Clinical photography is a valuable tool for physicians. Smartphones, as well as other devices supporting network connectivity, offer a convenient, efficient method to take and share images. However, due to the private nature of the information contained in clinical photographs there are concerns as to the appropriate storage, dissemination, and documentation of clinical images. Confidentiality of image data must be considered and the dissemination of these images onto servers must respect the privacy and rights of the patient. Importantly, patient information should be considered as any information deriving from a patient, and the concepts outlined therefore apply to any media that can be collected on, or transmitted with, a smart-device.
Clinical photography can aid in documenting form and function, in tracking conditions and wound healing, in planning surgical operations, and in clinical decision-making. Additionally, clinical photographs can provide physicians with a valuable tool for patient communication and education. Due to the convenience of this type of technology it is not appropriate to expect physicians to forego their use in providing their patients with the best care available.
The technology and software required for secure transfer, communication, and storage of clinical media is presently available, but many devices have non-secure storage/dissemination options enabled and lack user-control for permanently deleting digital files. In addition, data uploaded onto server systems commonly cross legal jurisdictions. Many physicians are not comfortable with the practice, citing security, privacy, and confidentiality concerns as well as uncertainty in regards to regional regulations governing this practice.1 Due to concern for patient privacy and confidentiality it is therefore incredibly important to limit the unsecure or undocumented acquisition or dissemination of clinical photographs.
To assess the current state of this topic, Heyns et al. have reviewed the accessibility and completeness of provincial and territorial medical regulatory college guidelines.2 Categories identified as vital and explored in this review included: Consent; Storage; Retention; Audit; Transmission; and Breach. While each regulatory body has addressed limited aspects of the overall issue, the authors found a general lack of available information and call for a unified document outlining pertinent instructions for conducting clinical photography using a smartphone and the electronic transmission of patient information.2
The discussion of this topic will need to be ongoing and it is important that physicians are aware of applicable regulations, both at the federal and provincial levels, and how these regulations may impact the use of personal devices. The best practices supported here aim to provide physicians and healthcare providers with an understanding of the scope and gravity of the current environment, as well as the information needed to ensure patient privacy and confidentiality is assessed and protected while physicians utilize accessible clinical photography to advance patient care. Importantly, this document only focusses on medical use (clinical, academic, and educational) of clinical photography and, while discussing many core concepts of patient privacy and confidentiality of information, should not be perceived as a complete or binding framework. Additionally, it is recommended that physicians understand the core competencies of clinical photography, which are not described here.
The Canadian Medical Association (CMA) suggests that the following recommendations be implemented, as thoroughly as possible, to best align with the CMA policy on the Principles for the Protection of Patient Privacy (CMA Policy PD2018-02). These key recommendations represent a non-exhaustive set of best practices - physicians should seek additional information as needed to gain a thorough understanding and to stay current in this rapidly changing field.
* Informed consent must be obtained, preferably prior, to photography with a mobile device. This applies for each and any such encounter and the purpose made clear (i.e. clinical, research, education, publication, etc.). Patients should also be made aware that they may request a copy of a picture or for a picture to be deleted.
* A patient's consent to use electronic transmission does not relieve a physician of their duty to protect the confidentiality of patient information. Also, a patient's consent cannot override other jurisdictionally mandated security requirements.
* All patient consents (including verbal) should be documented. The acquisition and recording of patient consent for medical photography/dissemination may be held to a high standard of accountability due to the patient privacy and confidentiality issues inherent in the use of this technology. Written and signed consent is encouraged.
* Consent should be considered as necessary for any and all photography involving a patient, whether or not that patient can be directly recognized, due to the possibility of linked information and the potential for breach of privacy. The definition of non-identifiable photos must be carefully considered. Current technologies such as face recognition and pattern matching (e.g. skin markers, physical structure, etc.), especially in combination with identifying information, have the potential to create a privacy breach.
* Unsecure text and email messaging requires explicit patient consent and should not be used unless the current gold standards of security are not accessible. For a patient-initiated unsecure transmission, consent should be clarified and not assumed.
