Question

on 11/23/2015, the female mayor of your town was seen in your ER and subsequentlt admitted with injuries that included an orbital floor-out fracture and mulriple bruises.The local newpaper have printed health information that should not be available to them. To address potential privacy breach, the IT department ran an audit trial to see who had accessed the record and you asked with determining if any of those privacy policy: At the facility record are still hybrid

employees are
N.Northwest coder
L.alex- coder
S.South_-Transcriptionist
Z-Zero- file ckerk
W.Town- file clerk

Below is the audit tria of the employeest......

N.North west......11/28/15
L.alex....................11/26/15
S.South................11/27/15
Z.zero....................11/24/15
W.town-.....................11/29/15

what other relevant elements will you ask IT to include trail pertining to further narrowing down which employee might have violated the privacy policy?

Answer 1

The following elements are relevant that need to be checked & to be ncluded in the audit trail if not available.

1. Tools of investigation and prevention of theft of patient data, privacy violations, Copy paste, Auto populate etc.

2. Author identification in case of multiple login without to sigh their entry

3 Automated change of Note author

4. Automated date assignment

5. Amendments recording

6. Disabled audit logs etc

7. Meaning ful use such as

Required; Date, time, Patient ID, User ID, Type of action such as addition, deletion, change, queries , print copy etc.

Optional : Device used for access, identification of the patient dats accessed, source of access, reason for access.

The above check points need to be included in aidit trails if not done already.