Showing posts with label Health and Human Services. Show all posts
Showing posts with label Health and Human Services. Show all posts

Sunday, January 20, 2013

Patient Safety and the Ethics of EMR Implementation

“An experiment is ethical or not at its inception, it does not become ethical post hoc – ends do not justify means. There is no ethical distinction between ends and means.”
-- Henry K. Beecher, MD
 New Engl J Med 274(24) June 16, 1966 pp 1354-1360.


"When everything is digitalized, all your records - your privacy is protected, but all your records on a digital form - that reduces medical errors. It means that nurses don't have to read the scrawl of doctors when they are trying to figure out what treatments to apply. That saves lives; that saves money; and it will still ensure privacy."

The implementation of the electronic medical record (EMR) in American medicine gained a powerful foothold in medical care with the passage of the American Reinvestment and Recovery Act (ARRA) in 2009. With the passage of this act came the promise of improved efficiencies, safety and ultimately reduced cost delivery for health care. Also, some $18 billion dollars in financial incentives were offered to physicians to offset costs to deploy these systems nationwide. To assure adoption, if the systems were not implemented by 2015, doctors and care providers will suffer payment penalties from the government. For physicians who care for Medicare patients, there was no alternative than to deploy these systems.

In 2010 alone, the EMR market was pegged at $15.7 billion dollars, a cost that is ultimately passed to all Americans. In addition, despite all of the changes that health care reform has brought to date, people in some states continue to see their insurance premiums mushroom over 20% in 2013 from the preceding year. Simply put, patients are finding health care anything but “affordable.”

We should acknowledge that there might be cause, ethically, to deploy a technology that truly benefits patients at some cost. After all, you have to break a few eggs to make a good omelet. If interoperability of EMR systems between facilities were commonplace and clinical data were shared with ease while patient privacy was vigorously upheld flawlessly, the cost of these systems might be ethically justified.

But the promise of improved efficiencies to our health care system, improved patient safety and (especially) reduced cost for our health care system remain elusive. More importantly these goals remain unproven. In fact, examples that the opposite is occurring abounds as doctors struggle to enter ever-increasing amounts of information of no relevance to the patient’s presenting problem just to prove they’re using the EMR in a “meaningful” way, health data security breeches continue, errors are growing instead of shrinking, data-mining of patient information is occurring not just for patient care but for marketing purposes, and the direct costs of health care for patients continues to rise, not fall. Proponents of these systems will argue these issues are nothing more than “growing pains” of these novel systems.

So should we step back for a moment and ask ourselves if we are being ethical to patients with the deployment of this technology? Does the ends of presumed cost savings to our national health care system justify the deployment of poorly integrated, difficult-to-use systems? Are patients being subjected to new risks heretofore never considered with the adoption of this technology? Could a tiny programming error occur that negatively impacts not just one patient, but millions? If so, what are the safeguards in place to prevent catastrophic error? Who will be responsible? Who is the oversight body that assures the guiding principles of the Belmont Report (respect for persons, beneficence and justice) with respect to EMR deployment are followed? The Secretary of the Department of Health and Human Services or a more nebulous body like Congress?

If we accept that the benefits of the EMR are at least uncertain to patients in terms of risk and cost, we should demand they be studied before deploying them. The guiding medical ethics tenets would demand nothing less. So, would not such study qualify as human research? After all, we should remember that the United States and other countries have a precedent of human research programs performed by government agencies that were usually highly secretive, and in many cases information about them was not released until many years after the studies had been performed.

From a sentinel paper in 1966 by Henry J. Beecher, MD on Ethics in Research:

"I should like to affirm that American medicine is sound, and most progress in it soundly attained. There is, however, a reason for concern in certain areas, and I believe the type of activities to be mentioned will do great harm to medicine unless soon corrected. It will certainly be charged that a mention of these matters does a disservice to medicine, but not one so great, I believe, as a continuation of the practices cited.

