Skip header and navigation
CMA PolicyBase

Policies that advocate for the medical profession and Canadians


4 records – page 1 of 1.

Appropriateness in health care

https://policybase.cma.ca/en/permalink/policy11516
Last Reviewed
2020-02-29
Date
2014-12-06
Topics
Health care and patient safety
. This policy document presents the Canadian Medical Association definition of appropriateness which
  1 document  
Policy Type
Policy document
Last Reviewed
2020-02-29
Date
2014-12-06
Topics
Health care and patient safety
Text
CMA POLICY Appropriateness in Health Care Summary This paper discusses the concept of appropriateness in health care and advances the following definition: The Canadian Medical Association adopts the following definition for appropriateness in health care: It is the right care, provided by the right providers, to the right patient, in the right place, at the right time, resulting in optimal quality care. Building on that definition it makes the following policy recommendations: * Provinces and territories should work with providers to develop a comprehensive framework by which to assess the appropriateness of health care. * Provinces and territories should work with providers to develop robust educational products on appropriateness in health care and to disseminate evidence-informed strategies for necessary changes in care processes. * Provinces and territories should work with providers to put in place incentives to decrease the provision of marginally useful or unnecessary care. Introduction As health systems struggle with the issue of sustainability and evidence that the quality of care is often sub-optimal, increasing attention is focused on the concept of appropriateness. A World Health Organization study published in 2000 described appropriateness as "a complex, fuzzy issue"1. Yet if the term is to be applied with benefit to health care systems, it demands definitional clarity. This policy document presents the Canadian Medical Association definition of appropriateness which addresses both quality and value. The roots of the definition are anchored in the evolution of Canadian health care over the last two decades. The document then considers the many issues confronting the operationalization of the term. It concludes that appropriateness can play a central role in positive health system transformation. Definition At the Canadian Medical Association General Council in 2013 the following resolution was adopted: The Canadian Medical Association adopts the following definition for appropriateness in health care: It is the right care, provided by the right providers, to the right patient, in the right place, at the right time, resulting in optimal quality care. This definition has five key components: * right care is based on evidence for effectiveness and efficacy in the clinical literature and covers not only use but failure to use; * right provider is based on ensuring the provider's scope of practice adequately meets but does not far exceed the skills and knowledge to deliver the care; * right patient acknowledges that care choices must be matched to individual patient characteristics and preferences and must recognize the potential challenge of reconciling patient and practitioner perceptions; * right venue emphasizes that some settings are better suited in terms of safety and efficiency to delivering a specific type of care than others; * right time indicates care is delivered in a timely manner consistent with agreed upon bench marks. It is essential to appreciate that the "right cost" is a consequence of providing the right care, that it is an outcome rather than an input. In other words, if all five components above are present, high quality care will have been delivered with the appropriate use of resources, that is, at the right cost. Equally, however, it should be cautioned that right cost may not necessarily be the affordable cost. For example, a new drug or imaging technology may offer small but demonstrable advantages over older practices, but at an enormous increase in cost. Some might argue that right care includes the use of the newer drug or technology, while others would contend the excessive opportunity costs must be taken into consideration such that the older practices remain the right care. An Evolving Canadian Perspective from 1996 to 2013 In a pioneering paper from 1996 Lavis and Anderson wrote: ...there are two distinct types of appropriateness: appropriateness of a service and appropriateness of the setting in which care is provided. The differences between the two parallel the differences between two other concepts in health care: effectiveness and cost-containment...An appropriate service is one that is expected to do more good than harm for a patient with a given indication...The appropriateness of the setting in which care is provided is related to cost effectiveness2. This very serviceable definition moved beyond a narrow clinical conception based solely on the therapeutic impact of an intervention on a patient, to broader contextual consideration focused on venue. Thus, for example, the care provided appropriately in a home-care setting might not be at all appropriate if given in a tertiary care hospital. Significantly, the authors added this important observation: "Setting is a proxy measure of the resources used to provide care"2. This sentence is an invitation to expand the original Lavis and Anderson definition to encompass other resources and inputs identified over the ensuing decades. Three elements are especially important. Timeliness became an issue in Canadian health care just as the Lavis and Anderson paper appeared. In 1997 almost two-thirds of polled Canadians felt surgical wait times were excessive, up from just over half of respondents a year earlier3. By 2004 concern with wait times was sufficiently pervasive that when the federal government and the provinces concluded the First Ministers' Agreement, it included obligations to provide timely access to cancer care, cardiac care, diagnostic imaging, joint replacement and sight restoration4. These rapid developments indicate that timeliness was now considered an essential element in determining the appropriateness of care. A second theme that became prominent in health care over the last two decades was the concept of patient-centredness. When the Canadian Medical Association released its widely endorsed Health Care Transformation in Canada in 2010, the first principle for reform was building a culture of patient-centred care. Succinctly put, this meant that "health care services are provided in a manner that works best for patients"5. To begin the process of operationalizing this concept CMA proposed a Charter for Patient-centred Care. Organized across seven domains, it included the importance of: allowing patients to participate fully in decisions about their care; respecting confidentiality of health records; and ensuring care provided is safe and appropriate. This sweeping vision underscores the fact that care which is not matched to the individual patient cannot be considered appropriate care. A third significant development over the last two decades was heightened awareness of the importance of scopes of practice. This awareness arose in part from the emphasis placed on a team approach in newer models of primary care6, but also from the emergence of new professions such as physician assistants, and the expansion of scopes of practice for other professionals such as pharmacists7. As the same health care activity could increasingly be done by a wider range of health professionals, ensuring the best match between competence required and the service provided became an essential element to consider when defining appropriateness. Under-qualified practitioners could not deliver quality care, while overly-qualified providers were a poor use of scarce resources. To summarize, as a recent scoping review suggested, for a complete conceptualization of appropriateness in 2013 it is necessary to add the right time, right patient and right provider to the previously articulated right care and right setting8. Why Appropriateness Matters The most frequent argument used to justify policy attention to appropriateness is health system cost. There is a wealth of evidence that inappropriate care - avoidable hospitalizations, for example, or alternative level of care patients in acute care beds - is wide spread in Canada9; eliminating this waste is critical to system sustainability. In Saskatchewan, for example, Regina and Saskatoon contracted in 2011 with private clinics to provide a list of 34 surgical procedures. Not only were wait times reduced, but costs were 26% lower in the surgical clinics than in hospitals for doing the same procedures10. There is, however, an equally important issue pointing to the importance of ensuring appropriate care: sub-optimal health care quality. In the United States, for example, a study evaluated performance on 439 quality indicators for 30 acute and chronic conditions. Patients received 54.9% of recommended care, ranging from a high of 78.7% for senile cataracts to 