Report: Global Outlook on Patient Privacy in Mobile Health

As mHealth expands rapidly around the world, complex issues related to patient privacy become challenging for organizations developing mHealth delivery models. Here is a new report generated through a collaborative effort that addresses patient privacy issues around the world:

First-of-its-kind Report Provides Global Outlook on Patient Privacy in Mobile Health

New report offers global legislation, regulation landscape, seven country case studies, framework for addressing security and privacy issues related to mobile health

Washington, D.C. (June 25, 2013) – A new report released today on “Patient Privacy in a Mobile World” offers a comprehensive global review of privacy and security policies in the field of mobile health (mHealth). Led by the mHealth Alliance, the Thomson Reuters Foundation, Merck, and Baker & McKenzie, the research also provides recommendations for ensuring the security of health data that is collected and transmitted over mobile devices.

Governments frequently cite concerns related to data privacy and security, and the protection of individual health information, as key barriers to the expansion of mHealth. This research aims to provide policymakers, mHealth practitioners, and governments with a privacy law framework that can be tailored to different cultures, environments, and scenarios to maximize patient control and autonomy over mHealth data.

“Mobile health has the potential to improve health and well-being on a global scale, and this research now provides important guidance as to how this can be achieved while still protecting patient privacy,” said Roy Birnbaum, Counsel in Merck’s International Law department and coordinator of Merck’s international pro bono program.

Diversinet, AirStrip Sign Licensing Agreement for mobiSecure SDK

You're probably familiar with Diversinet and AirStrip Technologies. Here's a press release from today announcing an interesting partnership between these two organizations:

Diversinet, AirStrip Sign Licensing Agreement for mobiSecure SDK, Enabling Patient-Monitoring Apps with Federally-Validated Security

Deal Lets Health Systems Enhance Care Coordination, Achieve High Levels of Compliance

TORONTO – Dec. 17, 2012 – Diversinet Corp. (TSX Venture: DIV, OTCQB: DVNTF), a leader in secure mobile health that “Powers Care Coordination through Mobility,” today announced it has signed a licensing agreement with AirStrip Technologies, Inc., for the use of its patented mobiSecure® SDK to power ultra-secure messaging in AirStrip’s industry leading mHealth application suite.

The newly formalized agreement enables AirStrip customers in the military, government and commercial sectors to comply with rigorous federal security requirements. Diversinet’s encryption technology recently was validated under Federal Information Processing Standards (FIPS) 140-2.

The mobiSecure SDK makes it easy for healthcare organizations to develop HIPAA-compliant solutions with military-grade security for all consumer smartphones, tablets, and other mobile devices. In addition to the FIPS 140-2 validation, recent enhancements to the SDK improve the speed of deployment for enterprise-wide mobile health solutions.

HIPAA compliance (or non-compliance): when doctors text patients

We all know that standard texting (SMS) is not encrypted. So, why do doctors text patients? Because it's easy, convenient, and in many cases it's what patients want. Text messages that contain PHI (personal health information) should be encrypted, right? Well, it's not quite that simple or straight-forward.

What's often misunderstood is that text messaging platforms don't always need to be encrypted when a doctor sends a text message to a patient. A physician or health system must assess the security and privacy risks and possible threats involved based on the type of information that is being communicated. Based on that assessment, mitigating strategies (such as encryption) must be put into place.

There's a recent article in the Journal of AHIMA titled, "HIPAA compliance for clinician texting" that summarizes some of the issues surrounding HIPAA and text messages. Here's a brief snippet:


All forms of communication involve some level of risk. Text messaging merely represents a different set of risks that, like other communication technologies, needs to be managed appropriately to ensure both privacy and security of the information exchanged.


Greene, Adam H. "HIPAA Compliance for Clinician Texting." Journal of AHIMA 83, no.4 (April 2012): 34-36.

What HIPAA says about texting (SMS) mobile messaging

Don't miss this upcoming free webinar sponsored by TigerText:

HIPAA Texting What Are You and Your Hospital Doing?

Please join us for a free webinar roundtable overview of how the medical community is using mobile communication and how you can adopt the speed and efficiency of mobile messaging without compromising PHI.

Monday October 17th @ 11 a.m. PST

Webinar Topics:

• Mobile Communication in Hospital Environments
• What HIPAA says about mobile messaging
• What's your potential exposure?
• Case Study - Cone Health Hospitalists Program

Why Attend:

• HIPAA Audits are Coming
• Understand mobile and how it impacts your staff
• Learn what HIPAA actually says about mobile
• Find out how to protect you and your staff

Texting and HIPAA - are physicians being compliant?

Don't miss this upcoming webinar: HIPAA Texting – What Are You and Your Hospital Doing?
Tuesday, September 27, 2011 1:00 PM - 2:00 PM EDT

Physicians are “Super Users” when it comes to smartphones with a penetration rate of 83% compared the general population penetration of approximately 40%. No matter what your hospital policy may be on secure messaging – you can bet that Doctors are texting! We’ve assembled a panel of experts to give you a quick overview on how healthcare providers are using mobile communication and what are the inherent risks to PHI. Legal and compliance experts will weigh in on what HIPAA actually says, as it applies to mobile messaging and a potential risk assessment – what are the potential penalties and exposures? How can you implement a mobile messaging platform that helps Doctors and Hospitals communicate in a secure, compliant, mobile environment on the devices they are already using.

Texting Illegally? How Secure Messaging Increases Physician Satisfaction and Keeps You HIPAA Compliant

Free Webinar: Texting Illegally? How Secure Messaging Increases Physician Satisfaction and Keeps You HIPAA Compliant

Speakers:

Dr. James French, Executive Director, Triad Hospitalists at Moses Cone Health System

Date: June 15, 2011
Time: 1:00pm – 2:00pm EST

Free Webinar for iHT2 Constituents

It’s the most illegal activity taking place in hospitals today. But enough about texting. Dr. James French, Executive Director, Triad Hospitalists at Moses Cone Health System in Greensboro, N.C, examines the three simple things his hospital did to improve communication, increase physician satisfaction, and maintain HIPAA compliance using the existing Smartphones nurses and doctors carry in the pockets every day. Every medical practitioner, healthcare executive or hospital administrator should sign up for this lively and informative presentation by one of Healthcare's true visionaries.

iPhones, iPads and HIPAA Compliance: A How To Guide

iPhones, iPads and HIPAA Compliance: A How To Guide

Tuesday, May 24, 2011
2:00 pm Eastern Daylight Time
Complimentary Webinar

Devices like the iPhone and iPad are becoming incredibly popular with doctors and other healthcare professionals.

But whether they are hospital issued -- or owned by the worker -- IT must ensure that Electronic Protected Health Information (ePHI) that is stored, accessed, transmitted or received by a mobile device is secured and protected in accordance with HIPAA guidelines.

This Webinar will focus on today's best practices for:

1. Choosing a HIPAA compliant mobile device platform
2. Instituting an IT mobility management framework
3. Empowering healthcare IT to proactively identify and resolve HIPAA violations & provide proof of compliance

Presenters: Dan Dearing; Group Director, Mobile Strategies; BoxTone
Pricing: Complimentary! There is no cost to attend this webinar.