EHR Software Requirements Specification

Transcription

1 Hospital Health Information System EU HIS Contract No. IPA/2012/ Final version July 2015 Visibility: Public Target Audience: EU-IHIS Stakeholders EHR System Architects EHR Developers EPR Systems Developers This document has been produced with the financial assistance of the European Union. The views expressed herein can in no way be taken to reflect the official opinion of the European Union. This project is funded by Republic of Serbia Implemented by the the European Union Ministry of Health WHO and UNOPS

2 Abbreviation List CIS CDA PHC EHR EPR EPR IS HIS HL7 IS JMBG NHIF Central Information Service Clinical Document Architecture Primary Health Care Electronic Health Record Electronic Patient Record Information system which contains electronic patient record (HIS or PHC IS) Hospital Information System Health Level Seven Information system Unique citizen number (Jedinstven matični broj građanina) National Health Insurance Fund (RFZO Republički fond za zdravstveno osiguranje) EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

3 Table of Contents 1. EHR Data Categorization Data Exchange Identification of Person Identification of Institution Health Data Access Right Proposal EHR Patient Status Proposal Categorization of Diagnoses Categorization of Health Interventions (Procedures) Display of Administrative Data Display of the Basic Administrative Data Display of All Administrative Data Patient Summary Short Patient Summary Extended Patient Summary Encounter Summary EHR Access EHR Access through EPR System EHR Access through Web Portal Interactions Between Source Systems and EHR Data Exchange Between Source Systems and EHR Data Exchange and Their Validation Hospitalization Report Patient Registration Healthcare Professional (HCP) Registration Referral Request to Specialist Referral Request for Stationary Treatment Referral Fulfilment Metadata Versioning EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

4 1. EHR Data Categorization Data kept in the EHR system are personal data. They are divided to: Administrative data (person, identification and contact data about person including: name, surname, date and place of birth, personal identification number JMBG, address etc), Socio-medical data (medical data such as: blood type and organ donor; and social status data such as: marital status and employment) and Health data, which are further divided to: Health data of standard sensitivity and Sensitive ( hidden ) health data Sensitive ( hidden ) health data are classified into one of the five categories (in accordance with HL7 standards) and are identified in two ways: Recognized by diagnosis, which are: Data related to HIV and viral Hepatitis Data related to mental health Data related to circumstances, which are: Data related to substance abuse (drugs, alcohol etc.) Data related to sexual and domestic violence Data related to alternative lifestyle (alternative religions, beliefs, family structure, sexual orientation etc.) Health data are available to all health workers, who need to have access to data. Access to sensitive ( hidden ) data requires special action by user. Sensitive data encompass certain diagnosis, services, institutions and medicaments. 2. Data Exchange EHR receives data from the linked source systems (HIS, PHC IS, NHIF IS, CIS etc.). Data is sent from sources system to the EHR when contact (encounter or hospitalization) in healthcare institution is finished. According to needs, the source systems can send bulk of data document to the EHR, and the reasons can be as follows: Initial login to the EHR Sending of documents that were never sent due to long term interruption of connection with the EHR Repopulating of the EHR (transition from evaluation to production environment; recovery of the EHR) Following entities can forward data and have the right to modify person data: NHIF Chosen doctors PHC institution EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

5 EHR administrator HIS of the hospital first visited by the patient, that primarily sent data to the EHR (this is important only in the initial phases of the use, when only HIS are linked with the EHR system) NHIF and chosen doctors PHC institution (PHC institution in which patient s chosen doctor works) are equally authorized to modify person data. EHR does not display person data (except identification data such as name, surname, sex, personal ID), rather only health data of identified person. 3. Identification of Person Data on person who cannot be uniquely identified is not sent to the EHR. Following identifiers are used for unique identification of person, as per specified order: JMBG (national identifier is used for foreigners without JMBG) Other ID number of person (number of one of the following documents is used: passport, refugee legitimation, driving license) Data on newborns are not sent to the EHR until he/she receives personal identifier (JMBG etc.), separate from mother. JMBG and LBO are used for identification of health workers. Identification number of the registry of health workers is not used because it changes over time. EPR IS (PHC IS, HIS or other similar IS) sends data on health workers during initial connection with the EHR, and each time when registration of a new health worker occurs in EPR IS. Health worker for whom the data does not exist in the EHR cannot send or access EHR data on patients. 4. Identification of Institution Health institutions have their own identifier, while departments of the institution most probably do not have one. 5. Health Data Access Right Proposal Health data are divided to data of standard sensitivity and sensitive ( hidden ) data. Patient has the right to see his/her health data. Patients under custody represent the only exception. Person is under custody until the certain age (children), as well as persons who are declared incompetent to make decisions and custodian was assigned through appropriate legal procedure. Each person can have several chosen doctors in the PHC, up to three. For children these are paediatrician and dentist, for men these are general practitioner (GP) (or occupational medicine specialist) and dentist, while for women these are GP (or occupational medicine specialist), gynaecologist and dentist. The responsible doctor represents the one for which the patient gives a consent to be treated by. Every doctor can see all health data of a patient. With future developments, the system will enable other health workers to see the data too (nurses, pharmacists,..). Each doctor who is EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