10.5% for alcohol dependence11. A more recent Australian study used 522 quality indicators to assess care for 22 common conditions. Patients received clinically appropriate care in 57% of encounters, with a range from 90% for coronary artery disease to 13% for alcohol dependence12. While no comparable comprehensive data exist for Canada, it is unlikely the practices in our system depart significantly from peer nations. Focusing on appropriateness of care, then, is justified by both fiscal and quality concerns. Methodology: the Challenge of Identifying Appropriateness While there is a clear need to address appropriateness - in all its dimensions - the methods by which to assess the appropriateness of care are limited and, to date, have largely focused on the clinical aspect. The most frequently used approach is the Rand/University of California Los Angeles (Rand) method. It provides panels of experts with relevant literature about a particular practice and facilitates iterative discussion and ranking of the possible indications for using the practice. Practices are labeled appropriate, equivocal or inappropriate13. A systematic review in 2012 found that for use on surgical procedures the method had good test-retest reliability, interpanel reliability and construct validity14. However, the method has been criticized for other short-comings: panels in different countries may reach different conclusions when reviewing the same evidence; validity can only be tested against instruments such as clinical practice guidelines that themselves may have a large expert opinion component2; Rand appropriateness ratings apply to an "average" patient, which cannot account for differences across individuals; and, finally, Rand ratings focus on appropriateness when a service is provided but does not encompass underuse, that is, failure to provide a service that would have been appropriate9. The Rand method, while not perfect, is the most rigorous approach to determining clinical appropriateness yet devised. It has recently been suggested that a method based on extensive literature review can identify potentially ineffective or harmful practices; when applied to almost 6000 items in the Australian Medical Benefits Schedule, 156 were identified that may be inappropriate15. This method also presents challenges. For example, the authors of a study using Cochrane reviews to identify low-value practices note that the low-value label resulted mainly from a lack of randomized evidence for effectiveness16. Assessing the appropriateness of care setting has focused almost exclusively on hospitals. Some diagnoses are known to be manageable in a community setting by primary care or specialty clinics. The rate of admissions for these ambulatory care sensitive conditions (ACSCs) - which fell from 459 per 100,000 population in 2001-02 to 320 per 100,00 in 2008-09 - is one way of gauging the appropriateness of the hospital as a care venue9. A second measure is the number of hospital patients who do not require either initial or prolonged treatment in an acute care setting. Proprietorial instruments such as the Appropriateness Evaluation Protocol (AEP)17or the InterQual Intensity of Service, Severity of Illness and Discharge Screen for Acute Care (ISD-AC)18 have been used to assess the appropriateness of hospital care for individual patients. While these instruments have been applied to Canadian hospital data19,20, there is a lack of consensus in the literature as to the reliability and utility of such tools21-23. Benchmarks exist for appropriate wait times for some types of care in Canada through the work of the Wait Time Alliance4. These include: chronic pain, cancer care, cardiac care, digestive health care, emergency rooms, joint replacement, nuclear medicine, radiology, obstetrics and gynecology, pediatric surgery, plastic surgery, psychiatric illness, and sight restoration. The recommendations are based on evidence-informed expert opinion. The other two domains of appropriateness - right patient, right provider - as yet have no objective tools by which to assess appropriateness. Barriers Determining appropriateness demands a complex and time-consuming approach, and its operationalization faces a number of barriers. The availability of some health care services may be subject to political influence which will over-ride appropriateness criteria. For example, recommendations to close smaller hospitals deemed to be redundant or inefficient may not be implemented for political reasons. Patient expectations can challenge evidence-based appropriateness criteria. In a primary care setting, for instance, it may be difficult to persuade a patient with an ankle sprain that an x-ray is unlikely to be helpful. The insistence by the patient is compounded by an awareness of potential legal liability in the event that clinical judgment subsequently proves incorrect. Choosing Wisely Canada recommends physicians and patients become comfortable with evidence-informed conversations about potentially necessary care24. Traditional clinical roles are difficult to revise in order to ensure that care is provided by the most appropriate health professional. This is especially true if existing funding silos are not realigned to reflect the desired change in practice patterns. Finally, and perhaps most importantly, even if agreed upon appropriateness criteria are developed, holding practitioners accountable for their application in clinical practice is extremely difficult due to data issues25. Chart audits could be conducted to determine whether appropriateness criteria were met when specific practices were deployed, but this is not feasible on a large scale. Rates of use of some practices could be compared among peers from administrative data; however, variation in practice population might legitimately sustain practice variation. For diagnostic procedures it has been suggested that the percentage of negative results is an indicator of inappropriate use; however, most administrative claim databases would not include positive or negative test result data26. This data deficit must be addressed with health departments and regional health authorities. Important Caveats There are several additional constraints on the use of the concept by health system managers. First, the vast majority of practices have never been subject to the Rand or any other appropriateness assessment. Even for surgical procedures clinical appropriateness criteria exist for only 10 of the top 25 most common inpatient procedures and for 6 of the top 15 ambulatory procedures in the United States. Most studies are more than 5 years old27. Second, while the notion is perhaps appealing to policy makers, it is incorrect to assume that high use of a practice equates with misuse: when high-use areas are compared to low use areas, the proportion of inappropriate use has consistently been shown to be no greater in the high-use regions28,29. Finally, it is uncertain how large a saving can be realized from eliminating problematic clinical care. For example, a US study modeling the implementation of recommendations for primary care found that while a switch to preferentially prescribing generic drugs would save considerable resources, most of the other items on the list of questionable activities "are not major contributors to health care costs"30. What is important to emphasize is that even if dollars are not saved, by reducing inappropriate care better value will be realized for each dollar spent. Policy Recommendations These methodological and other challenges31 notwithstanding, the Canadian Medical Association puts forward the following recommendations for operationalizing the concept of appropriateness and of clinical practice. 1. Provinces and territories should work with providers to develop a comprehensive framework by which to assess the appropriateness of health care. Jurisdictions should develop a framework32 for identifying potentially inappropriate care, including under-use. This involves selecting criteria by which to identify and prioritize candidates for assessment; developing and applying a robust assessment methodology; and creating mechanisms to disseminate and apply the results. Frameworks must also include meaningful consideration of care venue, timeliness, patient preferences and provider scope of practice. International examples exist for some aspects of this exercise and should be adapted to jurisdictional circumstances. Necessarily, a framework will demand the collection of supporting data in a manner consistent with the following 2013 General Council resolution: The Canadian Medical Association supports the development of data on health care delivery and patient outcomes to help the medical profession develop an appropriateness framework and associated accountability standards provided that patient and physician confidentiality is maintained. 