X
GO
Resource Overview

Patient portals, sometimes also referred to as personal health record systems (PHR) are web-based portals commonly attached to electronic health record systems (EHRs). These patient-centered portals provide patients with the ability to login and review health information related to their care. Common patient portal services include ways in which to schedule appointments, send messages to their care providers, review test results and refill prescriptions.

Outside of the benefits to the patient, implementation of patient portals had come to the attention of healthcare providers due to the inclusion of Meaningful Use of objectives centered on the use of patient portals and electronic engagement with patients.  Stage 3 requirements are still being explored and the impact it will have on Health Centers is unknown. Therefore, it is a challenge for small practices and Health Centers to determine how to best derive value from Patient Portals and effectively implement them into their workflow.

The tools and articles posted below are meant to provide examples, templates and strategies that can assist Health Centers in understanding how patient portals can better engage their patients in self-management of their care, and after an initial investment in time and money can decrease the burden on their clinical and administrative staff.

Patient Portal Resources
Guidance on the HIPAA Privacy, Security, and Breach Notification Audit Program
Guidance on the HIPAA Privacy, Security, and Breach Notification Audit Program

Guidance on the HIPAA Privacy, Security, and Breach Notification Audit Program

The HHS Office for Civil Rights has started its next phase of audits of covered entities and their business associates. The 2016 Phase 2 HIPAA Audit Program will review the policies and procedures adopted and employed by covered entities and their business associates to meet selected standards and implementation specifications of the Privacy, Security, and Breach Notification Rules. 

Mitigating Office for Civil Rights Auditing Risks
Mitigating Office for Civil Rights Auditing Risks

Mitigating Office for Civil Rights Auditing Risks

The Office for Civil Rights (OCR) has recently announced the release of a new set of FAQs that seeks to address whether business associates of a HIPAA covered entity may block or terminate access by the covered entity to the protected health information maintained by the business associate for or on behalf of the covered entity.

Security Risk Analysis Tip Sheet
Security Risk Analysis Tip Sheet

Security Risk Analysis Tip Sheet

Conducting or reviewing a security risk analysis to meet the standards of Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule is included in the meaningful use requirements of the Medicare and Medicaid EHR Incentive Programs.

Keeping the Pediatric PHI Secure: Using the Security Risk Assessment Tool
Keeping the Pediatric PHI Secure: Using the Security Risk Assessment Tool

Keeping the Pediatric PHI Secure: Using the Security Risk Assessment Tool

Join Webex this Wednesday, November 16 at 1:00pm ET for a Security Risk Assessment (SRA) Tool webinar. This webinar will discuss the importance and unique considerations for cyberthreats in pediatric health care settings, followed by a SRA Tool walkthrough. The webinar will be recorded and made available after the event. Questions can be directed to can be directed to COCIT@aap.org.

Cybersecurity CIO Roundtable
Cybersecurity CIO Roundtable

Cybersecurity CIO Roundtable

This two session roundtable series brought together CIOs, CISOs, and other IT leadership from health centers to discuss strategic investments in cybersecurity, including those that can leverage recent ARP funding but sustain beyond the coming years. Participants had the opportunity to connect with each other and subject matter experts about implementation, considerations, and the future of cybersecurity and data protection in health centers.

Cybersecurity CIO Roundtable
Cybersecurity CIO Roundtable

Cybersecurity CIO Roundtable

This two session roundtable series brought together CIOs, CISOs, and other IT leadership from health centers to discuss strategic investments in cybersecurity, including those that can leverage recent ARP funding but sustain beyond the coming years. Participants had the opportunity to connect with each other and subject matter experts about implementation, considerations, and the future of cybersecurity and data protection in health centers.

 

OCR COVID-19 Webinar
OCR COVID-19 Webinar

OCR COVID-19 Webinar

The United States Office for Civil Rights (OCR) is holding a free Webinar for health information technology (HIT) stakeholders on Health Insurance Portability and Accountability Act of 1996 (HIPAA) privacy and security issues related to novel coronavirus (COVID-19) and recent OCR actions related to the pandemic.

Overcoming Cloud Challenges and Avoiding Failure While Transforming Healthcare Operations
Overcoming Cloud Challenges and Avoiding Failure While Transforming Healthcare Operations

Overcoming Cloud Challenges and Avoiding Failure While Transforming Healthcare Operations

74% of Healthcare organizations report leveraging the Cloud to achieve financial savings and operational efficiencies. However, recent findings show over 60% of these organizations are experiencing Cloud adoption challenges and Security anxiety. It is essential for Healthcare organizations to overcome these challenges as there is a much larger digital transformational trend ahead, where Cloud will become a crucial component of patient care innovation.

Join Healthcare IT veterans from Microsoft & Synoptek, as they discuss the future of Cloud for Healthcare and best practices to help you overcome Cloud challenges and achieve higher levels of operational efficiency, security, and HIPAA compliance in the Cloud.

Conference on Safeguarding Health Information: Building Assurance through HIPAA Secrurity
Conference on Safeguarding Health Information: Building Assurance through HIPAA Secrurity

Conference on Safeguarding Health Information: Building Assurance through HIPAA Secrurity

The National Institute for Standards and Technology (NIST) and the Department of Health and Human Services (HHS), Office for Civil Rights (OCR) are pleased to co-host the 9th annual conference, Safeguarding Health Information: Building Assurance through HIPAA Security, on October 19-20, 2016 at the Capital Hilton, Washington, D.C.

The conference will explore the current healthcare cybersecurity landscape and the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. It will highlight the present state of healthcare cybersecurity, and practical strategies, tips and techniques for implementing the HIPAA Security Rule.

RSS
12

Acknowledgements

This resource collection was cultivated and developed by the HITEQ team with valuable suggestions and contributions from HITEQ Project collaborators.

Quick Feedback Request
Highlighted Resources & Events
Need Assistance?
Would you like more assistance regarding Patient Portal strategies or support in using any of the included resource sets?

  Request Support

 

Upcoming Events
The Quadruple Aim
Quadruple Aim

A Conceptual Framework

Improving the U.S. health care system requires four aims: improving the experience of care, improving the health of populations, reducing per capita costs and improving care team well-being. HITEQ Center resources seek to provide content and direction aligned with the goals of the Quadruple Aim

Learn More