Chapter 35 ehealth Saskatchewan Sharing Patient Data 1.0 MAIN POINTS

Similar documents
ehealth Community Consultation Task Group Recommendation Report 2010

Memorandum of Understanding between the Central LHIN and the Toronto Central LHIN to establish a Joint ehealth Program

Certification Commission for Healthcare Information Technology. CCHIT A Catalyst for EHR Adoption

Chapter 18 SaskPower Managing the Risk of Cyber Incidents 1.0 MAIN POINTS

Security and Privacy Governance Program Guidelines

Connected Health Principles

4.3 Case Study #09: National ehealth network in Denmark

INVESTIGATION REPORT , , ,

EHR SECURITY POLICIES & SECURITY SITE ASSESSMENT OVERVIEW WEBINAR. For Viewer Sites

Information Technology (CCHIT): Report on Activities and Progress

ehealth Partnership with Hamilton Niagara Haldimand Brant (HNHB) LHIN

Comparing Approaches to Measuring the Adoption and Usability of Electronic Health Records: Lessons Learned from Canada, Denmark and Finland

An ehealth Blueprint Setting the Course For Action

WHO-ITU National ehealth Strategy Toolkit

ehealth in Southwestern Ontario

TOH Portal Services Expansion. Privacy Impact Assessment Summary

STAFF REPORT. January 26, Audit Committee. Information Security Framework. Purpose:

Personal Health Information Privacy Policy

Ministry of Government and Consumer Services. ServiceOntario. Figure 1: Summary Status of Actions Recommended in June 2016 Committee Report

Chances & Challenges of ehealth

ConnectingGTA Combined Back-End and Front-End Solution Privacy Impact Assessment (Executive Summary & Conclusion)

(60 min) California State Updates

Conference on ehealthstrategy

Report by Iain Ross, Head of ehealth on behalf of Deborah Jones, Director of Strategic Commissioning, Planning and Performance

Standards Development

Maryland Health Care Commission

Sto:Lo Health Conference

Measurement Challenges and Opportunities for Developing Smart Grid Testbeds

PAKISTAN HOW TO SPEED UP THE INTRODUCTION OF EHEALTH SERVICES IN DEVELOPING COUNTRIES

Adopter s Site Support Guide

Federal-State Connections: Opportunities for Coordination and Collaboration

Agile Master Data Management TM : Data Governance in Action. A whitepaper by First San Francisco Partners

Developing an integrated e-health system in Estonia

How we do ehealth in NHS Scotland

IT Governance ISO/IEC 27001:2013 ISMS Implementation. Service description. Protect Comply Thrive

REPORT 2015/149 INTERNAL AUDIT DIVISION

TRANSFORMING HEALTHCARE. & Facing Challenges Together in 2017

The HUMANE roadmaps towards future human-machine networks Oxford, UK 21 March 2017

ehealth Innovations Partnership Program (ehipp)

Electronic Service Provider Standard

Developing a National ehealth Strategy

Internal Audit Report. Electronic Bidding and Contract Letting TxDOT Office of Internal Audit

CAN RESEARCH AND EVALUATION MOVE THE NEEDLE ON TELEHEALTH AND mhealth?

Quality Assurance For Certifying Industry Partners

Public and Private Sector Partnerships to Promote HIT Adoption Across the United States

Results, 2 nd Quarter Data Security. HIMSS Analytics ehealth TRENDBAROMETER Q2/2017

A Quick Guide to EPCS. What You Need to Know to Implement Electronic Prescriptions for Controlled Substances

SOC 2 examinations and SOC for Cybersecurity examinations: Understanding the key distinctions

Public Safety Canada. Audit of the Business Continuity Planning Program

SALISBURY NHS FOUNDATION TRUST. TITLE - Information Strategy Annual Review

Board Assurance Framework and Corporate Risk Register Report

Doctor with a tablet in the hands and office background suedhang_gettyimages.com

California State Updates. Presenter: David A. Minch, President & COO, HealthShare Bay Area

History of NERC August 2013

STRATEGY ATIONAL. National Strategy. for Critical Infrastructure. Government

Update from HIMSS National Privacy & Security. Lisa Gallagher, VP Technology Solutions November 14, 2013

