Exploring Health Information Exchange (HIE) Through Collaboration Framework: Normative Guidelines for IT Leadership of Healthcare Organizations

Assessing the impact of health information exchange on hospital data breach risk

OBJECTIVE

Widespread electronic health information exchange (HIE) across hospitals remains an important policy goal for reducing costs and improving the quality of care. Meanwhile, cybersecurity incidents are a growing threat to hospitals. The relationship between the electronic sharing of health information and cybersecurity incidents is not well understood. The objective of this study was to empirically examine the impact of hospitals' HIE engagement on their data breach risk.

MATERIALS AND METHODS

A balanced panel dataset included 4,936 US community hospitals spanning the period 2010-2017, which was assembled by linking the American Hospital Association annual survey database and the Information Technology (IT) supplement, and the Department of Health and Human Services reports of health data breaches. The relationship between HIE engagement and hospital data breaches was modeled using a difference-in-differences specification controlling for time-varying hospital characteristics.

RESULTS

The percentage of hospitals electronically exchanging information has more than tripled (from 18% to 68%) from 2010 to 2017. Hospital data breaches increased concurrently, largely due to the rise in hacking and unauthorized access. HIE engagement was associated with a 0.672 percentage point increase in the probability of an IT breach three years after the engagement. Hospitals actively engaging in a health information organization and exchanging data with outside providers were associated with a higher risk of IT related breaches in the long run; however, hospitals actively engaging in HIE and exchanging data with inside providers were not associated with any significant risk of IT related breaches.

DISCUSSION

Over time, the increasing amount and complexity of patient information being exchanged can create challenges for cybersecurity if data protection is not up to date. Additionally, data security depends on the weakest link of HIE, and providers with fewer resources for data governance and infrastructure are more vulnerable to data breaches.

CONCLUSION

Moving toward widespread health information exchange has important cybersecurity implications that can significantly impact both patients and healthcare organizations.

Hospital's adoption of multiple methods of obtaining outside information and use of that information

OBJECTIVE

Hospitals have multiple methods available to engage in health information exchange (HIE); however, it is not well understood whether these methods are complements or substitutes. We sought to characterize patterns of adoption of HIE methods and examine the association between these methods and increased availability and use of patient information.

MATERIALS AND METHODS

Cross-sectional analysis of 3208 nonfederal acute care hospitals in the 2019 American Hospital Association Information Technology Supplement.

RESULTS

The median hospital obtained outside information through 4 methods. Hospitals that obtained data through a regional HIE organization were 2.2 times more likely to also obtain data via Direct using a health information service provider (HISP) than hospitals that did not (P < .001). Hospitals in a single electronic health record (EHR) vendor network were no more or less likely to participate in a HISP or HIE. Six of 7 methods were associated with greater information availability. Only 4 of 7 methods (portals, interfaces, single vendor networks and multi-vendor networks but not access to outside EHR, regional exchange or Direct using a HISP) were associated with more frequent use of information, and single vendor networks were most strongly associated with more frequent use (odds ratio = 4.7, P < .001).

DISCUSSION

Adoption of some methods was correlated, indicating complementary use. Few methods were negatively correlated, indicating limited competition. Although information availability was common, low correlation with use indicated that challenges related to integration may be slowing use of information.

CONCLUSION

Complementarities between methods, and the role of integration in supporting information use, indicate the potential value of efforts aimed at ensuring exchange methods work well together, such as the Trusted Exchange Framework and Common Agreement.

Approaches to Addressing Nonmedical Services and Care Coordination Needs for Older Adults

OBJECTIVE

Non-medical services care coordination for daily activities of living is crucial in improving older adults' health and enabling them to age in place, but little is known about specific practices and barriers in this space.

METHODS

Semi-structured interviews were conducted with 41 professionals serving older adults in greater Chicago, Illinois-which consists of diverse urban, suburban, and semi-rural communities-to contextualize non-medical services needs and care coordination processes.

RESULTS

In-home care, home-delivered meals, non-emergency transportation, and housing support were cited as the most commonly needed services, all requiring complex coordination support. Respondents noted a reliance on inefficient phone/fax usage for referral-making and cited major challenges in inter-professional communication, service funding/reimbursement, and HIPAA.

CONCLUSIONS

Non-medical services delivery for older adults is severely impacted by general siloing throughout the care continuum. Interventions are needed to enhance communication pathways and improve the salience and interdisciplinarity of non-medical services coordination for this population.

Unfulfilled promises of health information exchange: What inhibits ambulatory clinics from electronically sharing health information?

PURPOSE

This study seeks to understand the key inhibitors for health information exchange (HIE) by ambulatory (outpatient) clinics. We examine the key technological, organizational and environmental factors that inhibit an ambulatory clinic from electronically exchanging health information with external clinics and hospitals.

