NHS Homerton Deploys Patient Privacy Monitoring to Protect VIP Patient Data

March 5, 2019

When NHS Homerton was expecting an influx of VIP patients, an auditing system with automation and dashboards was top priority.

The Challenge

Homerton was already able to capture audit trails and trace what staff members were doing in electronic records. However, the system was manual, not proactive, so there was no warning if a breach occurred. Homerton wanted to be able to identify any issues before they turned into a major breach.

As one of the first NHS Foundation Trusts in England, Homerton has a reputation for excellent care and leadership to uphold. They were also expecting an influx of VIP patients in the near future, and wanted to insure that their privacy would be protected.

Like most other NHS Trusts, Homerton was already able to capture audit trails and trace what staff members were doing in electronic records. However, the system was manual, not proactive, so there was no warning if a breach occurred. Homerton wanted to be able to identify any issues before they turned into a major breach.

From the beginning, Homerton was able to use the FairWarning® Analytics Library to run standard reports and analytics using their EPR audit data. These analytics triggered an alert if suspicious patterns were detected, such as, employees accessing records of patients after discharge, records of family members, their own records (self-examination), and VIP patient records.

The Results

  • Ability to build customized reports and analytics
  • Proactively alert if suspicious patterns were detected
  • Setup threshold reports, alerting if a given patient record is accessed more than usual
Previous Document
NHS Lothian Safeguards Patient Records with Comprehensive User Activity Monitoring Program
NHS Lothian Safeguards Patient Records with Comprehensive User Activity Monitoring Program

As NHS Lothian moved forward with their eHealth strategy, they needed to ensure electronic patient records ...

Next Document
Memorial Hermann Focuses on Expanding Monitoring Capabilities Across Multiple Systems
Memorial Hermann Focuses on Expanding Monitoring Capabilities Across Multiple Systems

Memorial Hermann was concerned its privacy tool would not be enough to fully comply with HIPAA and ARRA HIT...