6 accessing health data of a certain patient receives the short summary of the most important data, while access to sensitive data requires additional action by user. Record (log) of identity of person who accessed the data and time of access are being kept. Certain institutions can access all data in case they have a court order, which is also recorded (logged). Patient can see the log regarding all his/her data. 6. EHR Patient Status Proposal A patient can allow or deny others to see to its data. Unless he/she specifies otherwise, data are displayed. In case that the data display is not allowed, EPR system will send data to EHR, but no one will be able to access it. 7. Categorization of Diagnoses Diagnoses that patient has in his/hers health record are categorized based on selected time interval for which data are being displayed and based on their importance for patient s health. Categorization is as follows: Active diagnoses are those that are (or were) active in any kind of way for selected time interval (pre-determined or specified), whether their validity starts, ends or lasts during the selected interval. They can be illustrated as: time Diagnosis 1 Diagnosis 2 Diagnosis 3 Diagnosis 4 beginning of interval end of interval Previous diagnoses encompass two groups of diagnoses: Past diagnoses relevant for patient s health, but without recorded data on contact with health institution in the EHR. Highlighted diagnoses data on contact recorded, are not active (ended), but are marked as important by a doctor. When displaying diagnoses per selected time interval, active and past diagnosis for the selected interval are displayed, while highlighted diagnosis are displayed only if they belong to the selected interval or are older than its beginning. 8. Categorization of Health Interventions (Procedures) Health interventions (procedures), unlike diagnoses, do not have time duration, but have a certain status. Categorization of procedures is as follows: Past procedures relevant for patient s health, but without recorded data on contact with health institution in the EHR EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

7 Highlighted procedures data on contact recorded, are implemented and marked as important by a doctor Past procedures can also be highlighted. When displaying procedures per selected time interval, all procedures implemented during the selected interval are displayed, regardless of their status, as well as highlighted procedures that belong to the selected interval or are older than its beginning. 9. Display of Administrative Data 9.1. Display of the Basic Administrative Data The basic administrative data are available to health professionals for the purposes of identification of patient whose data is being accessed and for obtaining basic data, such as age, gender or eventual date of death. These data include: Mark in the PD* Surname Name Name of one parent Sex Date and time of birth Date and time of death Personal ID number - JMBG Table 1 Basic Administrative Data on Patient *PD Patient dataset in the Electronic Health Record (EHR) 9.2. Display of All Administrative Data The full display of administrative data is available only to the system administrator and it encompasses all administrative data on patient. Besides basic administrative data, these data include: Mark in the PD* Citizenship Place of birth Other ID numbers of person Contact person Address and phone of contact person Legal custodian EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

8 Address and phone of legal custodian Personal insuree number - LBO ID numbers of chosen doctor issued by NHIF Chosen doctors institution ID number Place of residence Home address Contact details Health insurance Type of health insurance Marital status Employment Table 2 Additional Administrative Data on Patient *PD Patient dataset in the Electronic Health Record (EHR) 10. Patient Summary Health worker has a possibility to choose the display of health data on patient based on: Display verbosity short patient summary extended patient summary Time interval for pre-defined time interval last 6 or 12 months for specified time interval health professional can define time interval beginning and end Based on the combination of the display scope and the time interval specified by the user, the health data that meet the desired criteria is displayed Short Patient Summary Short patient summary is initially displayed to health worker accessing the EHR, in case that the health worker selects this type of data display, or does not make a selection. These data include: Mark in the PD* Comment Blood type and Rh factor not linked to time interval Previous diagnoses in relation to time interval Previous performed health interventions (procedures) not linked to time interval EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