2. Provinces and territories should work with providers to develop robust educational products on appropriateness in health care and to disseminate evidence-informed strategies for necessary changes in care processes. Both trainees and practicing physicians should have access to education and guidance on the topic of appropriateness and on practices that are misused, under-used, or over-used. Appropriately designed continuing education has been shown to alter physician practice. Point of care guidance via the electronic medical record offers a further opportunity to alert clinicians to practices that should or should not be done in the course of a patient encounter33. An initiative co-led by the Canadian Medical Association that is designed to educate the profession about the inappropriate over use of diagnostic and therapeutic interventions is Choosing Wisely Canada. The goal is to enhance quality of care and only secondarily to reduce unnecessary expenditures. It is an initiative consistent with the intent of two resolutions from the 2013 General Council: The Canadian Medical Association will form a collaborative working group to develop specialty-specific lists of clinical tests/interventions and procedures for which benefits have generally not been shown to exceed the risks. The Canadian Medical Association believes that fiscal benefits and cost savings of exercises in accountability and appropriateness in clinical care are a by-product rather than the primary focus of these exercises. 3. Provinces and territories should work with providers to put in place incentives to decrease the provision of marginally useful or unnecessary care. Practitioners should be provided with incentives to eliminate inappropriate care. These incentives may be financial - delisting marginal activities or providing bonuses for achieving utilization targets for appropriate but under-used care. Any notional savings could also be flagged for reinvestment in the health system, for example, to enhance access. Giving physicians the capacity to participate in audit and feedback on their use of marginal practices in comparison to peers generally creates a personal incentive to avoid outlier status. Public reporting by group or institution may also move practice towards the mean30. In any such undertakings to address quality or costs through changes in practice behaviour it is essential that the medical profession play a key role. This critical point was captured in a 2013 General Council resolution: The Canadian Medical Association will advocate for adequate physician input in the selection of evidence used to address costs and quality related to clinical practice variation. Conclusion When appropriateness is defined solely in terms of assessing the clinical benefit of care activities it can provide a plausible rational for "disinvestment in" or "delisting of" individual diagnostic or therapeutic interventions. However, such a narrow conceptualization of appropriateness cannot ensure that high quality care is provided with the optimal use of resources. To be truly useful in promoting quality and value appropriateness must be understood to mean the right care, provided by the right provider, to the right patient, in the right venue, at the right time. Achieving these five components of health care will not be without significant challenges, beginning with definitions and moving on to complex discussions on methods of measurement. Indeed, it may prove an aspirational goal rather than a completely attainable reality. But if every encounter in the health system - a hospitalization, a visit to a primary care provider, an admission to home care - attempted to meet or approximate each of the five criteria for appropriateness, a major step towards optimal care and value will have been achieved across the continuum. Viewed in this way, appropriateness has the capacity to become an extraordinarily useful organizing concept for positive health care transformation in Canada. Approved by CMA Board on December 06, 2014 References 1. World Health Organization. Appropriateness in Health Care Services, Report on a WHO Workshop. Copenhagen: WHO; 2000. 2. Lavis JN, Anderson GM. Appropriateness in health care delivery: definitions, measurement and policy implications. CMAJ. 1996;154(3):321-8. 3. Sanmartin C, Shortt SE, Barer ML, Sheps S, Lewis S, McDonald PW. Waiting for medical services in Canada: lots of heat, but little light. CMAJ. 2000;162(9):1305-10. 4. Wait Time Alliance. Working to Improve Wait Times Across Canada. Toronto: Wait Time Alliance; 2014. Available: http://www.waittimealliance.ca. (accessed April 18, 2013) 5. Canadian Medical Association. Health Care Transformation in Canada. Ottawa: Canadian Medical Association; 2010. 6. Canadian Medical Association. CMA Policy: Achieving Patient-centred Collaborative Care. Ottawa: Canadian Medical Association; 2008. 7. Maxwell-Alleyne A, Farber A. Pharmacists' expanded scope of practice: Professional obligations for physicians and pharmacists working collaboratively. Ont Med Rev. 2013;80(4):17-9. 8. Sanmartin C, Murphy K, Choptain N, et al. Appropriateness of healthcare interventions: concepts and scoping of the published literature. Int J Technol Assess Health Care. 2008;24(3)342-9. 9. Canadian Institute for Health Information. Health Care in Canada 2010. Ottawa: CIHI; 2010. 10. MacKinnon J. Health Care Reform from the Cradle of Medicare. Ottawa: Macdonald-Laurier Institute; 2013. 11. McGlynn EA, Asch SM, Adams J, et al. The quality of health care delivered to adults in the United States. NEJM. 2003;348(26):2635-45. 12. Runciman WB, Hunt TD, Hannaford NA, et al. CareTrack: assessing the appropriateness of health care delivery in Australia. Med J Aust. 2012;197(2):100-5. 13. Brook RH, Chassin MR, Fink A, Solomon DH, Kosecoff J, Park RE. A method for the detailed assessment of the appropriateness of medical technologies. Int J Technol Assess Health Care. 1986;2(1):53-63. 14. Lawson EH, Gibbons MM, Ko CY, Shekelle PG. The appropriateness method has acceptable reliability and validity for assessing overuse and underuse of surgical procedures. J Clin Epidemiol. 2012;65(11):1133-43. 15. Elshaug AG, Watt AM, Mundy L, Willis CD. Over 150 potentially low-value health care practices: an Australian study. Med J Aust. 2012;197(10):556-60. 16. Garner S, Docherty M, Somner J, et al. Reducing ineffective practice: challenges in identifying low-value health care using Cochrane systematic reviews. J Health Serv Res Policy. 2013;18(1):6-12. 17. Gertman PM, Restuccia JD. The appropriateness evaluation protocol: a technique for assessing unnecessary days of hospital care. Med Care. 1981;19(8):855-71. 18. Mitus AJ. The birth of InterQual: evidence-based decision support criteria that helped change healthcare. Prof Case Manag. 2008;13(4):228-33. 19. DeCoster C, Roos NP, Carriere KC, Peterson S. Inappropriate hospital use by patients receiving care for medical conditions: targeting utilization review. CMAJ. 1997;157(7):889-96. 20. Flintoft VF, Williams JI, Williams RC, Basinski AS, Blackstien-Hirsch P, Naylor CD. The need for acute, subacute and nonacute care at 105 general hospital sites in Ontario. Joint Policy and Planning Committee Non-Acute Hospitalization Project Working Group. CMAJ . 1998;158(10):1289-96. 21. Kalant N, Berlinguet M, Diodati JG, Dragatakis L, Marcotte F. How valid are utilization review tools in assessing appropriate use of acute care beds? CMAJ. 2000;162(13):1809-13. 22. McDonagh MS, Smith DH, Goddard M. Measuring appropriate use of acute beds. A systematic review of methods and results. Health policy. 2000;53(3):157-84. 23. Vetter N. Inappropriately delayed discharge from hospital: what do we know? BMJ. 2003;326(7395):927-8. 24. Choosing Wisely Canada. Recent News. Ottawa: Choosing Wisely Canada; 2015. Available: www.choosingwiselycanada.org. (accessed Dec 2014) 25. Garner S, Littlejohns P. Disinvestment from low value clinical interventions: NICEly done? BMJ. 2011;343:d4519. 26. Baker DW, Qaseem A, Reynolds PP, Gardner LA, Schneider EC. Design and use of performance measures to decrease low-value services and achieve cost-conscious care. Ann Intern Med. 2013;158(1):55-9. 27. Lawson EH, Gibbons MM, Ingraham AM, Shekelle PG, Ko CY. Appropriateness criteria to assess variations in surgical procedure use in the United States. Arch Surg. 2011;146(12):1433-40. 28. Chassin MR, Kosecoff J, Park RE, et al. Does inappropriate use explain geographic variations in the use of health care services? A study of three procedures. JAMA. 1987;258(18):2533-7. 29. Keyhani S, Falk R, Bishop T, Howell E, Korenstein D. The relationship between geographic variations and overuse of healthcare services: a systematic review. Med care. 2012;50(3):257-61. 30. Kale MS, Bishop TF, Federman AD, Keyhani S. "Top 5" lists top $5 billion. Arch Intern Med. 2011;171(20):1856-8. 31. Elshaug AG, Hiller JE, Tunis SR, Moss JR. Challenges in Australian policy processes for disinvestment from existing, ineffective health care practices. Aust New Zealand Health Policy. 2007;4:23. 32. Elshaug AG, Moss JR, Littlejohns P, Karnon J, Merlin TL, Hiller JE. Identifying existing health care services that do not provide value for money. Med J Aust. 2009;190(5):269-73. 33. Shortt S GM, Gorbet S. Making medical practice safer: the role of public policy. Int J Risk Saf Med. 2010;22(3):159-68.