* Transmission of photos and patient information should be encrypted as per current-day gold standards (presently, end-to-end encryption (E2EE)) and use only secure servers that are subject to Canadian laws. Explicit, informed consent is required otherwise due to privacy concerns or standards for servers in other jurisdictions. Generally, free internet-based communication services and public internet access are unsecure technologies and often operate on servers outside of Canadian jurisdiction.
* Efforts should be made to use the most secure transmission method possible. For data security purposes, identifying information should never be included in the image, any frame of a video, the file name, or linked messages.
* The sender should always ensure that each recipient is intended and appropriate and, if possible, receipt of transmission should be confirmed by the recipient.
* Storing images and data on a smart-device should be limited as much as possible for data protection purposes.
* Clinical photos, as well as messages or other patient-related information, should be completely segregated from the device's personal storage. This can be accomplished by using an app that creates a secure, password-protected folder on the device.
* All information stored (on internal memory or cloud) must be strongly encrypted and password protected. The security measures must be more substantial than the general password unlock feature on mobile devices.
* Efforts should be made to dissociate identifying information from images when images are exported from a secure server. Media should not be uploaded to platforms without an option for securely deleting information without consent from the patient, and only if there are no better options. Automatic back-up of photos to unsecure cloud servers should be deactivated. Further, other back-up or syncing options that could lead to unsecure server involvement should be ascertained and the risks mitigated.
4. Cloud storage should be on a Canadian and SOCII certified server. Explicit, informed consent is required otherwise due to privacy concerns for servers in other jurisdictions.
5. AUDIT & RETENTION
* It is important to create an audit trail for the purposes of transparency and medical best practice. Key information includes patient and health information, consent type and details, pertinent information regarding the photography (date, circumstance, photographer), and any other important facts such as access granted/deletion requests.
* Access to the stored information must be by the authorized physician or health care provider and for the intended purpose, as per the consent given. Records should be stored such that it is possible to print/transfer as necessary.
* Original photos should be retained and not overwritten.
* All photos and associated messages may be considered part of the patient's clinical records and should be maintained for at least 10 years or 10 years after the age of majority, whichever is longer. When possible, patient information (including photos and message histories between health professionals) should be retained and amalgamated with a patient's medical record. Provincial regulations regarding retention of clinical records may vary and other regulations may apply to other entities - e.g. 90 years from date of birth applies to records at the federal level.
* It may not be allowable to erase a picture if it is integral to a clinical decision or provincial, federal, or other applicable regulations require their retention.
* Any breach should be taken seriously and should be reviewed. All reasonable efforts must be made to prevent a breach before one occurs. A breach occurs when personal information, communication, or photos of patients are stolen, lost, or mistakenly disclosed. This includes loss or theft of one's mobile device, texting to the wrong number or emailing/messaging to the wrong person(s), or accidentally showing a clinical photo that exists in the phone's personal photo album.
* It should be noted that non-identifying information, when combined with other available information (e.g. a text message with identifiers or another image with identifiers), can lead to highly accurate re-identification.
* At present, apps downloaded to a smart-device for personal use may be capable of collecting and sharing information - the rapidly changing nature of this technology and the inherent privacy concerns requires regular attention. Use of specialized apps designed for health-information sharing that help safeguard patient information in this context is worth careful consideration.
* Having remote wipe (i.e. device reformatting) capabilities is an asset and can help contain a breach. However, inappropriate access may take place before reformatting occurs.
* If a smartphone is strongly encrypted and has no clinical photos stored locally then its loss may not be considered a breach.
* In the event of a breach any patient potentially involved must be notified as soon as possible. The CMPA, the organization/hospital, and the Provincial licensing College should also be contacted immediately. Provincial regulations regarding notification of breach may vary.
Approved by the CMA Board of Directors March 2018
i Heyns M†, Steve A‡, Dumestre DO‡, Fraulin FO‡, Yeung JK‡
† University of Calgary, Canada
‡ Section of Plastic Surgery, Department of Surgery, University of Calgary, Canada
1 Chan N, Charette J, Dumestre DO, Fraulin FO. Should 'smart phones' be used for patient photography? Plast Surg (Oakv). 2016;24(1):32-4.
