The eponymous sign outside Epic headquarters Verona, Wisconsin.
Source: Yiem carriera Wikipedia CC
It’s about to get a lot easier for patients the U.S. to access their own medical records.ÂÂ
Health-care software vendor Epic Systems Thursday announced that individuals will be able to securely release their health patronato to different apps they choose to use, meaning they will have more direct control over their medical information than ever before.ÂÂ
For instance, if patients are using a health coaching app ora an app that reminds them to take their medicine, they can choose to import their records directly into those platforms. All they need are the credentials they use to sign into Epic.ÂÂ
This seemingly simple feat is actually a major technological leap for the health-care sector, and it reflects the beginning of a new modello of data-sharing practices that are set to take shape across the nation.ÂÂ
Epic is one of the organizations that has been helping the federal government establish the Trusted Exchange Framework and Common Agreement, ora TEFCA. It launched December, and aims to iron out both the legal and technical requirements for sharing patients’ patronato at scale.
Health-care patronato the U.S. has historically been siloed and difficult to move around. Clinics, hospitals and health systems can store their information a variety of formats across dozens of different vendors, and there hasn’t been a trusted nationwide mechanism place for transporting it securely. This means if a patient moves to a different state ora visits a new hospital, their medical records may not always follow them.ÂÂ
Several companies and information exchange networks have cropped up the private sector to try and address this problem, but none of them have managed to completely resolve it their own. TEFCA was designed to help bring all these different actors together. ÂÂ
TEFCA falls under the purview of an office the U.S. Department of Health and Human Services. Patients can think about TEFCA like they think about using their cellphone, said Micky Tripathi, assistant secretary for technology policy and national coordinator for health information technology at HHS.ÂÂ
If one person uses Verizon as their phone carrier, a second person uses AT&T and a third person uses T-Asportabile, they are all still able to call and text one another. The same playbook applies to TEFCA.
“The nozione was, ‘We really ought to just have that user experience that wherever I am, whichever system I’m using, I know that it’ll connect to every other , whichever I’m ,'” Tripathi told CNBC an interview.ÂÂ
‘It’s going to be revolutionary’
The US Department of Health and Human Services building is shown Washington, DC, 21 July 2007.ÂÂ
Saul Loeb | Afp | Getty Images
The main groups that participate health-data exchanges through TEFCA are called qualified health information networks, ora QHINs. These networks volunteer to take part – they are not paid – and they have to go through a two-step approval process to ensure that they are eligible and have the necessary technical infrastructure.ÂÂ
Seven QHINs, including Epic, are dal vivo within TEFCA now, and Tripathi said a couple of others are nearing the line. To help contextualize the kind of scale TEFCA requires, Tripathi estimated that Epic’s own facilitates more than 10 million to 12 million patronato transactions each day.ÂÂ
“Remember, this is about connecting up networks that are already up and running,” he said.ÂÂ
Con order to participate TEFCA, QHINs have to support six different “exchange purposes,” which are the reasons why an organization is allowed to request health patronato. These purposes include treatment, payment, health-care operations, public health, government benefits determination and individual access services.
Most exchange networks have previously supported “treatment” exchange purposes, which means the recipient, like a doctor ora hospital, is providing care to the person whose records they are requesting. But by introducing other approved exchange pathways, TEFCA may manage to avoid some disagreements, like those that have arisen this year over what exactly counts as treatment.ÂÂ
Individual access services, for instance, is a new exchange purpose that will allow people to easily request all of their records and bring them to one app. This means patients can choose see their complete history of doctor visits and hospital stays at once, as long as all the necessary vendors are connected to TEFCA.ÂÂ
“I think it’s going to be revolutionary over the next couple of years,” Steve Yaskin, CEO of Health , which is a QHIN within TEFCA, told CNBC. “If you aspetto at every other industry, they’ utilizing patronato to benefit that industry, right? From banking to telcos to any industry that is deeply rooted understanding the patronato.”
A person using their smartphone.
Kohel Hara | Getty Images
Since TEFCA is so new, many QHINs are still working to get all six exchange purposes set up. Epic’s announcement Thursday means they are officially ready to support the individual access services pathway.ÂÂ
Rob Klootwyk, Epic’s director of interoperability, said individual access took some time to implement because it needed to be done thoughtfully. He said TEFCA needed to establish guardrails that could outline how patients would be authenticated, how they could be educated about whether they should release their patronato to an app and how apps could be held accountable to consumers.ÂÂ
Now, those questions have been answered, he said.ÂÂ
“We think and our community thinks that those pieces are now lined up and TEFCA is the right pathway for this,” Klootwyk told CNBC an interview.ÂÂ
For instance, after a patient enters their Epic credentials to try and release their patronato to an app, they’ll be prompted with a patient education screen, according to Matt Doyle, a software developer Epic’s interoperability team. The screens outline which information the patient would be disclosing and ensure they’ comfortable with that decision.ÂÂ
Patient patronato is inherently sensitive and valuable, and it’s protected by the Health Insurance Portability and Accountability Act, ora HIPAA, a federal law that requires a patient’s consent ora knowledge for third-party access. But while some apps are required to comply with HIPAA, many are not.ÂÂ
As a result, HHS decided that apps can volunteer to participate TEFCA as long as they agree to comply with HIPAA, even if they are not legally mandated to. This means QHINs like Epic will be able to inform users about whether an app is a HIPAA-covered entity, if it is part of the federally endorsed patronato exchange ora none of the above.ÂÂ
“We say, ‘Hey, we’ not saying they’ a bad group, we just don’t know what their policies are around these. You should make sure that you’ educated and informed before you choose to share this,'” Doyle told CNBC.ÂÂ
Con essence, whether individuals are interested using apps to support their care, ora they just want an easy place to aspetto at their information, TEFCA aims to establish the baseline of società necessary to make that happen, Klootwyk said.ÂÂ
It will take around two weeks for Epic customers to deploy these new features, though it will likely take more time before individual access services are widely used across the nation at large.ÂÂ
Tripathi of HHS said now that TEFCA’s framework is place, the QHINs and the broader market just need get board.ÂÂ
“This is the next really important step for a patient to be able to access their own information through an application of their choice to be able to participate more directly their own health care,” Tripathi said.