Documents
Less detail

Best practices for smartphone and smart-device clinical photo taking and sharing

https://policybase.cma.ca/en/permalink/policy13860
Date
2018-03-03
Topics
Health information and e-health
Ethics and medical professionalism
  1 document  
Policy Type
Policy document
Date
2018-03-03
Topics
Health information and e-health
Ethics and medical professionalism
Text
Clinical photography is a valuable tool for physicians. Smartphones, as well as other devices supporting network connectivity, offer a convenient, efficient method to take and share images. However, due to the private nature of the information contained in clinical photographs there are concerns as to the appropriate storage, dissemination, and documentation of clinical images. Confidentiality of image data must be considered and the dissemination of these images onto servers must respect the privacy and rights of the patient. Importantly, patient information should be considered as any information deriving from a patient, and the concepts outlined therefore apply to any media that can be collected on, or transmitted with, a smart-device. Clinical photography can aid in documenting form and function, in tracking conditions and wound healing, in planning surgical operations, and in clinical decision-making. Additionally, clinical photographs can provide physicians with a valuable tool for patient communication and education. Due to the convenience of this type of technology it is not appropriate to expect physicians to forego their use in providing their patients with the best care available. The technology and software required for secure transfer, communication, and storage of clinical media is presently available, but many devices have non-secure storage/dissemination options enabled and lack user-control for permanently deleting digital files. In addition, data uploaded onto server systems commonly cross legal jurisdictions. Many physicians are not comfortable with the practice, citing security, privacy, and confidentiality concerns as well as uncertainty in regards to regional regulations governing this practice.1 Due to concern for patient privacy and confidentiality it is therefore incredibly important to limit the unsecure or undocumented acquisition or dissemination of clinical photographs. To assess the current state of this topic, Heyns et al. have reviewed the accessibility and completeness of provincial and territorial medical regulatory college guidelines.2 Categories identified as vital and explored in this review included: Consent; Storage; Retention; Audit; Transmission; and Breach. While each regulatory body has addressed limited aspects of the overall issue, the authors found a general lack of available information and call for a unified document outlining pertinent instructions for conducting clinical photography using a smartphone and the electronic transmission of patient information.2 The discussion of this topic will need to be ongoing and it is important that physicians are aware of applicable regulations, both at the federal and provincial levels, and how these regulations may impact the use of personal devices. The best practices supported here aim to provide physicians and healthcare providers with an understanding of the scope and gravity of the current environment, as well as the information needed to ensure patient privacy and confidentiality is assessed and protected while physicians utilize accessible clinical photography to advance patient care. Importantly, this document only focusses on medical use (clinical, academic, and educational) of clinical photography and, while discussing many core concepts of patient privacy and confidentiality of information, should not be perceived as a complete or binding framework. Additionally, it is recommended that physicians understand the core competencies of clinical photography, which are not described here. The Canadian Medical Association (CMA) suggests that the following recommendations be implemented, as thoroughly as possible, to best align with the CMA policy on the Principles for the Protection of Patient Privacy (CMA Policy PD2018-02). These key recommendations represent a non-exhaustive set of best practices - physicians should seek additional information as needed to gain a thorough understanding and to stay current in this rapidly changing field. KEY RECOMMENDATIONS 1. CONSENT * Informed consent must be obtained, preferably prior, to photography with a mobile device. This applies for each and any such encounter and the purpose made clear (i.e. clinical, research, education, publication, etc.). Patients should also be made aware that they may request a copy of a picture or for a picture to be deleted. * A patient's consent to use electronic transmission does not relieve a physician of their duty to protect the confidentiality of patient information. Also, a patient's consent cannot override other jurisdictionally mandated security requirements. * All patient consents (including verbal) should be documented. The acquisition and recording of patient consent for medical photography/dissemination may be held to a high standard of accountability due to the patient privacy and confidentiality issues inherent in the use of this technology. Written and signed consent is encouraged. * Consent should be considered as necessary for any and all photography involving a patient, whether or not that patient can be directly recognized, due to the possibility of linked information and the potential for breach of privacy. The definition of non-identifiable photos must be carefully considered. Current technologies such as face recognition and pattern matching (e.g. skin markers, physical structure, etc.), especially in combination with identifying information, have the potential to create a privacy breach. * Unsecure text and email messaging requires explicit patient consent and should not be used unless the current gold standards of security are not accessible. For a patient-initiated unsecure transmission, consent should be clarified and not assumed. 2. TRANSMISSION * Transmission of photos and patient information should be encrypted as per current-day gold standards (presently, end-to-end encryption (E2EE)) and use only secure servers that are subject to Canadian laws. Explicit, informed consent is required otherwise due to privacy concerns or standards for servers in other jurisdictions. Generally, free internet-based communication services and public internet access are unsecure technologies and often operate on servers outside of Canadian jurisdiction. * Efforts should be made to use the most secure transmission method possible. For data security purposes, identifying information should never be included in the image, any frame of a video, the file name, or linked messages. * The sender should always ensure that each recipient is intended and appropriate and, if possible, receipt of transmission should be confirmed by the recipient. 3. STORAGE * Storing images and data on a smart-device should be limited as much as possible for data protection purposes. * Clinical photos, as well as messages or other patient-related information, should be completely segregated from the device's personal storage. This can be accomplished by using an app that creates a secure, password-protected folder on the device. * All information stored (on internal memory or cloud) must be strongly encrypted and password protected. The security measures must be more substantial than the general password unlock feature on mobile devices. * Efforts should be made to dissociate identifying information from images when images are exported from a secure server. Media should not be uploaded to platforms without an option for securely deleting information without consent from the patient, and only if there are no better options. Automatic back-up of photos to unsecure cloud servers should be deactivated. Further, other back-up or syncing options that could lead to unsecure server involvement should be ascertained and the risks mitigated. 4. Cloud storage should be on a Canadian and SOCII certified server. Explicit, informed consent is required otherwise due to privacy concerns for servers in other jurisdictions. 5. AUDIT & RETENTION * It is important to create an audit trail for the purposes of transparency and medical best practice. Key information includes patient and health information, consent type and details, pertinent information regarding the photography (date, circumstance, photographer), and any other important facts such as access granted/deletion requests. * Access to the stored information must be by the authorized physician or health care provider and for the intended purpose, as per the consent given. Records should be stored such that it is possible to print/transfer as necessary. * Original photos should be retained and not overwritten. * All photos and associated messages may be considered part of the patient's clinical records and should be maintained for at least 10 years or 10 years after the age of majority, whichever is longer. When possible, patient information (including photos and message histories between health professionals) should be retained and amalgamated with a patient's medical record. Provincial regulations regarding retention of clinical records may vary and other regulations may apply to other entities - e.g. 90 years from date of birth applies to records at the federal level. * It may not be allowable to erase a picture if it is integral to a clinical decision or provincial, federal, or other applicable regulations require their retention. 6. BREACH * Any breach should be taken seriously and should be reviewed. All reasonable efforts must be made to prevent a breach before one occurs. A breach occurs when personal information, communication, or photos of patients are stolen, lost, or mistakenly disclosed. This includes loss or theft of one's mobile device, texting to the wrong number or emailing/messaging to the wrong person(s), or accidentally showing a clinical photo that exists in the phone's personal photo album. * It should be noted that non-identifying information, when combined with other available information (e.g. a text message with identifiers or another image with identifiers), can lead to highly accurate re-identification. * At present, apps downloaded to a smart-device for personal use may be capable of collecting and sharing information - the rapidly changing nature of this technology and the inherent privacy concerns requires regular attention. Use of specialized apps designed for health-information sharing that help safeguard patient information in this context is worth careful consideration. * Having remote wipe (i.e. device reformatting) capabilities is an asset and can help contain a breach. However, inappropriate access may take place before reformatting occurs. * If a smartphone is strongly encrypted and has no clinical photos stored locally then its loss may not be considered a breach. * In the event of a breach any patient potentially involved must be notified as soon as possible. The CMPA, the organization/hospital, and the Provincial licensing College should also be contacted immediately. Provincial regulations regarding notification of breach may vary. Approved by the CMA Board of Directors March 2018 References i Heyns M†, Steve A‡, Dumestre DO‡, Fraulin FO‡, Yeung JK‡ † University of Calgary, Canada ‡ Section of Plastic Surgery, Department of Surgery, University of Calgary, Canada 1 Chan N, Charette J, Dumestre DO, Fraulin FO. Should 'smart phones' be used for patient photography? Plast Surg (Oakv). 2016;24(1):32-4. 2 Unpublished - Heyns M, Steve A, Dumestre DO, Fraulin FO, Yeung J. Canadian Guidelines on Smartphone Clinical Photography.
