X
GO
Resource Overview

Conducting an SRA in accordance with HIPAA policy is a complex task, especially for small to medium providers such as community health centers. The HIPAA Security Rule mandates security standards to safeguard electronic Protected Health Information (ePHI) maintained by electronic health record (EHR) technology, with detailed attention to how ePHI is stored, accessed, transmitted, and audited. This rule is different from the HIPAA Privacy Rule, which requires safeguards to protect the privacy of PHI and sets limits and conditions on it use and disclosure. Meaningful Use supports the HIPAA Security Rule. In order to successfully attest to Meaningful Use, providers must conduct a security risk assessment (SRA), implement updates as needed, and correctly identify security deficiencies. By conducting an SRA regularly, providers can identify and document potential threats and vulnerabilities related to data security, and develop a plan of action to mitigate them.

Security vulnerabilities must be addressed before the SRA can be considered complete. Providers must document the process and steps taken to mitigate risks in three main areas: administration, physical environment, and technical hardware and software. The following set of resources provide education, strategies and tools for conducting SRA.

Security Risk Analysis Resources

FHIR 101: Opportunities to Improve Interoperability across Health Centers

HITEQ Highlights Webinar

Jodie Albert 0 10935

Fast Healthcare Interoperability Resources (FHIR) is an HL7® standard for electronic healthcare data exchange. This next generation exchange architecture is advancing interoperability in healthcare. FHIR provides a standard way to express and share information across health centers, providers, and related organizations independent of how local EHRs display or store data. For UDS+ and other information exchange needs, all health centers, PCAs, and HCCNs will want to be familiar with the basics of the HL7 FHIR standard. In this session we will discuss what FHIR is, what it basically does, how it impacts your EHR, and what it might mean to your health center and patients.

Health Center Case Examples in Coding and Documenting Social Risks: Introduction

Privacy and Data Sharing Considerations | HITEQ Learning Collaborative

HITEQ Center 0 14763

Are you capturing information like immigration or refugee status, intimate partner violence, human trafficking, risk of acquiring HIV through sexual contact or substance use disorder, or other information that brings up questions about how to document or code while respecting the patient’s privacy?

This health center learning collaborative series will present health center case examples that explore the privacy and data sharing considerations of EHR documentation of sensitive patient information, such as social history and social risk, and encourage participants to discuss the implications for health centers and their patients. 

Health Center Case Examples in Coding and Documenting Social Risks

Immigration Case Example | Privacy and Data Sharing Considerations | HITEQ Learning Collaborative

HITEQ Center 0 13640

Are you capturing information like immigration or refugee status, intimate partner violence, human trafficking, risk of acquiring HIV through sexual contact or substance use disorder, or other information that brings up questions about how to document or code while respecting the patient’s privacy?

This health center learning collaborative series presented health center case examples that explore the privacy and data sharing considerations of EHR documentation of sensitive patient information, such as social history and social risk, and encourage participants to discuss the implications for health centers and their patients. 

Health Center Case Examples in Coding and Documenting Social Risks

Privacy and Data Sharing Considerations | HITEQ Learning Collaborative

HITEQ Center 0 13131

Are you capturing information like immigration or refugee status, intimate partner violence, human trafficking, risk of acquiring HIV through sexual contact or substance use disorder, or other information that brings up questions about how to document or code while respecting the patient’s privacy?

This health center learning collaborative series presented health center case examples that explored the privacy and data sharing considerations of EHR documentation of sensitive patient information, such as social history and social risk, and encouraged participants to discuss the implications for health centers and their patients. 

Health Center Case Examples in Coding and Documenting Social Risks

Intimate Partner Violence Case Example | Privacy and Data Sharing Considerations | HITEQ Learning Collaborative

HITEQ Center 0 12473

Are you capturing information like immigration or refugee status, intimate partner violence, human trafficking, risk of acquiring HIV through sexual contact or substance use disorder, or other information that brings up questions about how to document or code while respecting the patient’s privacy?

This health center learning collaborative series presented health center case examples that explored the privacy and data sharing considerations of EHR documentation of sensitive patient information, such as social history and social risk, and encouraged participants to discuss the implications for health centers and their patients. 

Health Center Case Examples in Coding and Documenting Social Risks

Roundup of Final Privacy and Data Sharing Considerations and Takeaways | HITEQ Learning Collaborative

HITEQ Center 0 11586

Are you capturing information like immigration or refugee status, intimate partner violence, human trafficking, risk of acquiring HIV through sexual contact or substance use disorder, or other information that brings up questions about how to document or code while respecting the patient’s privacy?