9 Allergies not linked to time interval Medical implants not linked to time interval Medical devices not linked to time interval Prescribed medicaments (generic name, brand name) (3.5.1., ) in relation to time interval Dispensed medicaments (generic name, brand name) Hospitalization beginning date and time (3.5.1., ) in relation to time interval not linked to time interval Hospitalization end date and time not linked to time interval Final diagnosis refers to hospitalization Treatment outcome refers to hospitalization Primary cause of death 3.8. not linked to time interval Table 3 Short Patient Summary *PD Patient dataset in the Electronic Health Record (EHR) In other words, display of short patient summary enables healthcare professionals to see following data: Not linked to time interval: blood type and Rh factor allergies medical devices and medical implants highlighted diagnoses past diagnoses (without recorded data on contact with health institution) highlighted procedures past procedures primary cause of death Linked to specified time interval: active diagnoses all hospitalizations of a patient, including final diagnosis and treatment outcome list of procedures included in the specified time interval regardless their statuses prescribed and dispensed medicaments EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

10 10.2. Extended Patient Summary Extended patient summary is displayed to health worker who selects this type of data display. These encompass, besides short patient summary, following data on patient: Mark in the PD* Comment Organ donor not linked to time interval Family history not linked to time interval Mandatory immunizations not linked to time interval Other immunizations not linked to time interval Smoking not linked to time interval Obesity not linked to time interval Malnutrition not linked to time interval BMI not linked to time interval Elevated cholesterol not linked to time interval Elevated triglycerides not linked to time interval Alcohol intake (abuse) not linked to time interval Intake (abuse) of opioids and psycho-active substances not linked to time interval Encounter end date and time (not hospitalization) Hospitalization beginning date and time linked to time interval linked to time interval Hospitalization end date and time linked to time interval Prescribed medicaments (generic name, brand name) (3.5.1., ) refers to hospitalization and encounter that occurred during the specified time interval Dispensed medicaments (generic name, brand name) (3.5.1., ) refers to hospitalization and encounter that occurred during the specified time interval Final diagnosis refers to hospitalization and contact in out-patient room that occurred during the specified time interval EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

11 Treatment outcome refers to hospitalization and contact in out-patient room that occurred during the specified time interval Organ recipient 3.7. not linked to time interval Table 4 Extended Patient Summary *PD Patient dataset in the Electronic Health Record (EHR) In other words, display of extended patient summary includes following data: Not linked to time interval: blood type and Rh factor allergies medical devices and medical implants family history immunizations risk factors whether the patient is organ donor or recipient highlighted diagnoses that are valid during the specified time interval or are older than specified time interval past diagnoses (without recorded data on contact with health institution) highlighted procedures past procedures primary cause of death Linked to specified time interval: active diagnose all contacts (ambulatory and hospitalizations), including relevant final diagnosis and treatment outcome list of procedures included in the specified time interval regardless their statuses prescribed and dispensed medicaments Encounter Summary Health worker can see details of contact that patient had with healthcare institution (encounter or hospitalization). In that case, following data related to observed contact are displayed: Encounter beginning date and time Encounter end date and time Mark in the PD* Comment , refers to observed contact, which could , refers to observed contact, which could EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

12 Institution in which contact occurred Doctor responsible for the contact Referral diagnoses refers to observed contact, which could Final diagnoses refers to observed contact, which could Additional diagnoses refers to observed contact, which could Related diagnoses refers to observed contact, which could Treatment outcome refers to observed contact, which could Health interventions (procedures) refers to observed contact, which could Status of health intervention (procedure) refers to observed contact, which could Prescribed medicaments (generic name, brand name) Dispensed medicaments (generic name, brand name) (3.5.1., ) (3.5.1., ) refers to observed contact, which could refers to observed contact, which could Form of administration of dispensed medicament Adverse effect of dispensed medicament refers to observed contact, which could refers to observed contact, which could Table 5 Details Related to Contact with Healthcare Institution *PD Patient dataset in the Electronic Health Record (EHR) Details related to contact of patient with the healthcare institution refer to specific contact, either as encounter or as hospitalization, and following is displayed: contact beginning and end time responsible institution and doctor all diagnoses related to that specific contact, regardless if they are referral, final or additional treatment outcome all procedures that were implemented during the contact and their statuses EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

