Skip Links

Network World

Jamey Heary

Obama’s Electronic Health Records initiative could usher in a new wave of ID theft

By jheary on Mon, 02/16/09 - 4:39pm.

With the stimulus bill all but signed it looks like the government will be handing out $19 billion in an effort to digitize America’s health record system. The problem is we have a noble goal but no plan or direction on how it should be accomplished. The stated goal, which has garnered substantial support, is to build a National Electronic Health Records (EHR) system. But the plan or direction on how to get us there is completely missing from the stimulus bill. When the government throws lots of money at a problem before they have a viable plan or even the framework of a plan in place disaster usually strikes. Reference the recent Tarp disaster for proof. Given the current stimulus bill’s ambiguity it looks like we are destined for yet another misuse of funds, this time with modernizing healthcare.

Modernizing America’s health record system is not a new undertaking by government it just has a new advocate, President Obama, willing to take up the fight for it. President Bush was the first to start down this path when he formed the Office of the National Coordinator for Health Information Technology in 2004. Unfortunately, the new office was never given the funds or support that it desperately needed to accomplish its goal. Its goal was, and still is, to create an electronic health record for every American by 2014. Given that this goal was announced 5 years ago and only has 5 more years to go one would assume it should be about halfway-accomplished right? Ah…not exactly. Reality is we really haven’t even started yet. Up to now it is mostly window dressing and press releases.

And since we are starting basically from scratch here there are a few things that stand out as problems with the current stimulus bill as it relates to EHR.

The first one is the Institute for Health Freedom (IHF) is warning the public that the economic stimulus bill mandates the federal government to plan for each American to use "an" electronic health record (EHR) by 2014 -- without opt-out or patient-consent provisions. This is a very serious breach of privacy and one I would hope will be overturned with time. Seems as though the government decided to not come up with a comprehensive plan but instead made sure that no matter what it is everyone will have to be a part of it. This would open up your complete medical records to over 600,000 healthcare providers, payment processors, and government health agencies without your consent. An no, HIPAA will not protect you from this. This kind of pervasive access to anyone’s health records screams of privacy and security concerns.

Ok, so maybe your thinking that this is not so bad because it is for the greater good, just needs to be done, and we can trust the government to protect our security and privacy.

About Cisco Security Expert

Jamey Heary, CCIE #7680, sits on the PCI Security Standards Council- Board of Advisors where he provides strategic and technical guidance for future PCI standards. Jamey is the author of Cisco NAC Appliance: Enforcing Host Security with Clean Access. (Check out all of Jamey Heary's books from Cisco Press.) He also has a patent pending on a new DDoS mitigation technique.

Jamey sits on several security advisory boards for Cisco Systems and is a founding member of the Colorado Healthcare InfoSec Users Group. He is an experienced speaker who is recognized as an expert in network security architecture, regulatory compliance, and routing and switching. His other certifications include CISSP, CCSP, and he is a Certified HIPAA Security Professional. He has been working in the IT field for 15 years and in IT security for 10 years. Jamey is currently a Distinguished Systems Engineer at Cisco Systems.

 

Most Discussed Posts