ISACA Cincinnati Chapter March Meeting

OVERVIEW OF VIETNAM S ICT SECTOR & EHEALTH IN VIETNAM. Geneve, 07/2012

NHS Gloucestershire Clinical Commissioning Group. Business Continuity Strategy

Statement of HIPAA Readiness February 2003

Privacy Policy on the Responsibilities of Third Party Service Providers

ECS, epcs and KIS Newsletter March 2012

EPA Near-port Community Capacity Building: Tools and Technical Assistance for Collaborative Solutions

California Trust Framework. Brief Report

Advancing Care With the NHIN and CONNECT

CPRD Aurum Frequently asked questions (FAQs)

The MovingLife Project

VII. GUIDE TO AGENCY PROGRAMS

REPORT 2015/010 INTERNAL AUDIT DIVISION

REPORT 2015/186 INTERNAL AUDIT DIVISION

KENYA SCHOOL OF GOVERNMENT EMPLOYMENT OPORTUNITY (EXTERNAL ADVERTISEMENT)

The New Healthcare Economy is rising up

CANARIE Mandate Renewal Proposal

Testing for Reliable and Dependable Health Information Exchange

Coordination, Collaboration and Integration: Canada s National Crime Prevention Strategy

Health Information Exchange - A Critical Assessment: How Does it Work in the US and What Has Been Achieved?

ConCert FAQ s Last revised December 2017

Data Protection. Practical Strategies for Getting it Right. Jamie Ross Data Security Day June 8, 2016

April 25, Dear Secretary Sebelius,

AUDIT UNITED NATIONS VOLUNTEERS PROGRAMME INFORMATION AND COMMUNICATION TECHNOLOGY. Report No Issue Date: 8 January 2014

From the home and the body - to the nurse and the GP

pan-canadian Oncology Drug Review Stakeholder Feedback on a pcodr Expert Review Committee Initial Recommendation (Provincial Advisory Group [PAG])

SUBJECT: PRESTO operating agreement renewal update. Committee of the Whole. Transit Department. Recommendation: Purpose: Page 1 of Report TR-01-17

Response to Wood Buffalo Wildfire KPMG Report. Alberta Municipal Affairs

User Manual/Guide for Direct Using encompass 3.0. Prepared By: Arête Healthcare Services, LLC

Cybersecurity Presidential Policy Directive Frequently Asked Questions. kpmg.com

Health Information Exchange: Can There Be ONE National Model?

FDA & Medical Device Cybersecurity

The NIH Collaboratory Distributed Research Network: A Privacy Protecting Method for Sharing Research Data Sets

Overview of the Multi-Payer Claims Database (MPCD)

"Charting the Course... Certified Information Systems Auditor (CISA) Course Summary

AMA dr2dr Secure Messaging Presentation to PCN Physician Leads January 30, 2016

Chapter 4: Critical Infrastructure Resiliency

An overview of the ehealth Strategy for NSW Health: & an update on key projects

Earthquake Preparedness

ehealth Ireland: Caring for ONE with ehealth

Management s Response to the Auditor General s Review of Management and Oversight of the Integrated Business Management System (IBMS)

Welcome to Panorama. January 2015

Health IT Certification

AUSTRALIA Building Digital Trust with Australian Healthcare Consumers

Transcription:

