Be Careful About Identity Theft When Choosing Patient Identifiers
Accreditation Monthly, April 9, 2005
Dear Colleague,
Some of you may have seen this story reported first in The Wall Street Journal in February concerning the problem of identity thieves obtaining social security numbers of patients treated in a number of hospitals across the United States (a link to the story carried also in the Pittsburgh Post-Gazette is available here). News of this occurrence should not surprise us I suppose, yet hospitals have an obligation to protect the confidentiality and privacy of their patients. Indeed, JCAHO standard RI.2.130 Element of Performance numbers 1 and 2 speak to this requirement as does IM 2.10. In IM 2.10 the Commission defines the terms privacy and confidentiality as follows:
- Privacy: An individual's right to limit the disclosure of personal information.
- Confidentiality: The safekeeping of data/information so as to restrict access to individuals who have need, reason, and permission for such access.
The rationale and elements of performance for this standard go on to specify how the hospital should try to balance the need for information about the patient being available to staff while at the same time providing for the patient's right to privacy and confidentiality of the information. It is also clear the Commission has written the EPs in this standard to be in conformance with applicable HIPAA law and regulation.
I think IM 2.10; EP 6 is germane to the concern raised in the WSJ article. It states, "for uses and disclosures of health information, the removal of personal identifiers is encouraged to the extent possible, consistent with maintaining the usefulness of the information." In light of news of identity theft occurring based on stolen social security numbers is would seem wise that organizations design systems to safeguard the patient's social security number and relegate its use within the patient's record to only those purposes for which there is no alternative identifier.
As a case in point, if you are using the social security number as one of your two patient identifiers when administering medication or blood, or collecting specimens or prior to providing any exam or treatment as is required by PC.5.10; EP4, I strongly suggest you adopt an alternative identifier such as the medical record number. If you are using the social security number because in your system it doubles as the medical record number, then I suggest you consider changing your system to create a unique patient-specific medical record number different than the social security number.
Sincerely,
John Rosing
Practice Director of Accreditation
and Regulatory Compliance
The Greeley Company
For more information on our accreditation and regulatory compliance consulting services, click here or contact Sandi Reen, Practice Manager, at sreen@greeley.com or call 888/749-3054, ext. 3263.
JCAHO Survey Preparation
Is your organization prepared for JCAHO's 2006 random unannounced surveys?
The Greeley Company provides the most up-to-date knowledge regarding JCAHO standards and interprets them in the most flexible, constructive manner. We have the resources to help you solve any accreditation challenge in a timely, cost-effective manner while assuring the high-quality service you expect.
Based on your unique organizational needs, our accreditation and regulatory compliance professionals can:
- Provide engaging, effective survey preparation education and training for all levels of your organization
- Conduct a realistic mock survey
- Create and manage a continuous survey readiness program, customized to your needs
- Interim staffing for survey preparation and coordination
- And much more
The Greeley Company stands out from other accreditation and regulatory compliance services with our unique method for using the standards to drive improvements in care; consultants who have been through the survey process; practical, hands-on strategies for complying with the toughest standards; and exceptional expertise in managing the survey process.
If you would like to discuss your organization's specific needs, please call Sandi Reen, Practice Manager, at 888/749-3054, ext. 3263., e-mail sreen@greeley.com, or visit us on the Web at www.greeley.com.
Our initial telephone consultation is completely free and without obligation.
Related Products
Most Popular
- Articles
-
- CMS puts hospital surveys on limited hold as surge continues
- Don't forget the three checks in medication administration
- Practice the six rights of medication administration
- Note similarities and differences between HCPCS, CPT® codes
- Q&A: Primary, principal, and secondary diagnoses
- The consequences of an incomplete medical record
- Nursing responsibilities for managing pain
- Skills of effective case managers
- ICD-10-CM coma, stroke codes require more specific documentation
- OB services: Coding inside and outside of the package
- E-mailed
-
- CMS puts hospital surveys on limited hold as surge continues
- Charge and bill Medicare all pre-operative diagnostic tests
- How to create a safety protocol for emergency department psychiatric patients
- Know guidelines and subtle differences in code descriptions for laceration repairs
- Q&A: Mechanical room storage, risk assessments, patient rooms
- Modifier -25: Is that E/M service really above and beyond the norm?
- Long-Term Care Training Solutions
- Injections and infusions continue to confuse coders
- Get the facts on emergency department FAST exams
- Capturing start and stop times for infusions
- Searched