Health First Improves Patient Privacy Monitoring Program to Help Meet Compliance Goals

March 5, 2019

With auditing activities taking more resources, Health First needed to improve its efficiency by investing in a patient privacy monitoring tool.

The Challenge

Health First needed a better solution, and McKesson’s recommendation turned the health system onto FairWarning. Not only was FairWarning able to provide that solution, but it was also able to load three years of historical data for immediate historical reporting.

Health First’s 4 not-for-profit hospitals and 12 clinics throughout Brevard County serve Florida’s Space Coast. The goal of Health First’s information systems team is to have all necessary patient information available whenever and wherever it is needed, but previous attempts at proactive auditing to ensure that information was still protected were inefficient and costly.

At any given time, Health First’s proactive auditing activities required between six and eight full-time employees, and results took from a few days to as much as a few weeks to produce.

Using FairWarning, Health First is able to meet regulatory requirements of monitoring, researching, tracking incidents, auditing, and compliance reporting with only one-and-a-half full-time employees. This represents a nearly 80 percent reduction in required resources, while at the same time handling increased regulatory responsibility.

The Results

Met regulatory requirements of monitoring, researching, tracking incidents, auditing, and compliance reporting with only one-and-a-half full-time employees
Reduced required resources by nearly 80 percent
Decreased incident response time
Improved ability to track and document compliance activities

Health First Improves Patient Privacy Monitoring Program to Help Meet Compliance Goals

Previous Document

Next Document

Health First Improves Patient Privacy Monitoring Program to Help Meet Compliance Goals

Previous Document

Next Document

Most Recent Documents

Always at the forefront of privacy innovation, the expansive Kettering Health Network needed a proactive monitoring platform to satisfy regulatory needs and ensure patient data privacy and security

Memorial Healthcare System's privacy and security comeback: discover how the organization went from a record-setting breach settlement to a purveyor of patient privacy excellence.

As a high-net-worth insurance carrier, the PURE Insurance Group of Companies needed to know: Is it better to build or buy a cloud security solution for Salesforce?

Originally adopted to add expertise to Southeastern Health's analysis of privacy incidents, Managed Privacy Services has introduced a new world of time savings and efficiency to the organization.

Nebraska Methodist Health System realized that, in order to keep up with its dynamic growth, it also needed to strengthen and simplify its patient privacy and compliance program.

“Before FairWarning, all of our EHR monitoring would be done manually, making it a very reactive process and difficult to pinpoint users," says MaineGeneral's HIM Operations Manager, Tara Yeaton.

With about 16,000 team members at the Prisma Health–Upstate affiliate alone, the privacy team realized that it needed advanced patient privacy solutions to save time and manage potential incidents.

As Community Hospital expanded into a new 140,000-square-foot, state-of-the-art facility, their expert IT team realized they needed to transform and streamline their current patient privacy practices.

Baptist Health Care was struggling to work with application vendors to enable auditing and access the logs in a usable format without unreasonable delays.

As NHS Lothian moved forward with their eHealth strategy, they needed to ensure electronic patient records were available to appropriate parties while reassuring patients of their privacy.

As one of the first NHS Foundation Trusts in England, Homerton has a reputation for excellent care . They were also expecting an influx of VIP patients whose privacy would need to be safeguarded.

Memorial Hermann was concerned its privacy tool would not be enough to fully comply with HIPAA and ARRA HITECH -- so the Texas system started searching for more robust privacy monitoring solutions.

Detroit Medical Center rolled out a new EHR across all hospital and clinic locations -- but it was not capable of auditing the access of over 15,000 employees per the ARRA HITECH of 2009.

Trying to keep up with privacy auditing responsibilities, IT staff at the Everett Clinic needed a tool that could provide automated monitoring of multiple diverse applications.

Internal threats from employees now represent the single greatest concern for most healthcare organizations. The University of Miami Miller School of Medicine sought help in countering those threats.

As the Saint Luke’s privacy team conducted assessments and audits to identify potential vulnerabilities, they found that uncovering patient data access was a long and tedious process.

With increasing regulations and standards for privacy and security, Halifax Regional knew they could not keep up with requirements using their existing manual auditing process.

When Columbus Regional Hospital received a patient privacy complaint, the security and IT teams found very minimal data in the clinical system audit logs.

When HIPAA Privacy/Security Officer Dena Boggan joined St. Dominic-Jackson Memorial Hospital, she found a less-than-optimal environment for maintaining HIPAA compliance and security.

Health Quest previously had multiple data protection technologies in place to prevent external threats. However, they did not have anything in place to prevent internal privacy breaches.