I hate to call anyone stupid, but reading stories like Hospital Reports a Possible Data Loss really steams my Chinese dumplings. According to the post, a doctor who works at two facilities, including the famous Harvard’s Brigham and Women’s hospital (of NOVA fame) walked out carrying a hard drive with over 600 patients’ personal, private medical records and then “lost” it on a trip to Mexico. How could anyone commit or sanction such a risky action as walking out of a medical facility while hand-carrying an unprotected copy of so many people’s medical records in electronic form?! And you gotta love that the records ended up in freakin’ Mexico of all places. Whoever the legendary doctor was — who remains nameless — couldn’t have done a better job, short of sending the records to Al-Qaeda. Can you imagine?! Ugh…
You know what the answer to this is? It’s quite simple — don’t store records on removable hardware. With the Cloud in place, I dream of the day when it’s mandated by law that health records cannot be stored on portable hardware. We have so many brilliant companies using the latest SaaS technology that I really scratch my head wondering why this isn’t the default choice for all EMR and EHR systems. There is little reason that the above disaster should still be allowed to happen in 2011.
Rather interestingly, and yet again, this is another example of data theft of patient records that was NOT electronic theft. No usernames and passwords were hacked to get at the information. It’s was just a plain, simple (at least as far as anyone knows) dumb-luck loss. Another shining and yet pitiful example of why I believe that records are far safer on the web and in the Cloud than in someone’s portable hard drive or laptop. Do we really need to start anti-theft pad-locking and chaining hardware in place at medical facilities?
On another note, I’d love to have been the fly on the wall when the doctor was asked what happened that encouraged him or her to walk out with it. Just how common is it?
Dr. West is an endocrinologist in private practice in Washington, DC. He completed fellowship training in Endocrinology and Metabolism at the Johns Hopkins University School of Medicine. Dr. West opened The Washington Endocrine Clinic, PLLC, as a solo practice in 2009. He can be reached at email@example.com.