Documents
Less detail

Principles for the protection of patient privacy

https://policybase.cma.ca/en/permalink/policy13833
Date
2017-12-09
Topics
Health information and e-health
Ethics and medical professionalism
  2 documents  
Policy Type
Policy document
Date
2017-12-09
Replaces
PD11-03 Principles for the Protection of Patients' Personal Health Information
Topics
Health information and e-health
Ethics and medical professionalism
Text
Patients have a right to privacy and physicians have a duty of confidentiality arising from the patient-physician relationship to protect patient privacy. The right to privacy flows from the principle of respect for patient autonomy, based on the individual's right to conduct and control their lives as they choose.1 When approaching any ethical question around privacy, the principle of respect for patient autonomy must be balanced against other competing principles (e.g. beneficence, non-maleficence). The protection of privacy and the concomitant duty of confidentiality are essential to foster trust in the patient-physician-relationship, the delivery of good patient care and a positive patient care experience. Privacy protection is an important issue for Canadians,2 and research suggests that patients may withhold critical health information from their health care providers because of privacy concerns.3 Patients will be more willing to share complete and accurate information if they have a relationship of trust with their physician and are confident that their information will be protected.4 In today's ever-evolving technological environment and due to the shift away from the traditional (paternalistic) physician-patient relationship, patients, physicians and other public and private stakeholders are using and sharing personal health information in new and innovative ways. This raises new challenges for clinical practice and, crucially, how to navigate expanded uses of data via the use of new technologies and the requirements of patient privacy. Institutions, clinics, and physician-group practices may share responsibility with the physician for the protection of patient information. There is thus a tension between physician and institutional responsibilities to protect patient information, challenged by the rapidly changing use and adoption of new technologies. While this will continue to redefine expectations of privacy and confidentiality, there are several foundational principles that remain unchanged. SCOPE OF POLICY The Canadian Medical Association (CMA) Principles for the Protection of Patients' Personal Health Information aim to provide guidance on key ethical considerations pertinent to the protection of patient information in a way that takes into account a physician's (including medical learner) ethical, professional, and legal obligations. The Principles are not designed to serve as a tool for legislative compliance in a particular jurisdiction or to provide a standard of care. Physicians should be aware of privacy legislation in the jurisdiction in which they practice, the standards and expectations specified by their respective regulatory authorities (including Privacy Commissioners), publications and risk management education provided by the CMPA as well as policies and procedures of any given setting (e.g., a regional health authority or a hospital). SUBSTANTIVE PRINCIPLES THAT GUIDE THE OBLIGATIONS OF THE PHYSICIAN TO PROTECT PATIENT PRIVACY 1. Trust * Trust is the cornerstone of the patient-physician relationship and plays a central role in providing the highest standard of care. * Physicians and their patients build relationships of trust that enable open and honest dialogue and foster patients' willingness to share deeply personal information (often) in conditions of vulnerability. * Physicians can cultivate and maintain patient trust by, unless the consent of the patient has been obtained to do otherwise, collecting health information only to benefit the patient, by sharing information only for that purpose, and by keeping patient information confidential; patient trust has been found to be the most powerful determinant of the level of control patients want over their medical records.5 * To maintain trust, physicians must consider the duty to care and the duty not to harm the patient in evaluating privacy requirements. * The extent to which a patient expects (and may tolerate a loss of) privacy and confidentiality is culturally and individually relative.6 2. Confidentiality * Physicians owe a duty of confidentiality to their patients; there is both an ethical (respect for autonomy) and a legal basis imposed by privacy legislation) for this duty. * The duty to maintain patient confidentiality, like trust, is fundamental to the therapeutic nature of the patient-physician relationship; it creates conditions that allow patients to openly and confidently share complete health information, resulting in a stronger physician-patient relationship and better delivery of care.7 * The duty to maintain patient confidentiality means that physicians do not share the health information with anyone outside of the patient's circle of care, unless authorized to do so by the patient.1,8 There are varying interpretations of what constitutes the patient's circle of care; this depends on the facts of the situation and the jurisdiction.9 * Privacy requirements raise complex issues in learning environments and quality improvement initiatives. It is desirable that any of the patient's physicians who will have ongoing care interactions with the patient can remain included in information-sharing about the patient. * Shared electronic health records present challenges to confidentiality. For example, patients may wish to limit some aspects of their record to only some providers within their circle of care.10 * In practice, respecting privacy and the duty of confidentiality govern the physician's role as data steward, responsible for controlling the extent to which information about the person is protected, used or disclosed.11 A central rule to balancing a patient's right to privacy and the duty of confidentiality is the "minimum necessary" use and disclosure of personal health information, whereby a data steward should use or disclose only the minimum amount of information necessary to fulfil the intended purpose. In some circumstances, de-identifying or aggregating personal health information before use or disclosure can minimize the amount of information disclosed.12 * The duty to maintain patient confidentiality is not absolute and is subject to exceptions in limited circumstances,13 i.e., when required or permitted by law to disclose information (see below in Data Stewardship: Collection, use and disclosure of personal health information). 3. Consent * Patient consent is an important mechanism for respecting patient autonomy; obtaining voluntary and informed consent to share patient information is fundamental to the protection of privacy and the duty of confidentiality. * Physicians are generally required to obtain informed consent from the patient before they can disclose the patient's personal health information. Consent is only informed if there is disclosure of matters that a reasonable person in the same circumstances would want to know, including 1) to whom the patient information will be disclosed, 2) whether it could be disclosed to other third parties, and 3) the purpose for which it could be used or disclosed. * While informed consent is required as a general rule, physicians may infer that they have the patient's implied consent to collect, use, disclose and access personal health information 1) for the purpose of providing or assisting in providing care (i.e., share only the necessary information with those involved within the patient's circle of care); and 2) to store personal health information in a medical record (i.e., paper, electronic, or hospital-based). Physicians will want to consider if it is appropriate in the circumstances to advise the patient when a disclosure has been made. * When the patient is a minor, the physician must consider whether it is the parent or the child who determines the use and disclosure of the minor's personal health information. A young person who is deemed to understand fully the implications of a decision regarding proposed collection, use or disclosure of personal health information is generally deemed to have control over their personal health information with respect to the decision. * Where the patient is not capable to provide the required consent (e.g. is deemed to be incompetent), physicians must seek consent from the patient's substitute decision-maker. 4. Physician as data steward * As data stewards, physicians have the responsibility to understand their role in protecting patient privacy and appropriate access to patient information. * The information contained in the medical record belongs to the patient who has a general right of access to their personal health information, and the right to control the use and further disclosure and to the continued confidentiality of that information. * A data steward (e.g., physician, institution or clinic) holds the physical medical record in trust for the care and benefit of the patient.14 * Physicians should provide their patients access to their medical record, if requested.15 (See below in Data Stewardship: Access to personal information). * Physicians ought to have appropriate access to personal health information and have the ability to provide their patients with access to their medical record. Appropriate access should be interpreted to include access for patient follow up (as part of the duty to care) and review for the purpose of improving patient care. * Physicians should consider consulting available resources to assist them in fulfilling their duties as data stewards. PROCEDURAL PRINCIPLES THAT GUIDE THE APPLICATION OF PHYSICIAN OBLIGATIONS Physicians must manage personal health information in compliance with relevant legislation that establishes rules governing the access, collection, use, disclosure, and retention of personal health information, provincial privacy laws, and professional expectations and regulations specified by their respective regulatory authorities. 1. Data Stewardship: Access to personal information * Patients have a right of reasonable access to the personal health information in their medical record (i.e., paper, electronic, or hospital-based) under the control or in the custody of a physician, institution, or clinic. * In exceptional situations, physicians can refuse to release the information in the patient's medical record. 2. Data Stewardship: Collection, use and disclosure of personal health information * There are circumstances where there are required (e.g., monitoring of claims for payment, subpoenas) and permitted disclosures of personal health information without patient consent (e.g., where the maintenance of confidentiality would result in a significant risk of substantial harm to the patient or to others). * Security safeguards must be in place to protect personal health information in order to ensure that only authorized collection, use, disclosure or access occurs. * Physicians play an important role in educating patients about possible consensual and non-consensual uses and disclosures that may be made with their personal health information, including secondary uses of data for, e.g., epidemiological studies, research, education, and quality assurance, that may or may not be used with explicit consent. 