2 Unpublished - Heyns M, Steve A, Dumestre DO, Fraulin FO, Yeung J. Canadian Guidelines on Smartphone Clinical Photography.
Vision for e-Prescribing: a joint statement by the Canadian Medical Association and the Canadian Pharmacists Association
By 2015, e-prescribing will be the means by which prescriptions are generated for Canadians.
e-Prescribing is the secure electronic creation and transmission of a prescription between an authorized prescriber and a patient's pharmacy of choice, using clinical Electronic Medical Record (EMR) and pharmacy management software.
Health Information Technology (HIT) is an enabler to support clinicians in the delivery of health care services to patients. The Canadian Medical Association (CMA) and the Canadian Pharmacists Association (CPhA) each have identified e-prescribing as a key tool to deliver better value to patients. The integration of HIT into clinics and health care facilities where physicians and pharmacists provide care is a priority for both associations1.
As part of its Health Care Transformation initiative, the CMA highlighted the need to accelerate the introduction of e-prescribing in Canada to make it the main method of prescribing. In its policy on optimal prescribing the CMA noted that one of the key elements was the introduction of electronic prescribing. The CPhA, as part of its Blueprint for Pharmacy Implementation Plan, highlights information and communication technology, which includes e-prescribing, as one of five priority areas.
We applaud the ongoing efforts of Canada Health Infoway, provinces and territories to establish Drug Information Systems (DIS) and the supporting infrastructure to enable e-prescribing. We urge governments to maintain e-prescribing as a priority and take additional measures to accelerate their investments in this area.
It is our joint position that e-prescribing will improve patient care and safety. e-Prescribing, when integrated with DIS, supports enhanced clinical decision-making, prescribing and medication management, and integrates additional information available at the point of care into the clinical workflow.
The following principles should guide our collective efforts to build e-prescribing capability in all jurisdictions:
* Patient confidentiality and security must be maintained
* Patient choice must be protected
* Clinicians must have access to best practice information and drug cost and formulary data
* Work processes must be streamlined and e-prescribing systems must be able to integrate with clinical and practice management software and DIS
* Guidelines must be in place for data sharing among health professionals and for any other use or disclosure of data
* The authenticity and accuracy of the prescription must be verifiable
* The process must prevent prescription forgeries and diversion
* Pan-Canadian standards must be set for electronic signatures
Benefits of e-Prescribing
A number of these benefits will be realized when e-prescribing is integrated with jurisdictional Drug Information Systems (DIS).
o Improves patient safety and overall quality of care
o Increases convenience for dispensing of new and refill prescriptions
o Supports collaborative, team-based care
o Supports a safer and more efficient method of prescribing and authorizing refills by replacing outdated phone, fax and paper-based prescriptions
o Eliminates re-transcription and decreases risk of errors and liability, as a prescription is written only once at the point-of-care
o Supports electronic communications between providers and reduces phone calls and call-backs to/from pharmacies for clarification
o Provides Warning and Alert systems at the point of prescribing, supporting clinician response to potential contraindications, drug interactions and allergies
o Facilitates informed decision-making by making medication history, drug, therapeutic, formulary and cost information available at the point of prescribing
* Health Care System:
o Improves efficiency and safety of prescribing, dispensing and monitoring of medication therapy
o Supports access to a common, comprehensive medication profile, enhancing clinical decision-making and patient adherence
o Increases cost-effective medication use, through improved evidence-based prescribing, formulary adherence, awareness of drug costs and medication management
o Improves reporting and drug use evaluation
While evidence of the value of e-prescribing is established in the literature, its existence has not fostered broad implementation and adoption. In Canada, there are a number of common and inter-related challenges to e-prescribing's implementation and adoption. These include:
* Improving access to relevant and complete information to support decision-making
* Increasing the level of the adoption of technology at the point of care
* Focusing on systems-based planning to ensure continuum-wide value
* Integrating e-prescribing into work processes to gain support from physicians, pharmacists and other prescribers
* Increasing leadership commitment to communicate the need for change, remove barriers and ensure progress
* Updating legislation and regulation to support e-prescribing
Enabling e-Prescribing in Canada
CMA and CPhA believe that we can achieve the vision that is set out in this document and address the aforementioned challenges by working collectively on five fronts:
* Health care leadership in all jurisdictions and clinical organizations must commit to make e-prescribing a reality by 2015
* Provinces and territories, with Canada Health Infoway, must complete the building blocks to support e-prescribing by increasing Electronic Medical Record (EMR) adoption at the point of care, finishing the work on the Drug Information Systems (DIS) in all jurisdictions and building the connectivity among the points of care and the DIS systems
* Pharmacist and medical organizations in conjunction with provinces, territories and Canada Health Infoway must identify clear benefits for clinicians (enhancing the effectiveness of care delivery and in efficiencies in changing workflows) to adopt e-prescribing and focus their efforts on achieving these benefits in the next three years
* Provinces, territories and regulatory organizations must create a policy/regulatory environment that supports e-prescribing which facilitates the role of clinicians in providing health care to their patients
* Provinces and territories must harmonize the business rules and e-health standards to simplify implementation and conformance by software vendors and allow more investment in innovation.
