The American Medical Association has adopted new guiding principles for physicians in the event a patient's electronic medical record is breached. AMA members approved the guidelines at the group's annual policy-making meeting earlier this week in Chicago.
"Protecting the privacy and safety of patient information, whether in a paper record or an electronic medical record, is a top priority for physicians," said AMA board member William A. Dolan, MD. "Physicians need a standard protocol to follow to maintain patient security in the event of a breach of personal information."
Medical information housed in an EMR travels from patient to healthcare provider to health insurance industry with limited regulation and oversight, Dolan noted. Security breaches can happen and physicians need guidance about their responsibilities if health information has been compromised.
The new AMA guidelines ask physicians to:
- Ensure patients are properly informed of the breach,
- Follow ethically appropriate procedures for disclosure,
- Support responses to security breaches that place the interests of patients above those of physician, medical practice or institution, and
- To the extent possible, provide information to patients to enable them to diminish potential adverse consequences of the breach of personal health information.
"EMRs are the wave of the future, so it is important for both patients and physicians to feel secure" Dolan said. "These new guidelines prepare physicians to help patients in the unfortunate situation of an information breach."