DIRECT Messaging: The Future of Communication Between Healthcare Providers. Presented by: Greg Anderson, CEO

Transcription

1 DIRECT Messaging: The Future of Communication Between Healthcare Providers Presented by: Greg Anderson, CEO

2 Agenda What is DIRECT and why do I care? You ve convinced me. How do I enroll? How do I set up DIRECT in OP? How do I send and receive DIRECT messages in OP? Is there enough time left for a live demo? Q&A

3 What is DIRECT? From the DIRECT charter document: The DIRECT Project specifies a simple, secure, scalable, standards-based way for participants to send authenticated, encrypted protected health information (PHI) directly to known, trusted recipients over the Internet DIRECT messages go from one healthcare provider to another, just like regular . Unlike HIEs, there is no intermediate repository and no copies are retained anywhere except the sender and receiver systems. All 2014 Certified EHR Technology must support DIRECT

4 I already have . Why do I need another address? Regular is not necessarily secure at rest is not necessarily encrypted in transit does not guarantee the identity of the sender does not guarantee the identity of the recipient is not attached to the patient chart DIRECT messaging solves all of these problems HISPs (Health Information Service Providers) handle all messages securely through trust anchors senders and recipients must be identity-proofed tightly integrated with EHR

5 Avoiding the HIPAA Police Preconditions of trust Sender has assurance receiver is who they claim to be Receiver has same level of assurance in sender Both have assurance that message content was not modified in transit Exposure to PHI is under complete control of sender and receiver

6 Let s swap keys. That s still legal, right? S/MIME = sender private key + receiver public key Sender ensures that only intended receiver can view the content, through use of the receiver's private key to decrypt the data Receiver ensures that the content arrived as sent by the sender, through use of the sender's signature Both parties ensure that they trust the identity assurance and other certificate issuance policies of the sender and receiver's certification authorities

7 Cool! Sign me up! Not so fast. How do I know I can I trust you? Identity-proofing documents Articles of incorporation NPIDs Passports Driver licenses

8 Introducing EMR Direct: Office Practicum s DIRECT Partner EMR Direct is a HISP for numerous EHR vendors accountable to the HIPAA Security Rule must have contractually binding legal agreements with the sender or receiver of directed exchange of PHI, including all terms and conditions required in a BAA uses trust anchors to determine that it is safe to exchange messages with other HISPs sends private messages over the public Internet protected by strong encryption

9 EMR Direct Enrollment Process Self-service enrollment forms on OP web site Step 1: Identity-proof your organization Complete organizational application, return via fax/scan to OP Direct enrollment department OP submits organizational application to EMR Direct on your behalf You receive a fax with an authorization code for organization, contact EMR Direct to confirm receipt Step 2: Identity-proof each individual who needs a mailbox Requires drivers license, must be notarized Return to EMR Direct, not OP

10 EMR Direct Organizational Application

11 EMR Direct Individual Application

12 Choosing your DIRECT address If your organization already has an you can create a subdomain for DIRECT mailboxes:drjohn@direct.dolittlepediatrics.com Advantages: recognized at a glance by colleagues, contains the word direct to indicate special purpose Disadvantages: one-time upfront fee, may require your IT provider to reconfigure your Internet name services

13 Choosing your DIRECT address If your organization doesn t have its own domain, or if you don t want to spend the extra money on a custom subdomain, OP can create a unique subdomain under opdirect.net: drjohn@dolittlepediatrics.opdirect.net Advantages: immediate availability, don t have buy a unique primary domain if you have no need for one, still contains the word direct to indicate special purpose Disadvantages: looks different from non-secure addresses that you may already use

14 DIRECT Address Rules Every provider must have a unique address - no sharing! Nurses and non-clinical users may also request addresses, subject to identity-proofing Generic addresses (i.e., referrals, medical-records ) are allowed but discouraged. If used, they must be assigned to a specific individual at any given time. Only one address per user - you cannot be associated with both an individual address and a generic address Addresses are paid for on a month-by-month basis and may be added and removed as needed at any time

15 Setting Up DIRECT Addresses in OP DIRECT addresses go in your OP Address Book, underneath the existing non-secure address field In order to send DIRECT messages, you must have a valid DIRECT in the Address Book DIRECT messages may only be sent to recipients who are listed in your OP Address Book with a valid DIRECT address In order to receive DIRECT messages, the sender must be matched to a listing in your OP Address Book with a valid DIRECT address that you recognize

16 Setting Up DIRECT Addresses in OP

17 Sending DIRECT Messages from OP DIRECT messages are created on the same New Message Form as all other OP messages When you create a message, if you have a valid DIRECT address, then the list of possible recipients in the To dropdown will include everyone outside your practice with a valid DIRECT address New messages may be addressed to a combination of internal and external providers, but external replies only come back to the original sender As with internal messages, external DIRECT messages and replies are captured to the patient chart

18 Sending DIRECT Messages from OP

19 Receiving DIRECT Messages in OP Inbound DIRECT messages from external providers are placed on a separate tab in the existing Message Center New unread DIRECT messages will turn the Message phone red, with a distinct unread count in the icon DIRECT messages from external providers may be replied to like any other message Unsolicited external DIRECT messages (those which are not in reply to a message you originated) may be associated with a patient chart when appropriate

20 Receiving DIRECT Messages in OP

21 Receiving DIRECT Referrals in OP External DIRECT messages may include attachments Attachments appear in a new column on the right side of the Responses pane When you click on an attachment, it is opened in the correct viewer, based on its type (image, PDF, etc.) Clinical documents open in a special viewer which lets you read the report, then clinically reconcile any information you would like to incorporate back into the patient chart without manual retyping

22 Receiving DIRECT Referrals in OP

23 Sending DIRECT Referrals from OP Meaningful Use Stage 2 requires that 50% of outbound transitions of care be transmitted electronically with a copy of patient records When you create a new Referral Letter, the options at the bottom of the form will include a [Send] button if you have a DIRECT address The [Send] button creates a CDA (electronic document with patient records) and opens a New Message with the CDA as an attachment You can add your own message text and choose anyone in your Address Book with a valid DIRECT address

24 Sending DIRECT Referrals from OP

25 VDT Implications VDT sounds like - but is not - a new form of an STI (although it may give you a virus if you re not careful!) View, Download, Transmit - actions patients must be allowed to perform on demand using your OP Portal Transmit requires both a Sender and a Receiver Sender - portal preference: either patient s named PCP, or a single DIRECT address under your control from which all transmissions are seen to originate Receiver - list of outside providers (not on staff) with a valid DIRECT address and checkmarked as Public

26 A Communications Revolution in the Making DIRECT is nascent, but MU2 transition-of-care requirement will drive rapid adoption as all EHR users upgrade to compatible software Ability to send routine, secure messages within the healthcare provider community is long overdue Sending and receiving clinical documents as attachments is much faster and more convenient than faxes and paper mail Enrollment takes time and effort - start planning now!

27 Questions?