Saturday, February 23, 2013

How Medical Professionals Use Texting and Still Comply with PHI

by Holly Shoemaker

In a previous blog I recapped how text messaging had become a preferred method of communication for those working in the emergency room (ER). Now, some medical professionals have looked at texting as a means of sending information regarding patient follow ups.

Study at a Glance and HIPAA

A recent study published in the American Journal of Public Health (AJPH) looked at using text messaging to follow up with lower-income parents whose children had received a flu shot and needed follow-up visits.

The participants determined they wanted to send targeted messages, which were to include the child’s name and a reference to a “second flu shot.”

That seemed like an easy and effective way to remind parents about a follow-up visit, and texting provides an easy way to communicate with a majority of patients. However, there were problems with the language. The message contained Patient Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA). Under HIPAA, all communication must protect patient information. In this case, the message had the patient’s name and implied he/she had already received a flu shot. Those two pieces of information violated patient privacy.

Text messaging is also not considered a secure form of electronic communication. Even when sent by secured means, there is no way to guarantee the intended recipient receives the message.

The study team found away to protect PHI. It eliminated names and made the language generic. Instead of saying that a child needed a second flu shot, the team send a reminder that some children may need a second one. The message ended by prompting the recipient to call for an appointment.

Concluding Thoughts

The study serves as a good reminder for those medical professionals who prefer texting. It is a feasible means to communicate as long as the messages keep patient information private. The study also sets a standard on how to comply with HIPAA and PHI.

No comments:

Post a Comment