This health center learning collaborative series presented health center case examples that explored the privacy and data sharing considerations of EHR documentation of sensitive patient information, such as social history and social risk, and encouraged participants to discuss the implications for health centers and their patients. 

Dashboarding Social Needs Data: Support Population Health and Advance Equitable Care through Visual Display of Social Determinants of Health

HITEQ Highlights Webinar

Jodie Albert 0 11247

As health centers work towards providing more patient-centered and equitable care, they are increasingly adopting standardized social needs screening tools, such as PRAPARE and others, to systematically identify the challenges patients face in managing and improving their health, such as food and housing insecurity, transportation barriers, or safety concerns.  This information can be used to make impactful care planning and programmatic changes that lead to improvements in health outcomes, resource utilization, and reimbursement.  Data dashboards help analyze social determinants of health information in visual displays that deepen insights and trigger action towards addressing patient’s social needs, improving population health, and reducing inequities in care.

This webinar provided a foundational overview of social determinants of health dashboard design and presents case studies from health centers leading the way on use of social determinants of health data dashboards to build community partnerships, improve linkages to services outside the four walls of the clinic, and demonstrate the value-based impact of social needs services in improving the health, well-being, and quality of life of communities served.  One health center shared their experience building dashboards and using them in their clinic.

 

SAMHSA 42 CFR Part 2 Revised Rule

HITEQ Highlights Webinar

Molly Rafferty 0 28843

New guidelines from SAMHSA released in July 2020 are designed to improve coordination of care for patients in treatment for substance disorder, while protecting confidentiality against unauthorized disclosure and use of patient information. View this HITEQ webinar on changes to SAMHSA’s 42 CFR Part 2 rule (Part 2) which protects individuals receiving substance use disorder treatment by defining privacy and security requirements for written, electronic and verbal information. This webinar features expert presenters from the University of New Hampshire Institute for Health Policy and Practice and the Center of Excellence for Protected Health Information who present on the new final Part 2 rule and future changes in the CARES Act, including what has changed, what has not changed, what this means for health centers in regard to consents and disclosures, and the implications for care coordination. This presentation also addresses privacy considerations for tele-behavioral health and exceptions during the state of emergency waiver.

Telehealth Considerations and Strategies for Special and Vulnerable Populations

HITEQ Highlights Webinar

Molly Rafferty 0 19152

This webinar focuses on strategies to reach and serve special and vulnerable populations using telehealth. Special and vulnerable populations include Migratory, Seasonal, and Agricultural Workers (MSAW), Older Adults, people experiencing homelessness, people with limited english proficiency, and rural communities with limited access to broadband. We discuss building the awareness, knowledge, and ability of both patients and health center staff to successfully use telehealth to meet the needs of these important groups. Wealso share how telehealth promotes health equity and increases overall access to quality healthcare for special and vulnerable populations.

HITEQ Highlights: Using Health Information Technology to Facilitate SBIRT Service Delivery in Health Centers

Alyssa Carlisle 0 27456

This HITEQ Highlights webinar discussed the use of health information technologies (IT) to facilitate the workflow of providing Screening, Brief Intervention, and Referral to Treatment (SBIRT) services. Focus areas included: coding and billing for SBIRT services, using health IT to enhance SBIRT screening, communication, data capture and documentation, clinical decision support, and information sharing and reporting. The webinar presented examples and experiences of health centers currently using health IT to facilitate effective SBIRT service delivery.

Developing a Data Dashboard for PRAPARE Data

HITEQ Highlights

Alyssa Carlisle 0 37123

Health centers are interested in using social determinants data to manage and improve the health of their patient population and community, and are at different places on the population health management (PHM) and social determinants of health (SDH) adoption curve. The Protocol for Responding to and Assessing Patients’ Assets, Risks, and Experiences (PRAPARE) is a national effort to help health centers and other providers collect the data needed to better understand and act on their patients’ social determinants of health. In this webinar, the Colorado Community Managed Care Network (CCMCN), a Health Center Controlled Network (HCCN) highlighted a Tableau data dashboard that they have developed to help their health centers make decisions on population health management. They discussed the rationale for developing the tool, challenges and facilitators to integration, and how their health centers benefit from data sharing across Tableau.

Opportunities to Improve Diabetes Outcomes through Electronic Patient Engagement

HITEQ Highlights

Nathan Botts 0 42558

Electronic patient engagement technologies are having a significant impact on diabetes-related health outcomes and can help to increase patient to provider diabetes care plan involvement and communication. This HITEQ webinar explored use cases and strategies for effective adoption and evaluation of electronic patient engagement diabetes interventions within the health center setting.