Experimentation in man takes place is several areas: in self-experimentation; in patient volunteers and normal subjects; in therapy; and in the different areas of experimentation on a patient not for his benefit but for that, at least in theory, of patients in general."
While Beecher’s paper was addressing ethical research errors in general, his words are oddly prescient for EMR development. Ethical errors, as he pointed out, “are increasing not only in numbers but in variety.” He points to one of the biggest drivers of ethical conflict: money.

“Of transcendent importance is the enormous and continuing increasing in available dollars for research, as shown below:

Money Available for Research Each Year
YearMassachusetts General HospitalNational Institutes of Health
1945$500,000$701,800
19552,222,81636,063,200
19658,384,342436,600,000

These data, rough as they are, illustrate vast opportunities and concomitantly expanded responsibilities.

Taking into account the sound and increasing emphasis of recent years that experimentation in man must precede general application of new procedures in therapy, plus the great sums of money available, there is reason to fear that these requirements and resources may be greater than the supply of responsible investigators.”

The need for “responsible investigators” remains significant; funding for all of the National institute of Health in 2011 was $142.5 billion dollars. Annually, EMR companies have received the equivalent of 11% of the entire NIH annual research budget from US citizens without having to prove their safety or value to patients.

Again, from Beecher’s paper:

“The ethical approach to experimentation in man has several components; two are more important than others, the first being informed consent. The difficulty of obtaining this is discussed in detail. But it is absolutely essential to strive for it for moral, sociologic, and legal reasons. The statement that consent has been obtained has little meaning unless the subject or his guardian is capable of understanding what is to be undertaken and unless all hazards are clear. If these are not known this, too, shall be stated. In such a situation the subject at least knows that he is to be a participant in an experiment. Secondly, there is the more reliable safeguard provided by the presence of an intelligent, informed, conscientious, compassionate, responsible investigator.”
Because EMR deployments are cloaked in intellectual property, non-disclosure and restrictive hospital employment agreements, doctors are often prohibited from voicing specific concerns about an EMR system publicly. In addition, by adopting EMR systems as cornerstones of the American health care system, Congress, the President and the ARRA side-stepped patients’ informed consent regarding the short-comings of these systems, advertising only their desired benefits instead. Furthermore, rather than Congress turning to “conscientious, compassionate, responsible investigators,” they turned to lobbyists when deciding to fund the deployment of unproven EMR systems. As a result, doctors were relegated to becoming nothing more than stewards of data entry subject to new, ever-evolving documentation requirements as these systems evolve for cost-saving benefits and care "efficiencies."

Patients and doctors alike understand the need for improved efficiencies and value in our era of exploding health care costs. We must strive to find a solution to our health care cost crisis that is transparent, cost-effective and ethical. Without such an effort, our health care system will collapse. Only recently has the Office of the National Coordinator of Health Information Technology recognized the problem and opened their Health IT Patient Safety Action and Surveillance Plan for public comment. This plan asks the EMR companies and interested stakeholders to develop their own methods to assure patient safety and reporting systems – a move that approaches the same ethical standards as equivalent of asking the foxes to watch the henhouse. Nonetheless, we should acknowledge their efforts.

But we should be cautious of EMR systems as we move forward. After all, these clinical systems have not been subjected to the same cost-benefit and ethical scrutiny as other clinical tools we use in health care. The scrutiny of EMRs should be no different than that found with pharmaceutical or medical device research where Institutional Research Board approval and proof of no conflict of interest is demanded. Why should clinical EMR systems be any different?

Given the profit motives and market consolidation occurring amongst the purveyors of these EMR systems and the potential for lethal EMR errors both from software and human interface issues, doctors and patients must especially question the ethics of the movement to deploy untested, novel technology on our patient population under restrictive covenants. As part of informed consent, patients should have full understanding of how and where their clinical data are used, including when it will be used for direct-marketing campaigns, prioritizing care delivery, or for research. Patients should be able to opt out of the use of their clinical data for these or any other purpose if desired, without restricting payment for care. Finally, physician and patient concerns about EMR systems should be allowed to be vetted publicly and without threat of professional or personal reprisal or the withholding of payments for care rendered, especially and particularly if these disclosures are performed in the best interest of patient care.

