Should I Use Standard Text Messages to Communicate with Patients?
Note: This is the first of a series of blog articles that addresses issues raised by physical therapists on various social media network groups where we are also members.
If you have heard the term HIPAA, you know you should not do this.
And if you have not heard the term HIPAA, you should probably stop practicing for a while and get educated on it.
But let’s at least cover basic HIPAA Rule 1: You have an obligation to secure your patients’ protected health information (PHI).
You open the door for violations of Rule 1 when you discuss that information in non-secured communications.
You’re also at risk when you use cellphones, computers, or other devices without the proper safeguards on them.
There are many preventative measures you can take.
At the least, consider these:
- Use a communications system that transmits data with secure socket layer (SSL) technology.
- Ensure access to the system requires passwords unique to each user.
- Don’t just close your web browser; sign out of the application when you finish a session.
- Better yet, look for a system that automatically signs users out and deletes its temporary local storage after a period of inactivity.
- Also look for encrypted data storage, preferably off-site in the cloud.
With so many high profile data breaches in recent months, PHI and HIPAA compliance are high on the list of priorities for credible medical software companies.
Insist on it in the products in your practice and train your staff on how to use them.
It’s not unprecedented for physical therapists to be penalized for HIPAA violations.
With the correct procedures in place, you won’t be the next PT practice to make the news for all the wrong reasons. In fact, your attention to protecting PHI can be one more solid reason for your patients to put their trust in you.
BTW, HIPAA-compliant communication is at the center of the In Hand Health solution. You can trade secure messages in various formats (text, images, video, and voice clips) between your office and a patient’s cellphone.
Originally published at www.inhandhealth.com.