13 prescribed and dispensed medicaments, form of administration and adverse effects of dispensed medicament all other details of importance for contact, if applicable (implants, devices, immunizations etc.) 11. EHR Access User can access the EHR in two ways: through EPR system through web portal EHR Access through EPR System The trust is established between the EHR and EPR system from which data is sent. User signs up to EPR system and requests to access EHR data from the same system. EHR takes over the following data on person accessing the EHR from EPR: persons identity persons location (institution and department in which person works, whether it is a static location where person primarily works or a dynamic location, where person is situated at the time of access) purpose of EHR use (reason for requesting to access the EHR data) Based on the submitted data, the EHR system will determine the user role and grant or refuse data access EHR Access through Web Portal Will be detailed in the future. Possible use by health workers and by patients. 12. Interactions Between Source Systems and EHR Excerpt of data on patients that exists in source systems are being sent to EHR. Initially, all patients in source systems are marked as dirty and that mark is removed when the patient data is sent to the EHR. LIFO system (Last In First Out) is used for data transfer, which means that the data on patients inserted/updated in the recent past (patients who recently were in health institution which transfers data) are initially transferred from source system to EHR. 13. Data Exchange Between Source Systems and EHR Data Exchange and Their Validation Data are exchanged in.xml format. Each.xml file relates to one patient (patient chunk). Data exchange flow: receipt from the source EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

14 validation (not synchronized) archiving in database (not synchronized) Validation is performed in two steps: check whether the document complies with CDA rules check whether the content is correct Each document has its ID (documentid) and receives.xml status upon upload and ID/token that is being returned to the sender. Possible statuses: not valid valid without error valid with errors archived in the database If the error occurs, the entire document is being rejected (in initial phase). Subsequent document from the same sender about the same patient is not being received until the previous, corrected document is received. Document is archived in the database only if it passed validation process. Working assumption: all data from source systems are connected with contact (encounter or hospitalization). Data that are sent from EHR can be presented as one of the following documents: summary of the most important patient health data, for selected time interval (predetermined or specified) Short Patient Summary summary of additional patient health data, for selected time interval (pre-determined or specified) Extended Patient Summary summary of individual contact (encounter or hospitalization) Encounter Summary report on hospitalization, contains the same information as the proscribed form of the same name Hospitalization Report When data are changed, it is not partial update, but the entire document is replaced Hospitalization Report The Hospitalization Report contains the same proscribed data as the paper form of the same report Obr. br /62/65-Sr Izveštaj o hospitalizaciji, and is used for communication with Institutes of Public Health, whether on local or on national level. The definition of this type of a document, to be exchanged and generated from the source system or the EHR, contributes to unification and standardisation of interoperability of the Serbian healthcare system. The Hospitalization Report contains the following data: Institution in which hospitalization occurred Mark in the PD* Name and number in the Hospitalization Report Name of the healthcare institution (1) EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

15 Admission department (2) No. of history of disease (3) Hospitalization beginning date and time Admission date (4) Name, Surname , Name and surname of patient (5) Personal ID number JMBG JMBG (6) Date and time of birth Date of birth (7) Citizenship Citizenship (8) Sex Sex (9) Home address, Place of residence , Residence address and municipality (10) Health insurance Insurance (11) Personal Insuree Number LBO LBO (12) Referral diagnosis Referral diagnosis (13) Injury (14) External cause of injury External cause of injury according to MKB (15) Final diagnosis Primary cause of hospitalization (16) Additional diagnoses Additional diagnoses according to MKB (17) Health interventions (procedures) Procedure code according to nomenclature (18) Hospitalization end date and time Discharge date (21) Weight upon admission (for newborns) (19) Number of hours of ventilation support (20) Hospitalization beginning date and time, Hospitalization end date and time , Number of days of hospitalization (22) Discharge department (23) Treatment outcome Type of discharge (24) Primary cause of death 3.8. Primary cause of death (25) Table 6 Hospitalization Report *PD Patient dataset in the Electronic Health Record (EHR) EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

16 13.3. Patient Registration This document is being sent to the EHR by source system and contains administrative and sociomedical data, but not health data on patient. The purpose is to register previously unregistered patients in the EHR, since health data can be received only for registered patients. Some data are mandatory while some are not, as described in the document EU-IHIS HL7 CDA Implementation and Validation Guide. Patient registration contains following data: Mark in the PD* Comment Name Surname Name of one parent Sex Citizenship Place of birth Date and time of birth Personal ID number - JMBG Personal insuree number - LBO Other ID number of the person Type of ID document Place of residence Home address Contact details Type of health insurance Marital status Employment Organ donor Contact person Address and phone of contact person Legal custodian Address and phone of legal custodian Table 7 Patient Registration *PD Patient dataset in the Electronic Health Record (EHR) EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