To do otherwise is unethical for our patients and the public at large.

-Wes

Thursday, September 15, 2011

We've Hit the Jackpot With A Million Hearts

I don't know what I was thinking with my last post about the Health and Human Services' Million Hearts initiative. I thought the whole point of this program was to save money. At the time, I was less than optimistic that the government could acurately reach their goal given the problems with many of the principles behind their program. For instance, maybe it was just me, but how typing on an electronic medical record system would save those lives was lost on me.

But at the time, I had no idea this whole campaign was based on fear.

Watch this introductory video I found on the brand new Million Hearts website, all paid for (of course) with your tax payer dollars:



Listen to all that horrible stuff that can happen to you! And they look like such nice, ordinary people. Man, if that doesn't scare you into seeing your doctor, I don't know what will!

I have now seen the light: this is going to be awesome! (* Cha-ching! *)

You know: terrified, low risk people clamoring for an appointment insisting on all kinds of blood draws, testing, EKGs, and sophisticated imaging tests! And for all those tests with false positives, maybe an angio, too! We're about to make a fortune on this program all in the name of "cost savings!" Baby, there's NOTHING like screening low risk people when it comes to making money: Yeeeeeee haaaaaa!

Boys and girls, step right up! Help our heath care system save money, will you? (* Yuck yuck yuck *) After all (wink wink) it's about saving a million lives! You did see that video above, didn't you? No? Make sure you do: this is really BAD stuff!

Boy, no WONDER the American Medical Association, the American Heart Association, the American College of Cardiology, Walgreens, United Healthcare and a whole host of other "private interests" want to support this program: it's not just about the hearts, it's about the Benjamins!

Even better: they're on Facebook and Twitter! (Hope their video goes viral! Pssst: here's the link: http://www.youtube.com/embed/poc1eTuJJfc)

Absolutely, positively, brilliant. (I hope our health care system's marketing team is watching.)

After all, nothing sells like fear.

-Wes

Thursday, September 08, 2011

Data Security: A Rising Problem for Electronic Health Records

It was kind of funny reading this recent article from the New York Times that focuses on a relatively small health data breach from Stanford Hospital's emergency room:
A medical privacy breach involving Stanford Hospital in Palo Alto, Calif., led to the public posting of data for 20,000 emergency room patients, including names and diagnosis codes, on a commercial Web site for nearly a year, the hospital has confirmed.

Since discovering the breach last month, the hospital has been investigating how a detailed spreadsheet made its way from one of its vendors, a billing contractor identified as Multi-Specialty Collection Services, to a Web site called Student of Fortune, which allows students to solicit paid assistance with their schoolwork.

Gary Migdol, a spokesman for Stanford Hospital and Clinics, said the spreadsheet first appeared on the site on Sept. 9, 2010, as an attachment to a question about how to convert the data into a bar graph.

Although medical security breaches are not uncommon, the Stanford breach was notable for the length of time that the data remained publicly available without detection.
"Medical security breaches are not uncommon" is an understatement. According to the Department of Health and Human Services, 5,408,977 people have had their medical data lost or stolen, so an article that cries foul of 0.37% of this 2010 total seems fairly trivial. Worse, the reported trend is rising.

The real question that should be asked is this: What is the Department of Health and Human Services going to do about all of these data breaches? They seem to be intent on assuring us they're doing a good job enforcing these breaches, but we have to wonder.

So far, it seems they really can't do much to stem the tide: there are just too many people with computers claiming a "need to know" that have access to patients' private health data.

-Wes

Addendum: Make that 7.9 million records breached since 2009. (h/t: PDara, MD via Twitter)

Related: KevinMD blog: Your medical information is not private, and it's sold routinely.