1 Health Care Transformation in Canada, Canadian Medical Association, June 2010; Blueprint for Pharmacy Implementation Plan, Canadian Pharmacists Association, September 2009
APPROACHES TO ENHANCING THE QUALITY OF DRUG THERAPY
A JOINT STATEMENT BY THE CMA ANDTHE CANADIAN PHARMACEUTICAL ASSOCIATION
This joint statement was developed by the CMA and the Canadian Pharmaceutical Association, a national association of pharmacists, and includes the goal of drug therapy, strategies for collaboration to optimize drug therapy and physicians' and pharmacists' responsibilities in drug therapy. The statement recognizes the importance of patients, physicians and pharmacists working in close collaboration and partnership to achieve optimal outcomes from drug therapy.
Goal of This Joint Statement
The goal of this joint statement is to promote optimal drug therapy by enhancing communication and working relationships among patients, physicians and pharmacists. It is also meant to serve as an educational resource for pharmacists and physicians so that they will have a clearer understanding of each other's responsibilities in drug therapy. In the context of this statement, a "patient" may include a designated patient representative, such as a parent, spouse, other family member, patient advocate or health care provider.
Physicians and pharmacists have a responsibility to work with their patients to achieve optimal outcomes by providing high-quality drug therapy. The important contribution of all members of the health care team and the need for cooperative working relationships are recognized; however, this statement focuses on the specific relationships among pharmacists, physicians and patients with respect to drug therapy.
This statement is a general guide and is not intended to describe all aspects of physicians' or pharmacists' activities. It is not intended to be restrictive, nor should it inhibit positive developments in pharmacist-physician relationships or in their respective practices that contribute to optimal drug therapy. Furthermore, this statement should be used and interpreted in accordance with applicable legislation and other legal requirements.
This statement will be reviewed and assessed regularly to ensure its continuing applicability to medical and pharmacy practices.
Goal of Drug Therapy
The goal of drug therapy is to improve patients' health and quality of life by preventing, eliminating or controlling diseases or symptoms. Optimal drug therapy is safe, effective, appropriate, affordable, cost-effective and tailored to meet the needs of patients, who participate, to the best of their ability, in making informed decisions about their therapy. Patients require access to necessary drug therapy and specific, unbiased drug information to meet their individual needs. Providing optimal drug therapy also requires a valid and accessible information base generated by basic, clinical, pharmaceutical and other scientific research.
Working Together for Optimal Drug Therapy
Physicians and pharmacists have complementary and supportive responsibilities in providing optimal drug therapy. To achieve this goal, and to ensure that patients receive consistent information, patients, pharmacists and physicians must work cooperatively and in partnership. This requires effective communication, respect, trust, and mutual recognition and understanding of each other's complementary responsibilities. The role of each profession in drug therapy depends on numerous factors, including the specific patient and his or her drug therapy, the prescription status of the drug concerned, the setting and the patient-physician-pharmacist relationship. However, it is recognized that, in general, each profession may focus on certain areas more than others.