3. Data Stewardship: Retention of personal health information * Personal health information should be retained for the period required by any applicable legislation and as specified by their respective regulatory authorities. It may be necessary to maintain personal health information beyond the applicable period where there is a pending or anticipated legal proceeding related to the care provided to the patient. * Likewise, physicians should transfer and dispose of personal health information in compliance with any applicable legislation and professional expectations outlined by their respective regulatory authorities. * Physicians are encouraged to seek technical assistance and advice on the secure transfer, disposal, and/or selling of electronic records.15 4. Data Stewardship: Use of technology * Physicians should obtain patient consent to use electronic means and/or devices for patient care (e.g., sending digital photographs) and for communicating patient information (e.g., the use of email). To obtain informed consent, physicians should explain to patients that there are necessary benefits and risks in using technologies in clinical contexts. The CMPA has provided a written consent form to that effect that can be included in the patient's medical record. * As a general practice, physicians are encouraged to make use of technological innovations and must evaluate whether the technology is appropriate for patient care and has reasonable safeguards to protect patient privacy. Approved by the CMA Board of Directors December 2017 See also Background to CMA Policy Principles for the Protection of Patient Privacy REFERENCES 1 Martin JF. Privacy and confidentiality. In: ten Have H, Gordijn B (Eds). Handbook of global bioethics. New York: Springer, Dordrecht; 2014. p.119-37. 2 Office of the Privacy Commissioner of Canada. Canadians and privacy final report. Gatineau: Office of the Privacy Commissioner of Canada; 2009. Available: https://www.priv.gc.ca/information/por-rop/2009/ekos_2009_01_e.asp (accessed 2017 Nov 17). 3 Canadian Medical Protective Association (CMPA). Privacy and a wired world - Protecting patient health information. Ottawa: CMPA; 2011 Dec. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2011/privacy-and-a-wired-world-protecting-patient-health-information (accessed 2017 Nov 17). 4 Royal College of Physicians and Surgeons of Canada (RCPSC). Duty of confidentiality. Ottawa: RCPSC; 2017. Available: http://www.royalcollege.ca/rcsite/bioethics/cases/section-3/duty-confidentiality-e (accessed 2017 Dec 15). 5 Damschroder LJ, Pritts JL, Neblo MA, Kalarickal RJ, Creswell JW, Hayward RA. Patients, privacy and trust: patients' willingness to allow researchers to access their medical records. Soc Sci Med 2007;64:223-35. 6 Campbell JI, Eyal N, Musiimenta A, Haberer JE. Ethical questions in medical electronic adherence monitoring. J Gen Intern Med 2016;31:338-42. Available: https://link.springer.com/content/pdf/10.1007%2Fs11606-015-3502-4.pdf (accessed 2017 Nov 17). 7 Crook MA. The risks of absolute medical confidentiality. Sci Eng Ethics 2013;19:107-22. 8 Cohen I, Hoffman A, Sage W (Eds). The Oxford Handbook of U.S. Health Law. New York: Oxford University Press; 2015. 9 Canadian Medical Protective Association (CMPA). The voice of professionalism within the system of care. Ottawa: CMPA; 2012 Oct. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2012/the-voice-of-professionalism-within-the-system-of-care (accessed 2017 Nov 17). 10 Canadian Medical Protective Association (CMPA). Did you know? Patients can restrict access to their health information. Ottawa: CMPA; 2017 Nov. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2017/did-you-know-patients-can-restrict-access-to-their-health-information (accessed 2017 Nov 17). 11 Francis JG, Francis LP. Privacy, confidentiality, and justice. J Soc Philos 2014;45:408-31. 12 Burkle CM, Cascino GD. Medicine and the media: balancing the public's right to know with the privacy of the patient. Mayo Clin Proc 2011;86:1192-6. 13 Canadian Medical Protective Association (CMPA). When to disclose confidential information. Ottawa: CMPA; 2015 Mar. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2015/when-to-disclose-confidential-information (accessed 2017 Nov 17). 14 Canadian Medical Protective Association (CMPA). Releasing a patient's personal health information: What are the obligations of the physician? Ottawa: CMPA; 2012 Oct. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2012/releasing-a-patient-s-personal-health-information-what-are-the-obligations-of-the-physician (accessed 2017 Nov 17). 15 Canadian Medical Protective Association (CMPA). Protecting patient health information in electronic records. Ottawa: CMPA; 2013 Oct. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2013/protecting-patient-health-information-in-electronic-records (accessed 2017 Nov 17). (c) 2017 Canadian Medical Association. You may, for your non-commercial use, reproduce, in whole or in part and in any form or manner, unlimited copies of CMA Policy Statements provided that credit is given to Canadian Medical Association. BACKGROUND TO CMA POLICY PRINCIPLES FOR THE PROTECTION OF PATIENT PRIVACY See also CMA Policy on Principles for the Protection of Patient Privacy Context The advent of Electronic Medical Records, the rapid spread of mobile health apps, and the increasing use of social media within the health care community, have each created new challenges to maintaining a duty of confidentiality within the physician-patient relationship. These technologies present both opportunities and challenges with respect to medical professionalism.1 The permeation of these types of interactions into everyday life now places physicians in new situations that some find difficult to navigate.2 These challenges will only increase in the coming years, as the use of online technologies in health care is continuously growing.3 Canada is only in the early stages of managing the emerging issues of technology-induced errors that compromise privacy in the health care setting.4 Therefore, this paper will briefly discuss the importance of protecting privacy, followed by an overview of the main challenges to maintaining privacy as the physician-patient relationship evolves at the backdrop of emerging technologies. Privacy and Confidentiality The overlapping, but not identical, principles of the protection of privacy and the duty of confidentiality are essential to the physician-patient relationship. These principles not only foster trust, but also the delivery of effective and lasting care. Rooted in the Hippocratic Oath, the modern-day right to privacy flows from the principle of autonomy, which attributes to individuals the right to conduct and control their lives as they choose.5 Privacy protection is an important issue to Canadians,6 with research suggesting that patients may even withhold critical health information because of privacy concerns.7 Health care professionals are bound by legal and ethical standards to maintain privacy and confidentiality of patient information.8 Physicians must therefore be aware of the implications of privacy legislation specific to their jurisdiction.7 The duty to protect patient privacy is important to uphold, as health information can potentially be identifiable and sensitive; the confidentiality of this information must therefore be protected to ensure that patient privacy is not breached. 9 While the traditional, and largely obsolete, models of the physician-patient relationship involve a unidirectional flow of information, the ease at which patients can now access medical information through the Internet, and the use of social media within the health care community, have reinterpreted how information is communicated from physician to patient, and vice versa.10 We must therefore re-define expectations of privacy and confidentiality, first by distinguishing one from the other. The terms "privacy" and "confidentiality" are often used interchangeably by both researchers and clinicians. Several bioethics discussions on the distinction between these terms places confidentiality under the umbrella of privacy.11 While confidentiality involves the information itself, which is disclosed or not, privacy is about the impact of that disclosure on the person.9 Privacy seems to be more intimately linked to the individual, focusing on the circumstances under which the information is used.12-13 Confidentiality, on the other hand, is a duty that health professionals have towards their patients to not share the information exchanged during their encounter, unless authorized by the patient.5,12 In practice, the duty of confidentiality governs the physician's role as data stewards, responsible for controlling the extent to which information about the person is protected, used or disclosed.14 As one paper describes, "privacy is invaded, confidentiality is breached."13 From a patient perspective, it is important to respect and protect privacy because it allows individuals time and space to share their concerns without feeling judged or misunderstood,11 resulting in a stronger physician-patient relationship and better delivery of care. However, from a research perspective, a fine balance must be struck between using accurate information while still upholding the privacy rights of individuals.11 As such, the argument for absolute confidentiality puts a near impossible burden on research clinicians.11 Moreover, from a public safety perspective, a physician may be morally and legally required to break confidentiality in order to protect both the patient and others who may be involved. The challenge is to balance the traditional goal of confidentiality - to protect patient privacy and interest - with that of third parties and public health.5 Therefore, a central rule to balancing confidentiality with a patients' right to privacy is the "minimum necessary" use and disclosure of personal health information, whereby a data steward should use or disclose only the minimum amount of information necessary to fulfil the intended purpose.8 It is equally important to recognize that the extent to which a patient may tolerate a loss of privacy is culturally and individually relative.15 Health care providers have a legal and ethical obligation to keep patient health information private, sharing it only with the authorization of the patient.16 Informed consent, therefore, appears to be a fundamental requirement to upholding confidentiality and patient privacy rights. Issues While emerging privacy issues touch many areas of practice, this section will emphasize three of the most prominent issues in recent literature: access and use of information, electronic medical and health records and, online communication and social media. 1. Technological change and institutional data stewardship In today's ever-evolving technological environment, including the emergence of shared electronic health records, online communication, social media, mobile applications, and big data, physicians, patients and other public and private stakeholders are using and sharing personal health information in new and innovative ways. The traditional (paternalistic) model of the physician-patient relationship involved a bidirectional flow of information. However, the ease at which patients can now access medical information from alternative sources via the Internet, and the use of social media within the health care community, has redefined how information is communicated from physician to patient, and vice versa.10 This raises new challenges for clinical practice, specifically how to navigate expanded access of data via the use of new technologies and the requirements of patient privacy by effectively managing security concerns. In many situations, the physician may not be the sole or primary custodian of (i.e., control access to) the patient's records once the health information is collected. Institutions, clinics, and physician-group practices may also have responsibility for patient information and therefore play an important role in ensuring it is protected. There is thus a grey area between physician and institutional responsibilities to protect patient information, challenged by the rapidly changing use and adoption of new technologies, such as electronic health and medical records. While this will continue to redefine expectations of privacy and confidentiality, there are several foundational principles that remain unchanged. 