17 13.4. Healthcare Professional (HCP) Registration This document is being sent to the EHR by source system and contains administrative data on healthcare professional. The purpose is to register previously unregistered healthcare professional in the EHR, since health data can be received if they are authored only by registered healthcare professional. Some data are mandatory while some are not, as described in the document EU-IHIS HL7 CDA Implementation and Validation Guide. Healthcare professional registration contains following data: Mark in the PD* Comment Name Surname Name of one parent Sex Date and time of birth Personal ID number - JMBG Personal insuree number - LBO Specijalization Healthcare institution Organizational unit Table 8 Healthcare Professional Registration *PD Patient dataset in the Electronic Health Record (EHR) Referral Request to Specialist This document is defined based on the official paper document "Obrazac_OZ-2 - Uput_za_ambulantno-specijalisticki_pregled" currently used in a referral process to support a referral request of a patient from one health care provider or organization to another provider or organization (specialist). Based on personal ID number (JMBG) and Personal insuree number (LBO) establishes a connection with other referral data related to health insurance of the National Health Insurance Fund. Referral Request to Specialist contains following data: Referring health institution (from which the patient is referred) Mark in the PD* Name in the Referral Request to Specialist Healthcare institution Number of health record protocol Referred health institution (to which the patient is referred) To healthcare institution EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

18 Specialization To specialist for: Name, Surname , Refers Name and surname Name of one parent Refers Name of one parent Personal ID number - JMBG JMBG Personal insuree number - LBO LBO Clinical reason for the referral Referral Date and Time Reference is made to a specialist examination in order to: Date Name and surname of the referring healthcare professional Table 9 Referral Request to Specialist *PD Patient dataset in the Electronic Health Record (EHR) Signature and facsimile of MD Referral request to specialist contains reference(s) to a clinical document(s) in the EHR (e.g., associated Encounter Summary) Referral Request for Stationary Treatment This document is defined based on the official paper document "Obrazac_OZ-3 - Uput za stacionarno lečenje" currently used in a referral process. Based on personal ID number (JMBG) and Personal insuree number (LBO) establishes a connection with other referral data related to health insurance of the National Health Insurance Fund. Referral Request for Stationary Treatment contains following data: Referring health institution (from which the patient is referred) Mark in the PD* Name in the Referral Request for Stationary Treatment Healthcare institution Number of health record protocol Referred health institution (to which the patient is referred) To healthcare institution Name, Surname , Refers Name and surname Name of one parent Refers Name of one parent Personal ID number - JMBG JMBG Personal insuree number - LBO LBO Referral diagnosis Diagnosis Referral Date&Time Date EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

19 Name and surname of the referring HCP Table 10 Referral Request for Stationary Treatment *PD Patient dataset in the Electronic Health Record (EHR) Signature and facsimile of MD Referral request for stationary treatment contains reference(s) to a clinical document(s) in the EHR (e.g., associated Encounter Summary) Referral Fulfilment This document is used to record a referral response in case of both Referral request to specialist and Referal request for stationary treatment and it is based uppon corresponding report(s) in paper form. Referral Fulfilment contains following data: Healthcare institution that provides report Mark in the PD* Name from Report Healthcare institution Signed in on the day at hrs Examination finished at hrs ** Evidence-based protocol number Prezime, Ime , Prezime i ime osiguranika Referral response - Narrative description I have found that he/she is suffering from Findings and opinion Referral rejection Narrative description Fulfilment Date&Time Name and surname of the referred HCP Reason for not retaining in treatment *** Date Table 11 Referral Fulfilment Signature and facsimile of MD *PD Patient dataset in the Electronic Health Record (EHR) ** These data can be found only in responses to Referral Request to Specialist. *** This data can be found only in responses to Referral Request for Stationary Treatment. 14. Metadata Following is recorded for each data in the EHR: data source system package in which data was sent to the EHR data ID in the source system EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20

20 department/institution where data was created person who created data in the source system time of data transfer to EHR data validity period whether data was deleted (logical deletion, not physical) 15. Versioning Modification of data in the EHR is being monitored and versions kept, through recording of source system from which each data item was sent to the EHR, while data on what was modified and time of modification for each modification is recorded (in separate data version). EU-IHIS Šumatovačka 78-80, Beograd, Serbia /20