All messages should be posted in plain text. HTML will be converted to attachments. The meditech-l web site is MTUsers.com ======================================
Hi, I'm going to go out on a limb here and confess that we have chosen to allow physicians complete access to patient records. We had similar issues to the ones you described below. We also had many others that I'm sure you just did not have time to list. Basically, a patient may end up being cared for by just about any physician defined in our system. The problem's created by attempting to lock a physician out of a particular patient's record were deemed less critical than the problem's created for the patient when the physician could not gain access to their record. So, we sat down with our Core Team Leaders and our Senior Management and our independent Compliance Officer and talked about our options. The decision was made to grant open access. We have the ability to track physician's access using audit logs albeit an onerous task. We are looking to create a SQL database of these logs upon which we will build filters to track specific types of access scenarios. This should simplify the process. Well, I suppose I should kiss my family goodbye before I'm carted off to HIPAA jail. :) My next message may be awhile since I understand that access to computers is limited in the "big house". Thanks, Mike Cottle Sumter Regional Hospital 100 Wheatley Drive Americus, GA 31709 (229) 931-1380 IT Dept. (229) 931-1309 IT Fax -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Castillo, Cristina Sent: Friday, June 02, 2006 11:26 AM To: [email protected]; [EMAIL PROTECTED] Subject: [MEDITECH-L] Restricting Physician's Patient Access All messages should be posted in plain text. HTML will be converted to attachments. The meditech-l web site is MTUsers.com ====================================== Please let me know if this is feasible. We have a physician that is covering for certain physicians. We restricted his access only to his patients and the physicians he is covering for (thru page 3 of the MIS User dict). However, we don't want him to access patients admitted in ARU even though some of the Rehab patients are under one of the doctors he is covering for. We don't want to restrict him by Location either as it will be too limiting for him and he will still be able to access ARU patients anyway if he goes to that unit. Is there something that can be done to accomplish this? Maybe thru a rule or something? Any workaround? MEDITECH says that it is not possible (although they will research on the issue). Thank you in advance for any input you may have. Have a good Friday to all! Cristina G. Castillo, BSN, RN Manager, Clinical Informatics Pacific Alliance Medical Center 531 W. College St. Los Angeles, Ca 90012 Ph: (213) 437-4214 Fax: (213) 617-9203 Email: [EMAIL PROTECTED] This electronic message is intended only for the individual or entity to which it is addressed and may contain information that is confidential and protected by law. If you are not the intended recipient of this e-mail, you are cautioned that use of its contents in any way is prohibited and may be unlawful. If you have received this communication in error, please destroy it and notify the sender immediately by e-mail. _______________________________________________ meditech-l mailing list [email protected] http://mtusers.com/mailman/listinfo/meditech-l Note: The information contained in this message and any attachments may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, or other use of this communication or any of its attachments is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to this message and deleting this message, any attachments, and all copies and backups from your computer. If you have received this communication in error and are unable to reply to this message, please notify the sender immediately by telephone at (229) 931-1380. Thank you. Sumter Regional Hospital _______________________________________________ meditech-l mailing list [email protected] http://mtusers.com/mailman/listinfo/meditech-l
