New England Journal of Medicine: Accelerating the Use of Electronic Health Records in Physician Practices
Steven Shea, M.D., and George Hripcsak, M.D.
North Shore Hospital System on Long Island in New York recently announced that it will pay an incentive of up to $40,000 to each physician in its network who adopts its electronic health record (EHR) — paying 50% of the cost to physicians who install an EHR that communicates with the hospital and 85% of the cost if the physician also shares de-identified data on the quality of care.1 This payment would apparently come on top of the $44,000 incentive that the American Recovery and Reinvestment Act of 2009 (ARRA) has authorized Medicare to pay each eligible health care professional who uses certified EHRs in a meaningful manner. “Meaningful use” is still being defined, but the overarching goal is to improve the population’s health through a transformed health care delivery system with the use of EHRs to improve local processes, foster quality measurement, and increase communication. North Shore’s announcement is a sign of the continuing acceleration of EHR adoption by physicians’ offices2 and hospitals.3 Support for information systems is exempted from the Stark amendment to the Omnibus Budget Reconciliation Act of 1989, which prohibits hospitals from offering physicians incentives for providing referrals or admissions. The exemption for information technology acknowledges that the likelihood of additional referrals may be part of the motivation for hospitals to form closer links with community physicians through EHRs. Another benefit to hospitals from supporting the use of EHRs by physicians who are linked to them by geography, academic appointment, or practice pattern is the enhanced ability to manage the quality and outcomes of care. For example, if financial penalties and incentives are to be imposed on the basis of rates of readmission, then the more closely aligned a hospital is with the physicians who provide its patients’ postdischarge care, the greater the benefits it will reap.
The cost–benefit calculus behind physicians’ adoption of EHRs is also changing. Financial incentives are one element. The prices of EHRs have come down as the volume of software licenses being sold has increased. A second factor is that the time investment associated with data entry, which has long represented a major obstacle to adoption, has been reduced as systems have improved in performance and become more flexible with regard to individual preferences for data entry, including free text, templated data entry, dictation, speech recognition, and freehand graphic input. System usability has also improved, thanks to competition and customers’ resistance to cumbersome products. Third, the addition to EHR systems of capabilities beyond documentation, including coding functions, the ability to create and export bills, the automated creation of consultation and patient letters, electronic prescribing, and task tracking, now translates into greater time savings for users. And a fourth factor is the increasing emphasis on quality of care, since payment for quality requires documentation of quality.
Other trends favoring EHR adoption include the emerging consensus that alignment of hospitals and physicians is necessary to provide higher-quality care and service for patients as they move among providers and traverse levels of care, as well as the recognition that information transfer is an important component of care given by multiple providers. Younger physicians — and some older ones — are more comfortable and function more efficiently and effectively in an electronic-information environment than in a world of paper records.
Some obstacles persist, of course. EHR products remain expensive to install and maintain — cost issues that should not be underestimated. The decision by North Shore to provide a financial incentive as well as the software license suggests that many physicians still do not believe that current-generation EHRs will offer a return on investment directly to physicians.
Wide dissemination of EHRs requires public trust. The sharing of patients’ information — which has been common practice for decades for the purposes of billing, treatment, and public health — has come into the public eye because of the risks associated with vastly expanded sharing and the newfound ability to easily and quickly transfer many patient records simultaneously. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) created a framework for defining privacy, breaches of privacy, and penalties. The ARRA further defined privacy breaches and increased the penalties for them. One of the challenges to setting policy in this area is that electronic privacy and its relative importance are still being defined. The capability of providing a secure electronic environment for patient data — like the capability of providing reliable data storage — is beyond the reach of most individual physician practices. Truly secure and reliable EHRs are currently feasible only for larger organizations with centrally supported technological capabilities. This may be one reason why the rate of adoption has been much higher among large practices (see graph).

Rates of Adoption of Electronic Health Records According to Practice Size.
The percentage shown above each bar is the proportion of physicians who work in a practice of the given size. The green portion of each bar represents the percentage of physicians in a practice of a given size who have adopted at least basic electronic health records (EHRs), and the yellow portion represents the percentage of physicians who have not adopted EHRs.2 For each practice size, the percentage of physicians who have not adopted EHRs relative to the total number of physicians in practice is shown at the bottom. Physicians in the smallest practices account for more than 50% of those who have not yet adopted EHRs, whereas physicians in the largest practices account for only about 3%.
EHRs that are interoperable can connect not only to each other but also to common services. Sharing information allows local care providers to coordinate the provision of care — for example, by avoiding contraindicated medications and duplicative testing. It supports public health goals by facilitating population-level monitoring, and it supports sharing of information about the care process itself, including quality measures. The Department of Veterans Affairs’ VistA system is the best known large-scale example of these capabilities.
Exchanging information requires that EHRs share common standards. Work is ongoing at organizations for standards development and facilitation such as Health Level Seven (HL7), which have been providing practical standards for decades. The ultimate in interoperability would be a single EHR for all health care providers, but the disadvantage of this model would be a loss of competition among vendors — a factor that has presumably contributed to increased usability and lower cost. Moreover, interoperability among disparate EHRs may actually increase competition and innovation if it makes it easier for health care providers to change vendors by populating a new system with an old system’s data. Innovation is not predicated on competition alone, however. Increasing funding for EHR research and development — as opposed to implementation and evaluation — may produce evolutionary and revolutionary improvements in EHRs.