2. Electronic medical and health records Medical records are compiled primarily to assist physicians and other health care providers in treating patients.16 Yet, they are particularly vulnerable to privacy breaches when this information is exposed to secondary uses, including epidemiological studies, research, education and quality assurance. As contemporary information management and stewardship have had to evolve in response to emerging technology, the parameters of the "medical record" have grown increasingly ambiguous.17 With the proliferation of a wide variety of new health information technology (including electronic health and medical records), concerns about quality and safety have been raised.4 There is evidence that if such technology is not designed, implemented and maintained effectively, it may result in unintended consequences, including technology-induced errors and breaches of patient privacy.4 Reports involving Canada Health Infoway have even pointed to health information technology as a tool that may sometimes reduce rather than enhance patient safety, most often due to human factors. 4 As a result, recommendations have been made to develop a reporting system that would allow health professionals to anonymously report human errors resulting from the use of health information technology - a challenge in itself, as the distinction between human and technological error is often blurred.4 In Canada, a number of efforts have been undertaken by several organizations, including Health Canada and Canada's Health Informatics Organization.4 Yet, services aimed at improving health information technology safety, from a national level, remain poor.4 As a result, organizations like Canada Health Infoway have promoted the need for collaborative efforts to improve health information technology safety standards in Canada, 4 so to ensure that the current and future uses of "medical record" data are accurate and respectful of patient privacy. 3. Access and use of personal health information for research The courts have long established that health information belongs to the patient.18 As a result, privacy ownership refers to the belief that patients own their private information as well as the right to control access to this information.19 As in other jurisdictions, the overarching challenge in Canada is to strike a balance between enabling access to health and health-related data for research while still respecting Canadians' right to privacy and control over the confidentiality of their information.20 The integrity of healthcare information is fundamental, given that it is the basis on which treatment decisions are made both in research and in clinic. 9 There are three principles upon which information security is based: 9 1) only authorized people have access to confidential information; 2) information must be accurate and consistent, may only be modified by authorized people in ways that are appropriate; 3) information must be accessible by authorized users when needed. Canadian research ethics have demonstrated that beneficial work can be done while maintaining confidentiality to sensitive personal health information.21 Yet, the challenge remains to create a uniform system for accessing data and performing data-based research due to 1) the lack of consistency and clarity in Canada's ethical and legal framework and, 2) varied interpretations of key terms and issues across the country.21 For example, the term "non-identifiable data" remains ambiguous across provinces and is subject to interpretation by data custodians, who may consider their legal duty to protect privacy as precluding access to data.21 This lack of legal clarity has contributed to varied cautious and conservative interpretations of data access legislation.21 National uniform guidelines on the appropriate access, disclosure and use of personal health data would allow data stewards to advance their research while respecting their patients' right to privacy. 4. Online communication with patients and social media Social media and online communication is pervasive in Canadian society; from Facebook to Twitter, social media has changed the way people interact and disseminate information.21 There is currently widespread discussion among health care professionals and academics regarding the role that social media and online communication should play in the physician-patient relationship.22 A growing number of physicians have embraced the opportunities of interconnectivity that social media affords, implementing their own privacy procedures to reflect this new type of data collection, use and storage.7 While evidence has been lacking on whether the use of social media does improve patient outcomes,22 there is no denying that patients are seeking health care information from online platforms, including social media.22 This type of communication poses a unique set of opportunities and challenges for physicians: while the use of social media could increase physician reach and patient engagement, it can also blur boundaries between one's personal and professional life.22 Although patient-physician online communication is currently limited, physicians still feel that they are encountering an ethical dilemma, especially when they find themselves in boundary crossing situations, like a friend request from a patient.2 Physicians are particularly concerned that, through online communication, they may be exposed to medico-legal and disciplinary issues, especially with respect to patient privacy.2 Given different studies have suggested that unprofessional uses of social media are not uncommon,23 physicians who choose to communicate with patients online or through social media must remember that they are still governed by the same ethical and professional standards that remain paramount.22 As technology continues to evolve, so too will the traditional parameters of the patient-physician relationship. The physician's ethical and professional obligation to protect patient privacy, however, must remain paramount at the backdrop of technology use. Simply banning social media and online communication would neither eliminate risk, nor benefit patient care outcomes. 24 Instead, institutions should establish stringent policies that outline how to prevent or minimize the effects of privacy breaches associated with social media and online communication.25 This should also include a tracking mechanism to help balance the obligation to privacy with evolving technology.25 December 2017 See also CMA Policy on Principles for the Protection of Patient Privacy REFERENCES 1 Farnan JM, Snyder Sulmasy L, Worster BK, Chaudhry HJ, Rhyne JA, Arora VM. Online medical professionalism: patient and public relationships: policy statement from the American College of Physicians and the Federation of State Medical Boards. Ann Intern Med 2013;158(8):620-627. 2 Brown J, Ryan C. How doctors view and use social media: a national survey. J Med Internet Res 2014;16:e267. Available: https://doi.org/10.2196/jmir.3589 (accessed 2017 Nov 17). 3 Lambert KM, Barry P, Stokes G. Risk management and legal issues with the use of social media in the healthcare setting. J Healthc Risk Manag 2012;31(4):41-47. 4 Kushniruk AW, Bates DW, Bainbridge M, Househ MS, Borycki EM. National efforts to improve health information system safety in Canada, the United States of America and England. Int J Med Inform 2013;82(5):e149-160. 5 Martin JF. Privacy and confidentiality. In: ten Have H, Gordijn B (Eds). Handbook of global bioethics. New York: Springer, Dordrecht; 2014. p.120-1. 6 Office of the Privacy Commissioner of Canada. Canadians and privacy final report. Gatineau: Office of the Privacy Commissioner of Canada; 2009. Available: https://www.priv.gc.ca/information/por-rop/2009/ekos_2009_01_e.asp (accessed 2017 Nov 17). 7 Canadian Medical Protective Association (CMPA). Privacy and a wired world - Protecting patient health information. Ottawa: CMPA; 2011 Dec. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2011/privacy-and-a-wired-world-protecting-patient-health-information (accessed 2017 Nov 17). 8 Burkle CM, Cascino GD. Medicine and the media: balancing the public's right to know with the privacy of the patient. Mayo Clin Proc 2011;86:1192-6. 9 Williams PA. Information security governance: a risk assessment approach to health information systems protection. Stud Health Techol Inform 2013;193:186-206. 10 Borza LR, Gavrilovici C, Stockman R. Ethical models of physician-patient relationship revisited with regard to patient autonomy, values and patient education. Rev Med Chir Soc Med Nat Iasi 2015;119(2):496-501. 11 Crook MA. The risks of absolute medical confidentiality. Sci Eng Ethics 2013;19(1):107-122. 12 Cohen I, Hoffman A, Sage W (Eds). The Oxford handbook of U.S. health law. New York: Oxford University Press; 2015. 13 Francis L. Privacy and confidentiality: the importance of context. The Monist; 91(1);2008:52-67. 14 Francis JG, Francis LP. Privacy, confidentiality, and justice. J Soc Philos 2014;45:408-31. 15 Campbell JI, Eyal N, Musiimenta A, Haberer JE. Ethical questions in medical electronic adherence monitoring. J Gen Intern Med 2016;31:338-42. Available: https://link.springer.com/content/pdf/10.1007%2Fs11606-015-3502-4.pdf (accessed 2017 Nov 17). 16 Canadian Medical Association (CMA). Medical record confidentiality, access and disclosure. Ottawa: CMA; 2000. Available: https://www.cma.ca/Assets/assets-library/document/en/advocacy/policy-research/CMA_Policy_The_medical_record_confidentiality_access_and_disclosure_Update_2000_PD00-06-e.pdf (accessed 2017 Oct 30). 17 Fenton SH, Manion F, Hsieh K, Harris M. Informed Consent: Does anyone really understand what is contained in the medical record? Appl Clin Inform 2015;6(3):466-477. 18 Canada. Supreme Court. McInerney v MacDonald. Dom Law Rep. 1992 Jun 11;93:415-31. 19 Petronio S, Dicorcia MJ, Duggan A. Navigating ethics of physician-patient confidentiality: a communication privacy management analysis. Perm J 2012;16(4):41-45. 20 Council of Canadian Academies (CCA). Accessing health and health-related data in Canada. Ottawa: The Expert Panel on Timely Access to Health and Social Data for Health Research and Health System Innovation, Council of Canadian Academies; 2015. Available: http://www.scienceadvice.ca/uploads/eng/assessments%20and%20publications%20and%20news%20releases/Health-data/HealthDataFullReportEn.pdf (accessed 2017 Nov 17). 21 Canadian Medical Association (CMA). Social media and Canadian physician: Issues and rules of engagement. Ottawa: CMA; 2011. Available: https://www.cma.ca/Assets/assets-library/document/en/advocacy/CMA_Policy_Social_Media_Canadian_Physicians_Rules_Engagement_PD12-03-e.pdf (accessed 2017 Oct 30). 22 Eysenbach G. Medicine 2.0: Social networking, collaboration, participation, apomediation, and openness J Med Internet Res 2008;10(3):e22. 23 Mayer MA, Leis A, Mayer A, Rodriguez-Gonzalez A. How medical doctors and students should use social media: A review of the main guidelines for proposing practical recommendations. Stud Health Technol Info 2012;180:853-857. 24 Moses RE, McNeese LG, Feld LD, Feld AD. Social media in the health-care setting: Benefits but also a minefield of compliance and other legal issues. Am J Gastroenterol 2014;109(8):1128-1132. 25 Yang YT, Silverman RD. Mobile health applications: The patchwork of legal and liability issues suggests strategies to improve oversight. Health Aff (Millwood) 2014;33(2):222-227.