HITEQ Highlights Webinar: Need Help Implementing Telehealth? Demystifying Barriers to Telehealth

HITEQ Highlights

Anonym 0 38239

While nearly all health centers have reported the use of electronic health records, only 38 percent are utilizing some type of telehealth technology, most notably to provide mental health services. Despite significant research that telehealth is as effective as in-person visits, there are still many barriers to its use, including the lack of consistent visit reimbursement, technology costs, broadband availability, and resistance to changes to workflow.  This webinar discussed the current state of telehealth use by health centers and the barriers to implementation and use and introduced participants to the national and regional Telehealth Resource Centers (TRCs).

HITEQ UDS Clinical Analysis Dashboard

Anonym 0 33934

This webinar discussed and demonstrated the newly developed web-accessible dashboards for the HITEQ UDS Clinical Quality Analyses which contain a variety of visual and data views of the information reported in the UDS across time and across measures, providing both individual and network organization levels of content, including comparison to other groups of health centers.  The information presented is specific to the organization that is logged in and content will vary based on the type of organization.  The webinar covered accessing the dashboards, the content available, manipulating the views, interpreting the results, and where to find additional tools and resources based on the information found. 

6/13 HITEQ Highlights: Health Center Framework for Effective Electronic Patient Engagement

A HITEQ Highlights Webinar

Alyssa Thomas 0 26995

The role of the consumer/patient is experiencing a significant change within healthcare in which the point of diagnoses and care is being increasingly shifted from the classical care provider setting to a more patient-centered model of health services. This shift in perspective and responsibilities is largely being stimulated by a critical mass in personal health information technology innovation and development, including patient portals, health apps, web-enabled medical devices, and personal fitness and health monitors. Health Centers are very aware of the benefits of patient activation and engagement, but at times need assistance in navigating 1) related regulations associated with policies such as Meaningful Use; 2) incorporation of patient engagement tools and strategies into the organizational workflow; 3) evaluation of patient needs, satisfaction, and activation; and 4) current tools and services available for electronic patient engagement. This webinar will cover the Health IT related policies, organizational changes, personal behaviors, and technical drivers that are converging to usher in a new era of patient empowered healthcare.

5/9 HITEQ Highlights: Using Data for Population Health - Social Determinants and Population Health

A HITEQ Highlights Webinar

Alyssa Thomas 0 25396

The objective of this learning opportunity is to help health centers begin, and make progress along, the path of using social determinants data to address population health using HIT.  This webinar will provide participants with an understanding of population health management and the social determinants of health from a HIT perspective, and their relevance for health centers.  We will present real-world examples of health centers’ successful use of social determinants data to implement population health management and improve quality.  Participants will be introduced to a “Roadmap for Use of Social Determinants Data”, to guide them in the foundational steps of using social determinants data for HIT to drive population health. 

4/17 HITEQ Highlights: Skill Sets for Health Center Security & Privacy Risk Management

A HITEQ Highlights Webinar

Alyssa Thomas 0 21428

Health Centers are made up of many different levels of IT Security & Privacy expertise, both in terms of staff skills and organizational maturity. This resource will help guide both beginners and more advanced staff and leadership to understanding how to best manage and promote security and privacy risk management at their health center.

Section IV - Acknowledgements

Guide to Improving Care Processes and Outcomes in FQHCs

Nathan Botts 0 20425

Origins and Ongoing Refinement of this Guide: The content in this resource is drawn from and builds on widely used CDS/QI tools and strategies that have evolved over the past decade. The HITEQ Center plans to continue refining this Guide based on input from users like you, so please consider sharing your feedback through the comment form.

RSS

Acknowledgements

This resource collection was cultivated and developed by the HITEQ team with valuable suggestions and contributions from HITEQ Project collaborators.

Looking for something different or have something you think could assist?

HITEQ works to provide top quality resources, but know your needs can be specific. If you are just not finding the right resource or have a highly explicit need then please use the Request a Resource button below so that we can try to better understand your requirements.

If on the other hand you know of a great resource already or have one that you have developed then please get in touch with us by clicking on the Share a Resource button below. We are always on the hunt for tools that can better server Health Centers.

Request a Resource  Share a Resource
Learning Progress
Quick Feedback Request
Highlighted Resources & Events
Need Assistance?
Would you like more assistance regarding Privacy and Security strategies or support in using any of the include resource sets?

  Request Support

 

Upcoming Events
The Quadruple Aim
Quadruple Aim

A Conceptual Framework

Improving the U.S. health care system requires four aims: improving the experience of care, improving the health of populations, reducing per capita costs and improving care team well-being. HITEQ Center resources seek to provide content and direction aligned with the goals of the Quadruple Aim

Learn More