For example, when counselling patients on their drug therapy, a physician may focus on disease-specific counselling, goals of therapy, risks and benefits and rare side effects, whereas a pharmacist may focus on correct usage, treatment adherence, dosage, precautions, dietary restrictions and storage. Areas of overlap may include purpose, common side effects and their management and warnings regarding drug interactions and lifestyle concerns. Similarly, when monitoring drug therapy, a physician would focus on clinical progress toward treatment goals, whereas a pharmacist may focus on drug effects, interactions and treatment adherence; both would monitor adverse effects.
Both professions should tailor drug therapy, including education, to meet the needs of individual patients. To provide continuity of care and to promote consistency in the information being provided, it is important that both pharmacists and physicians assess the patients' knowledge and identify and reinforce the educational component provided by the other.
Strategies for Collaborating to Optimize Drug Therapy
Patients, physicians and pharmacists need to work in close collaboration and partnership to achieve optimal drug therapy. Strategies to facilitate such teamwork include the following.
- Respecting and supporting patients' rights to make informed decisions regarding their drug therapy.
- Promoting knowledge, understanding and acceptance by physicians and pharmacists of their responsibilities in drug therapy and fostering widespread communication of these responsibilities so they are clearly understood by all.
- Supporting both professions' relationship with patients, and promoting a collaborative approach to drug therapy within the health care team. Care must be taken to maintain patients' trust and their relationship with other caregivers.
- Sharing relevant patient information for the enhancement of patient care, in accordance and compliance with all of the following: ethical standards to protect patient privacy, accepted medical and pharmacy practice, and the law. Patients should inform their physician and pharmacist of any information that may assist in providing optimal drug therapy.
- Increasing physicians' and pharmacists' awareness that it is important to make themselves readily available to each other to communicate about a patient for whom they are both providing care.
- Enhancing documentation (e.g., clearly written prescriptions and communication forms) and optimizing the use of technology (e.g., e-mail, voice mail and fax) in individual practices to enhance communication, improve efficiency and support consistency in information provided to patients.
- Developing effective communication and administrative procedures between health care institutions and community-based pharmacists and physicians to support continuity of care.
- Developing local communication channels and encouraging dialogue between the professions (e.g., through joint continuing education programs and local meetings) to promote a peer-review-based approach to local prescribing and drug-use issues.
- Teaching a collaborative approach to patient care as early as possible in the training of pharmacists and physicians.
- Developing effective communication channels and encouraging dialogue among patients, physicians and pharmacists at the regional, provincial, territorial and national levels to address issues such as drug-use policy, prescribing guidelines and continuing professional education.
- Collaborating in the development of technology to enhance communication in practices (e.g., shared patient databases relevant to drug therapy).
- Working jointly on committees and projects concerned with issues in drug therapy such as patient education, treatment adherence, formularies and practice guidelines, hospital-to-community care, cost-control strategies, sampling and other relevant policy issues concerning drug therapy.
- Fostering the development and utilization of a high-quality clinical and scientific information base to support evidence-based decision making.
The Physician's Responsibilities
Physicians and pharmacists recognize the following responsibilities in drug therapy as being within the scope of physicians' practice, on the basis of such factors as physicians' education and specialized skills, relationship with patients and practice environment. Some responsibilities may overlap with those of pharmacists (see The Pharmacist's Responsibilities). In addition, it is recognized that practice environments within medicine may differ and may affect the physician's role.
- Assessing health status, diagnosing diseases, assessing the need for drug therapy and providing curative, preventive, palliative and rehabilitative drug therapy in consultation with patients and in collaboration with caregivers, pharmacists and other health care professionals, when appropriate.
- Working with patients to set therapeutic goals and monitor progress toward such goals in consultation with caregivers, pharmacists and other health care providers, when appropriate.
- Monitoring and assessing response to drug therapy, progress toward therapeutic goals and patient adherence to the therapeutic plan; when necessary, revising the plan on the basis of outcomes of current therapy and progress toward goals of therapy, in consultation with patients and in collaboration with caregivers, pharmacists and other health care providers, when appropriate.
- Carrying out surveillance of and assessing patients for adverse reactions to drugs and other unanticipated problems related to drug therapy, revising therapy and, when appropriate, reporting adverse reactions and other complications to health authorities.
- Providing specific information to patients and caregivers about diagnosis, indications and treatment goals, and the action, benefits, risks and potential side effects of drug therapy.