Documents
Less detail

Vision for e-Prescribing: a joint statement by the Canadian Medical Association and the Canadian Pharmacists Association

https://policybase.cma.ca/en/permalink/policy10670
Last Reviewed
2019-03-03
Date
2012-12-08
Topics
Health information and e-health
Pharmaceuticals/ prescribing/ cannabis/ marijuana/ drugs
  1 document  
Policy Type
Policy document
Last Reviewed
2019-03-03
Date
2012-12-08
Topics
Health information and e-health
Pharmaceuticals/ prescribing/ cannabis/ marijuana/ drugs
Text
Vision for e-Prescribing: a joint statement by the Canadian Medical Association and the Canadian Pharmacists Association By 2015, e-prescribing will be the means by which prescriptions are generated for Canadians. Definition e-Prescribing is the secure electronic creation and transmission of a prescription between an authorized prescriber and a patient's pharmacy of choice, using clinical Electronic Medical Record (EMR) and pharmacy management software. Background Health Information Technology (HIT) is an enabler to support clinicians in the delivery of health care services to patients. The Canadian Medical Association (CMA) and the Canadian Pharmacists Association (CPhA) each have identified e-prescribing as a key tool to deliver better value to patients. The integration of HIT into clinics and health care facilities where physicians and pharmacists provide care is a priority for both associations1. As part of its Health Care Transformation initiative, the CMA highlighted the need to accelerate the introduction of e-prescribing in Canada to make it the main method of prescribing. In its policy on optimal prescribing the CMA noted that one of the key elements was the introduction of electronic prescribing. The CPhA, as part of its Blueprint for Pharmacy Implementation Plan, highlights information and communication technology, which includes e-prescribing, as one of five priority areas. We applaud the ongoing efforts of Canada Health Infoway, provinces and territories to establish Drug Information Systems (DIS) and the supporting infrastructure to enable e-prescribing. We urge governments to maintain e-prescribing as a priority and take additional measures to accelerate their investments in this area. It is our joint position that e-prescribing will improve patient care and safety. e-Prescribing, when integrated with DIS, supports enhanced clinical decision-making, prescribing and medication management, and integrates additional information available at the point of care into the clinical workflow. Principles The following principles should guide our collective efforts to build e-prescribing capability in all jurisdictions: * Patient confidentiality and security must be maintained * Patient choice must be protected * Clinicians must have access to best practice information and drug cost and formulary data * Work processes must be streamlined and e-prescribing systems must be able to integrate with clinical and practice management software and DIS * Guidelines must be in place for data sharing among health professionals and for any other use or disclosure of data * The authenticity and accuracy of the prescription must be verifiable * The process must prevent prescription forgeries and diversion * Pan-Canadian standards must be set for electronic signatures Benefits of e-Prescribing A number of these benefits will be realized when e-prescribing is integrated with jurisdictional Drug Information Systems (DIS). * Patients: o Improves patient safety and overall quality of care o Increases convenience for dispensing of new and refill prescriptions o Supports collaborative, team-based care * Providers: o Supports a safer and more efficient method of prescribing and authorizing refills by replacing outdated phone, fax and paper-based prescriptions o Eliminates re-transcription and decreases risk of errors and liability, as a prescription is written only once at the point-of-care o Supports electronic communications between providers and reduces phone calls and call-backs to/from pharmacies for clarification o Provides Warning and Alert systems at the point of prescribing, supporting clinician response to potential contraindications, drug interactions and allergies o Facilitates informed decision-making by making medication history, drug, therapeutic, formulary and cost information available at the point of prescribing * Health Care System: o Improves efficiency and safety of prescribing, dispensing and monitoring of medication therapy o Supports access to a common, comprehensive medication profile, enhancing clinical decision-making and patient adherence o Increases cost-effective medication use, through improved evidence-based prescribing, formulary adherence, awareness of drug costs and medication management o Improves reporting and drug use evaluation Challenges While evidence of the value of e-prescribing is established in the literature, its existence has not fostered broad implementation and adoption. In Canada, there are a number of common and inter-related challenges to e-prescribing's implementation and adoption. These include: * Improving access to relevant and complete information to support decision-making * Increasing the level of the adoption of technology at the point of care * Focusing on systems-based planning to ensure continuum-wide value * Integrating e-prescribing into work processes to gain support from physicians, pharmacists and other prescribers * Increasing leadership commitment to communicate the need for change, remove barriers and ensure progress * Updating legislation and regulation to support e-prescribing Enabling e-Prescribing in Canada CMA and CPhA believe that we can achieve the vision that is set out in this document and address the aforementioned challenges by working collectively on five fronts: * Health care leadership in all jurisdictions and clinical organizations must commit to make e-prescribing a reality by 2015 * Provinces and territories, with Canada Health Infoway, must complete the building blocks to support e-prescribing by increasing Electronic Medical Record (EMR) adoption at the point of care, finishing the work on the Drug Information Systems (DIS) in all jurisdictions and building the connectivity among the points of care and the DIS systems * Pharmacist and medical organizations in conjunction with provinces, territories and Canada Health Infoway must identify clear benefits for clinicians (enhancing the effectiveness of care delivery and in efficiencies in changing workflows) to adopt e-prescribing and focus their efforts on achieving these benefits in the next three years * Provinces, territories and regulatory organizations must create a policy/regulatory environment that supports e-prescribing which facilitates the role of clinicians in providing health care to their patients * Provinces and territories must harmonize the business rules and e-health standards to simplify implementation and conformance by software vendors and allow more investment in innovation. 1 Health Care Transformation in Canada, Canadian Medical Association, June 2010; Blueprint for Pharmacy Implementation Plan, Canadian Pharmacists Association, September 2009
Documents
Less detail