Confidentiality, Privacy and Security

Outside Access to EMR

  • 1.  Outside Access to EMR

    Posted 07-01-2019 15:01

    We have specialty physician offices that would like access to our hospital EMR mainly for results. Those requesting access are not our employees.  The specialty physicians have access, but we have the specialists' office nurses, MOAs, schedulers, and office medical record staff that are requesting access.   Does anyone have a policy or guidelines for giving outside access to your EMR and who decides if they should have access?  If so, could you please share?   We have Meditech.   Thanks.



    ------------------------------
    Cynthia Schreiner
    Director, Health Information Management Department
    Graham Hospital
    ------------------------------


  • 2.  RE: Outside Access to EMR

    Posted 07-18-2019 12:57
    ​Did anyone ever respond on this?

    ------------------------------
    Sarah Jackson
    Compliance Manager
    ------------------------------



  • 3.  RE: Outside Access to EMR

    Posted 30 days ago
    No, I did not get any responses.

    ------------------------------
    Cynthia Schreiner
    Director, Health Information Management Department
    Graham Hospital
    ------------------------------



  • 4.  RE: Outside Access to EMR

    Posted 28 days ago
    Hi Cynthia,
    I had to work it in reverse of your request.  I am in Senior Living Community with a Clinic and my physicians are part of the group that are also hospitalist in one of the hospitals I that I need access to PHI.  It is usually lab or imagining that doesn't follow the patient back to the Clinic.  I have worked with the IT department and signed off on the disclosure agreement.  Information is only available to me as read only, but it works for continued care.  Hope this helps.


    ------------------------------
    Barbara Naimark
    Medical Record Coordinator/Compliance Official
    ------------------------------



  • 5.  RE: Outside Access to EMR

    Posted 30 days ago
    Hi Cynthia,
    We are also a Meditech hospital. We allow our community provider offices/staff access to our system. They sign a security agreement and they are audited at random just the same as an employee. We have had one instance where we have removed access for their employee because we found questionable activity that the user could not justify. (That was MANY years ago.)
    Katie

    ------------------------------
    Kathryn Wood, RHIA
    Assist Dir of Information Systems/Privacy Officer
    War Memorial Hospital
    ------------------------------



  • 6.  RE: Outside Access to EMR

    Posted 30 days ago
    I do not recommend letting outside physician office staff access your EMR unless you can limit their access to only the patients and documents they need to access.  Granting them access to all of your patients would be a violation of minimum necessary.  I would also have sound processes for monitoring their access and for removing access when staff leave employment.

    Hope that helps and if I can do anything else to help feel free to reach out to me.

    ------------------------------
    DeAnn Tucker
    Him Director
    ------------------------------