biden Administration has taken a series of steps centered on quantum and cybersecurity. Read Now

  • IoT Saves the Day

    IoT Saves the Day

    Today, creating a safe environment across schools, hotels, office buildings, housing complexes and other facilities has become a necessity. There are so many dangers lurking in buildings of all sizes and shapes from fire hazards, vaping issues, chemical/air quality issues, intruders and so much more. Read Now

  • One Pane, Less Pain

    One Pane, Less Pain

    Just because a solution is built on an open-standards platform doesn’t ensure that all the vendors’ systems will work together as promised. Some features may not be supported, or not supported to their fullest potential. Read Now

  • Revamping Wrigley Field

    Revamping Wrigley Field

    When talking about baseball in the United States, it’s hard not to think of the Chicago Cubs and Wrigley Field. With a history spanning more than 100 years, the Chicago Cubs are one of the most recognized teams in professional sports. Read Now

Featured Cybersecurity

Webinars

New Products

  • Unique Oversized ID Card Printer

    Unique Oversized ID Card Printer

    Idesco Corp. is announcing its card printer – the XCR100 2.0 printer- that allows customers to personalize oversized ID cards on demand. The printer is ideal for assisting healthcare organizations find the right badging solution. As healthcare facilities continue to combat the spread of COVID-19, issuing oversized ID cards has helped identify staff clearly while adding an extra layer of security. The XCR100 2.0 printer is the only dye-sublimation printer on the market that can personalize CR100 cards (3.88" x 2.63"). The cards that are 42% larger than the standard credit card size. The printer can produce up to 180 full cards per hour in color, and up to 1,400 cards per hour in monochrome. An optional flipper is available to print dual-sided badges in one pass. Contactless encoding comes as an option to help healthcare facilities produce secure access badges on demand and the card printer features a 2-year warranty. 3

  • VideoEdge 2U High Capacity Network Video Recorder

    VideoEdge 2U High Capacity Network Video Recorder

    Johnson Controls announces a powerful recording solution to meet demanding requirements with its VideoEdge 2U High Capacity Network Video Recorder. This solution combines the powerful capabilities of victor with the intelligence of VideoEdge NVRs, fueled by Tyco Artificial Intelligence, for video management that provides actionable insights to save time, money and lives. 3

  • PDK IO Access Control Software

    PDK.IO Access Control Software

    ProdataKey now allows for "custom fields" within the interface of its pdk.io software. Custom fields increase PDK's solutions' overall functionality by allowing administrators to include a wide range of pertinent data associated with each user. 3