METHODS

We utilize survey data from 1285 ambulatory clinics in the US state of Minnesota. Using logistic regressions, we assess if the ambulatory clinic's HIE with external clinics and external hospitals are associated with fourteen inhibitors from technological, organizational and environmental contexts in which ambulatory clinics operate.

RESULTS

Among the technological inhibitors, we find lack of adequate technological infrastructure, difficulties in integrating external data with electronic medical record systems, and security concerns to inhibit ambulatory clinics' HIE with both clinics and hospitals. Inadequate technical support was a barrier for HIE with hospitals, whereas inadequate training of staff was an inhibitor for clinic-to-clinic HIE. Of the environmental variables, legal concerns and complexity in framing HIE agreements with partners were found to inhibit ambulatory clinics' HIE with both external clinics and hospitals. Lack of partner readiness and ability was an inhibiting factor for clinic-to-hospital HIE whereas issues in patient consent, and problems in choosing the right vendor with a good fit were inhibiting ambulatory clinics' HIE with other clinics. Among the organizational variables, lack of adequate senior leadership support and complexity of workflow changes inhibited clinic-to-clinic health data sharing, whereas unclear return on investment (ROI) for HIE was a deterrent for ambulatory clinics' HIE with hospitals.

CONCLUSIONS

This study throws light on electronic HIE practices and its key inhibitors in ambulatory clinics, an understudied area in digital health. This paper provides unique insights into specific inhibitors that deter clinic-to-clinic health information sharing versus those that affect and clinic-to-hospital health information exchange.

Physician leadership and health information exchange: literature review

Background

Notwithstanding two decades of health information exchange (HIE) failures across the country, the US government has incorporated HIE into Meaningful Use Stage 2, which, in turn, has sparked renewed physicians’ interest in HIE.

Objective

The purpose of this paper was to conduct a literature review to understand how physician leadership might have assisted in supporting organisations in achieving HIE collaboration.

Method

The authors conducted a review of the literature about HIE and physician challenges from 2009 to present to identify peer-reviewed publications which might apply. Reviewers abstracted each publication for predetermined issues related to physician leadership. Themes were identified based on the literature findings.

Results

The literature review demonstrated four important themes (physician leader characteristics) that can assist in bridging the gap and creating collaboration in an HIE. The themes found in this study were: trust among physicians, promote involvement and buy-in, infuse value proposition and competition.

Conclusion

This paper contributes to the healthcare literature by conducting a literature review of the existing literature of surrounding HIE implementation and physician leaders. Specifically, we sought to gain insight into the change process and how physician leaders have demonstrated an impact on the process. This research is the first of its kind to synthesise leadership issues related to HIE and specifically explore the role of physician leader impact on HIE.

The Impacts of the Perceived Transparency of Privacy Policies and Trust in Providers for Building Trust in Health Information Exchange: Empirical Study

BACKGROUND

In the context of exchange technologies, such as health information exchange (HIE), existing technology acceptance theories should be expanded to consider not only the cognitive beliefs resulting in adoption behavior but also the affect provoked by the sharing nature of the technology.

OBJECTIVE

We aimed to study HIE adoption using a trust-centered model. Based on the Theory of Reasoned Action, the technology adoption literature, and the trust transfer mechanism, we theoretically explained and empirically tested the impacts of the perceived transparency of privacy policy and trust in health care providers on cognitive and emotional trust in an HIE. Moreover, we analyzed the effects of cognitive and emotional trust on the intention to opt in to the HIE and willingness to disclose health information.

METHODS

A Web-based survey was conducted using data from a sample of 493 individuals who were aware of the HIE through experiences with a (or multiple) provider(s) participating in an HIE network.

RESULTS

Structural Equation Modeling analysis results provided empirical support for the proposed model. Our findings indicated that when patients trust in health care providers, and they are aware of HIE security measures, HIE sharing procedures, and privacy terms, they feel more in control, more assured, and less at risk. Moreover, trust in providers has a significant moderating effect on building trust in HIE efforts (P<.05). Results also showed that patient trust in HIE may take the forms of opt-in intentions to HIE and patients' willingness to disclose health information that are exchanged through the HIE (P<.001).

CONCLUSIONS

The results of this research should be of interest to both academics and practitioners. The findings provide an in-depth dimension of the HIE privacy policy that should be addressed by the health care organizations to exchange personal health information in a secure and private manner. This study can contribute to trust transfer theory and enrich the literature on HIE efforts. Primary and secondary care providers can also identify how to leverage the benefit of patients' trust and trust transfer process to promote HIE initiatives nationwide.