- Providing and sharing general and specific information and advice about disease and drugs with patients, caregivers, health care providers and the public.
- Maintaining adequate records of drug therapy for each patient, including, when applicable, goals of therapy, therapy prescribed, progress toward goals, revisions of therapy, a list of drugs (both prescription and over-the-counter drugs) currently taken, adverse reactions to therapy, history of known drug allergies, smoking history, occupational exposure or risk, known patterns of alcohol or substance use that may influence response to drugs, history of treatment adherence and attitudes toward drugs. Records should also document patient counselling and advice given, when appropriate.
- Ensuring safe procurement, storage, handling, preparation, distribution, dispensing and record keeping of drugs (in keeping with federal and provincial regulations and the CMA policy summary "Physicians and the Pharmaceutical Industry (Update 1994)" (Can Med Assoc J 1994;150:256A-C.) when the patient cannot reasonably receive such services from a pharmacist.
- Maintaining a high level of knowledge about drug therapy through critical appraisal of the literature and continuing professional development.
Care must be provided in accordance with legislation and in an atmosphere of privacy, and patient confidentiality must be maintained. Care also should be provided in accordance with accepted scientific and ethical standards and procedures.
The Pharmacist's Responsibilities
Pharmacists and physicians recognize the following responsibilities as being within the scope of pharmacists' practice, on the basis of such factors as pharmacists' education and specialized skills, relationship with patients and practice environment. Some responsibilities may overlap with those of physicians (see The Physician's Responsibilities). In addition, it is recognized that, in selected practice environments, the pharmacists' role may differ considerably.
- Evaluating the patients' drug-therapy record ("drug profile") and reviewing prescription orders to ensure that a prescribed therapy is safe and to identify, solve or prevent actual or potential drug-related problems or concerns. Examples include possible contraindications, drug interactions or therapeutic duplication, allergic reactions and patient nonadherence to treatment. Significant concerns should be discussed with the prescriber.
- Ensuring safe procurement, storage, preparation, distribution and dispensing of pharmaceutical products (in keeping with federal, provincial and other applicable regulations).
- Discussing actual or potential drug-related problems or concerns and the purpose of drug therapy with patients, in consultation with caregivers, physicians and health care providers, when appropriate.
- Monitoring drug therapy to identify drug-related problems or concerns, such as lack of symptomatic response, lack of adherence to treatment plans and suspected adverse effects. Significant concerns should be discussed with the physician.
- Advising patients and caregivers on the selection and use of nonprescription drugs and the management of minor symptoms or ailments.
- Directing patients to consult their physician for diagnosis and treatment when required. Pharmacists may be the first contact for health advice. Through basic patient assessment (i.e., observation and interview) they should identify the need for referral to a physician or an emergency department.
- Notifying physicians of actual or suspected adverse reactions to drugs and, when appropriate, reporting such reactions to health authorities.
- Providing specific information to patients and caregivers about drug therapy, taking into account patients' existing knowledge about their drug therapy. This information may include the name of the drug, its purpose, potential interactions or side effects, precautions, correct usage, methods to promote adherence to the treatment plan and any other health information appropriate to the needs of the patient.
- Providing and sharing general and specific drug-related information and advice with patients, caregivers, physicians, health care providers and the public.
- Maintaining adequate records of drug therapy to facilitate the prevention, identification and management of drug-related problems or concerns. These records should contain, but are not limited to, each patient's current and past drug therapy (including both prescribed and selected over-the-counter drugs), drug-allergy history, appropriate demographic data and, if known, the purpose of therapy and progress toward treatment goals, adverse reactions to therapy, the patient's history of adherence to treatment, attitudes toward drugs, smoking history, occupational exposure or risk, and known patterns of alcohol or substance use that may influence his or her response to drugs. Records should also document patient counselling and advice given, when appropriate.
- Maintaining a high level of knowledge about drug therapy through critical appraisal of the literature and continuing professional development.
Care must be provided in accordance with legislation and in an atmosphere of privacy, and patient confidentiality must be maintained. Products and services should be provided in accordance with accepted scientific and ethical standards and procedures.