ehealth Saskatchewan Sharing Patient Data 1.0 MAIN POINTS Since 1997, Saskatchewan has been developing a provincial electronic health records system for patients (called the provincial EHR) to allow for the sharing of patient data among healthcare professionals. 1 Since 2010, ehealth Saskatchewan (ehealth) has had the mandate to develop and implement the provincial EHR for Saskatchewan. ehealth has created a provincial EHR through compiling and standardizing patient data from different regional health authorities and healthcare providers into provincial data repositories (i.e., data collection systems). This chapter sets out the status of five recommendations we first made in 2014 to improve ehealth s processes to share patient data among healthcare professionals. Four recommendations were directed at ehealth and one recommendation was directed at the Ministry of Health (Ministry). By September 15, 2016, ehealth implemented three of its four recommendations. Since our 2014 audit, ehealth has standardized data in all of the provincial data repositories, except for clinical records. ehealth, in association with the Ministry, Saskatchewan Cancer Agency, and regional health authorities, formed the Health Information Oversight Committee (HIOC) in May 2016. HIOC is to establish, deliver, and govern an effective and efficient provincial health information system. Part of its responsibilities is to make sure future IT capital projects are compatible and integrated with the current system before asking the Ministry to fund them. The results of HIOC s work, along with a long-term IT capital plan for the health sector, are expected to ensure the healthcare system has the priority IT resources required to deliver patient services. At September 2016, the Ministry did not have a long-term IT capital plan that encompasses provincial EHR priorities. 2.0 INTRODUCTION Our 2014 Report Volume 1, Chapter 9, concluded that, for the period of April 1, 2013 to February 28, 2014, ehealth had effective processes to share patient data among healthcare professionals, except in a few areas. We made five recommendations. To conduct this review engagement, we followed the standards for assurance engagements published in the CPA Canada Handbook Assurance. To evaluate ehealth s progress towards meeting our recommendations, we used the relevant criteria from the original audit. ehealth s management agreed with the criteria in the original audit. 1 Patient data is patient health information in electronic format. Healthcare professionals include physicians, pharmacists, nurses, and radiologists. Provincial Auditor of Saskatchewan 2016 Report Volume 2 251

We interviewed key ehealth and Ministry staff regarding provincial EHR data repositories. We also examined ehealth s strategies for completing data repositories and standardizing data requirements and reviewed terms of reference, agreements, and minutes. 3.0 STATUS OF RECOMMENDATIONS This section sets out each recommendation including the date on which the Standing Committee on Public Accounts agreed to the recommendation, the status of the recommendation at September 15, 2016, and ehealth s actions up to that date. We found that ehealth had implemented three recommendations. ehealth and the Ministry continue to work on the remaining two recommendations. 3.1 Standardized Data Requirements Progressing We recommended that ehealth Saskatchewan establish standard data requirements for all provincial repositories. (2014 Report Volume 1; Public Accounts Committee agreement February 12, 2015) Status Partially Implemented Standardized data helps to ensure relevant and timely information is readily available for patient care. In our 2014 audit, we found ehealth had identified key data repositories, to include patient data related to: Lab results Drug information Diagnostic imaging/reports Clinical records (discharge summaries) Immunization information Chronic disease information Synoptic reporting 2 ehealth has set standard data requirements for all the data repositories, except clinical records. As of September 2016, 3sHealth was leading a transcription project. Once completed, standard electronic clinical reports (e.g., admission histories, discharge summaries, progress notes, surgical reports) are expected across all regional health authorities, which ehealth can then make available through the provincial EHR. Without standardized data compiled into the clinical records repository, physicians may not have the necessary information to make the best decisions. For example, if an RHA does not include hospital drug information in its discharge summary, a physician in another location later treating the same patient may prescribe a conflicting drug, potentially with adverse health consequences. 2 Synoptic reporting captures data items in a structured, standardized format, and contains information critical for understanding a disease, the technical details of a procedure, and the subsequent impacts on patient care. 252 2016 Report Volume 2 Provincial Auditor of Saskatchewan