The next major step in EHR deployment is a concrete definition of the requirements — in terms of meaningful use, information sharing, and reporting of quality measures — for physicians to receive ARRA incentives. The federal Health Information Technology Policy Committee has submitted recommendations4 to the National Coordinator of Health Information Technology; the Centers for Medicare and Medicaid Services published draft rules on December 30, 2009, and this publication will be followed by a period for public comment before a final set of rules is issued. Clarity on federal incentives for physicians to adopt EHRs will allow these incentives to be aligned with those offered by state governments, provider organizations, and commercial payers. Poorly aligned incentives may have unintended consequences, such as increases in health disparities or incentives for specialty-specific silo systems.
Electronic interaction between hospitals and physicians is just the beginning. Patients are also interacting electronically with the health care system, exchanging information with providers through secure patient portals and patient-based health records. More active transactions, such as remote case management by nurses for patients with chronic diseases,5 may occur through telemedicine. Some possibilities that will be advanced by physicians’ adoption of EHRs include the use of cell-phone technology for messaging, the capability of moving data from home monitoring devices to cell phones and upstream to EHRs, yet-to-be developed software capabilities that will allow EHRs to manage these uploaded data streams within clinical workflows, and the effective provision of out-of-office care.
Financial and other disclosures provided by the authors are available with the full text of this article at NEJM.org.
Source Information
From Columbia University Medical Center, New York.
References
- Lohr S. E-records get a big endorsement. New York Times. September 28, 2009.
- DesRoches CM, Campbell EG, Sao SR, et al. Electronic health records in ambulatory care — a national survey of physicians. N Engl J Med 2008;359:50–60. [Free Full Text]
- Jha AK, DesRoches CM, Campbell EG, et al. Use of electronic health records in U.S. hospitals. N Engl J Med 2009;360:1628–1638. [Free Full Text]
- Health IT Policy Council recommendations to National Coordinator for Defining Meaningful Use: final — August 2009. Washington, DC: Department of Health & Human Services, 2009. (Accessed December 29, 2009, at http://healthit.hhs.gov/portal/server.pt/gateway/PTARGS_0_10741_888532_0_0_18/FINAL%20MU%20RECOMMENDATIONS%20TABLE.pdf.)
- Shea S, Weinstock RS, Teresi J, et al. A randomized trial comparing telemedicine case management with usual care in older, ethnically diverse, medically underserved patients with diabetes mellitus: 5 year results of the IDEATel Study. J Am Med Inform Assoc 2009;16:446–456. [CrossRef][Medline]
Compliments of Fileman Research
Read MoreMaintenance and retention of electronic records
| Maintenance and retention of electronic records |
| Written by Atty. Deo D. Saludario / Tax Law for Business |
| Wednesday, 20 January 2010 20:52 |
| With the ever-changing technology that has become a major consideration in doing business, the Bureau of Internal Revenue (BIR) recently issued Revenue Regulation (RR) 09–2009, dated December 23, 2009, for the maintenance, retention and submission of electronic records for taxpayers, in general, and the mandatory adoption of computerized accounting system (CAS) for large taxpayers.
Among the salient features of the regulations are: A. General requirements in keeping electronic records. A taxpayer must maintain all records that are necessary for the determination of his correct tax liability. These records must be made available on request by the Commissioner of Internal Revenue or its authorized representatives. If a taxpayer retains records in both electronic and hard-copy formats, the taxpayer shall make available to the BIR such records in electronic format upon request of the BIR. The taxpayer may demonstrate tax compliance with traditional hard-copy documents or reproductions, whether or not such taxpayer has retained or has the capability to retain records on electronic or other storage media, but he/it shall not be relieved of the responsibility from his/its obligation to comply with the requirement to make available records in electronic format. B. Adoption of CAS for large taxpayers. All large taxpayers classified under RR 01–98 are now required to adopt CAS in maintaining their books of accounts and accounting records. C. Maintenance and location of electronic records. The taxpayer’s computer hardware or software should accommodate the extraction and conversion of retained records in accordance with existing BIR regulations. Electronic records must be kept at the taxpayer’s place of business in the Philippines or other places designated by the Commissioner of Internal Revenue. Records kept outside the Philippines and accessed electronically from the Philippines are not considered to be records in the Philippines. However, the BIR may accept a copy of such records if made available in the Philippines and submitted to the BIR in an electronically readable and usable format, and contain adequate details to support the taxpayer’s tax returns. D. Retention of hard-copy records and source documents. Taxpayers must retain hard-copy records that are created or received in the ordinary course of business, unless such hard-copy records are allowed to be retained, using alternative storage media such as microfilm, microfiche, etc. Taxpayers keeping electronic records must also retain source documents. A source document includes items such as sales invoices, cash register receipts, formal written contracts, credit card receipts, delivery slips, deposit slips, work orders, dockets, checks, bank statements, tax returns, and could also include email, and other general correspondence where relevant for tax purposes. E. Alternative Storage Media. Taxpayers may, however, convert hard-copy documents received or produced in the normal course of business and required to be retained under this regulation to microfilm, microfiche or other storage-only imaging systems and may discard the original hard-copy documents, provided the conditions hereunder enumerated are met. However, a prior permit from the BIR is required before use of microfilm, microfiche and other storage-only imaging systems. It must be noted, however, that these regulations are for BIR purposes only and do not extend to other government agencies that may require other legal format/requirements for documentation purposes. Thus, Section 9.1 of these regulations specifically provides that “the provisions of this regulation do not relieve taxpayers of the responsibility to retain hard– copy records that are created or received in the ordinary course of business, as required by existing law and regulations.” Specifically, Republic Act 8792, or the Electronic Commerce Act of 2000, defines “electronic-data message” and “electronic document.” As such, information shall not be denied validity or enforceability solely on the ground that it is in the form of an electronic data message or electronic document, purporting to give rise to such legal effect. Electronic-data messages or electronic documents shall have the legal effect, validity or enforceability as any other document or legal writing. Thus, for evidentiary purposes, an electronic document shall be the functional equivalent of a written document. In any legal proceedings, therefore, nothing in the application of the rules on evidence shall deny the admissibility of an electronic-data message or electronic document in evidence (a) on the sole ground that it is in electronic form; or (b) on the ground that it is not in the standard written form. But, of course, the person seeking to introduce an electronic-data message or electronic document in any legal proceeding has the burden of proving its authenticity by evidence capable of supporting a finding that the electronic-data message or electronic document is what the person claims it to be. The authenticity may be proved by showing the integrity of the information and communication system in which it is recorded or stored or the reliability, for example, of the manner or method in which it is communicated, generated or stored. The author is a senior associate of Du-Baladad and Associates Law Offices (BDB Law). If you have any comments or questions concerning the article, you can e-mail the author at deo.saludario@bdblaw.com.
|
Compliments of FileMan Research
Cary McGovern
Read MoreProblem with Confidential LAPD Files Out in the Open Addressed
Unsecured files next to a parking garage staircase | Photo by the Los Angeles Police Protective League
Remember last October when the LAPD’s union busted the department for storing confidential files in common spaces like hallways and parking garages with no security (see photos here)? Documents with social security numbers, serial numbers, search warrants, arrestee booking information and more was there for the taking. Even some boxes were marked “Evidence” and “Analyzed Evidence.”
Word spread through the media and the police commission quickly asked for a report “documenting the circumstances that lead to the problem along with the Office of Operations’ corrective and preventive measures that were put into place,” wrote Chief Charlie Beck in a memo to the commission with that report attached (.pdf), which was finalized in December.
Unsecured files were found in three stations–Northeast, Southwest and Wilshire–with most records scheduled to be destroyed. However, files at Northeast were supposed to be, and eventually were, sent to a secured storage facility.
Reasons for the screw-up was mainly space capacity–when new records came in, they ousted older records, which should have been picked up for storage or destruction. “Had the Areas adhered to the yearly records retention schedule and shipped older documents for destruction the number of records retained by the Areas would not have exceeded their storage capacity,” explained the report. “However, it is important to note that Area Records Department-wide are operating with a number of vacant positions that undoubtedly contributed to this problem.”
The solution? Area Records Coordinators and the office in charge of records retention will work closely to make sure the job is done right from now on.
http://laist.com/2010/01/07/unsecured_confidential_lapd_file_is.php
Compliments of FileMan Research
Cary McGovern — FileMan

Arizona Ethics Bar approves online access to client records…
Lawyers providing an online file storage and retrieval system for client access of documents must take reasonable precautions to protect the security and confidentiality of client documents and information. Lawyers should be aware of limitations in their competence regarding online security measures and take appropriate actions to ensure that a competent review of the proposed security measures is conducted. As technology advances over time, a periodic review of the reasonability of security precautions may be necessary.
FACTS
The inquiring lawyer wants to offer a service to clients that would allow clients online access to view and retrieve client files. The lawyer designed a multi-level security system in an effort to maintain the confidentiality and security of the files. First, the client files would be accessible only through a Secure Socket Layer (SSL) server, which encodes documents, making it difficult for third parties to intercept or read them. Second, the lawyer would assign unique randomly generated alpha-numeric names and passwords to each online client folder. The folder names contain no information that could identify the client to which it belongs. The password would not be the same as the client folder name. Third, all online client files would be converted to Adobe PDF (Portable Document Format) files and protected with another randomly generated unique alpha-numeric password.
QUESTION PRESENTED
May the inquiring lawyer maintain an encrypted online file storage and retrieval system for clients in which all documents are converted to password-protected PDF format and stored in online folders with unique, randomly-generated alpha-numeric names and passwords?
For more information: http://centricecm.wordpress.com/2010/01/07/arizona-ethics-bar-approves-online-access-to-client-records/
Compliments of FileMan Research
Cary McGovern-Fileman
Read More