Establishing standardized data requirements in electronic format for all repositories would ensure relevant and timely information is readily available for patient care. 3.2 Monitoring and Addressing Data Gaps We recommended that ehealth Saskatchewan define strategies to identify and collect key patient data required for provincial electronic health records. (2014 Report Volume 1; Public Accounts Committee agreement February 12, 2015) Status Implemented The completeness of the provincial repositories is contingent upon the completeness of the sources of its information and the willingness of those with patient data to share it. Figure 1 summarizes the availability (through the ehr Viewer) 3 and completeness of patient data at September 15, 2016. ehealth has developed a five-year priority roadmap (2014-2019). The roadmap outlines when ehealth plans to connect each data repository to various health care providers (e.g., regional health authorities) and when it expects new initiatives to occur. ehealth updates the status 4 of initiatives each quarter, and revisits the priority roadmap annually. Figure 1 also outlines whether ehealth is planning to address data gaps. Figure 1 Saskatchewan s Key Provincial Repositories as of September 15, 2016 Patient Data Available? Complete? Plans to Address Data Gaps Lab Results Drug Information No missing hospital drug information and oncology drug information Immunization Information Diagnostic Imaging/Reports No missing images and reports from private clinics (approximately 30% of images) Discharge Summaries No only includes Saskatoon Regional Health Authority discharge summaries Pilot in place for hospital drug information at Saskatoon Regional Health Authority. Oncology drugs are on the roadmap for 2016-17. Pilot taking place in one private clinic. Roll-out in two private clinics planned for 2017-18. Transcription project underway. Clinical Encounters A Chronic Disease Information Synoptic Reporting Source: ehealth Saskatchewan documentation and interviews. A The Clinical Encounters repository allows physicians to see if their patients have received care in hospital, through the ehr viewer. 3 The ehr Viewer allows authorized users to view patient data over the internet. 4 ehealth classifies each initiative as completed, in progress, in queue, in planning, dependent on other initiatives, or delayed. Provincial Auditor of Saskatchewan 2016 Report Volume 2 253

3.3 Governance Structure Established will Facilitate Provincial EHR Development We recommended that ehealth Saskatchewan obtain responsibility from the Ministry of Health for the drug and immunization repositories to facilitate developing the provincial electronic health records. (2014 Report Volume 1; Public Accounts Committee agreement February 12, 2015) Status Implemented We recommended that ehealth Saskatchewan obtain responsibility from regional health authorities for the diagnostic images and reporting repository to facilitate developing the provincial electronic health records. (2014 Report Volume 1; Public Accounts Committee agreement February 12, 2015) Status Implemented ehealth Saskatchewan is the system owner of the provincial EHR repositories. Advisory committees and working groups are in place for each repository with membership from ehealth, the Ministry, regional health authorities, Saskatchewan Cancer Agency, regulatory bodies, and pharmacies. These repository advisory committees and working groups are responsible for providing advice and guidance for the projects related to the repository they are responsible for. A provincial ehealth Information Advisory Committee (ehiac) is in place for the shared trusteeship 5 model. ehiac is responsible for providing advice and guidance on data-sharing agreements, service and access policies, and security and privacy concerns. On May 19, 2016 ehealth, the Ministry, Saskatchewan Cancer Agency, and regional health authorities agreed to form the Health Information Oversight Committee. HIOC s membership includes ehealth s CEO, representation from regional health authorities CEOs and/or Saskatchewan Cancer Agency s CEO, and a representative from the Ministry of Health. HIOC is responsible for prioritizing IT investments and making recommendations. The group is meeting regularly (e.g., monthly) and establishing a decision making process. The formation of HIOC is expected to facilitate shared responsibility between ehealth and its partners (e.g., Ministry of Health, regional health authorities) in making shared decisions impacting provincial EHR. 5 The Health Information Protection Act defines a trustee as a person or organization who has custody or control of personal health information (i.e., patient data). 254 2016 Report Volume 2 Provincial Auditor of Saskatchewan

3.4 IT Capital Funding on a Health Sector-Wide Basis Advancing We recommended that the Ministry of Health allocate IT capital funding based on a provincial strategy for electronic Health records. (2014 Report Volume 1; Public Accounts Committee agreement February 12, 2015) Status Partially Implemented The Ministry continues to fund IT projects at ehealth, regional health authorities, and other partners (e.g., Saskatchewan Cancer Agency). It expects the formation of HIOC to facilitate a centralized approach in enhancing the provincial EHR. For example, HIOC is responsible for ensuring future IT capital investments are compatible and integrated with current infrastructure, prior to recommending the Ministry fund them. The work of HIOC, along with a long-term IT capital plan for the health sector would help ensure that the healthcare system has the priority IT systems it requires to support the delivery of patient services. At September 15, 2016, the Ministry did not have a longterm IT capital asset plan. Provincial Auditor of Saskatchewan 2016 Report Volume 2 255