Quote Of The Year

Timeless Quotes - Sadly The Late Paul Shetler - "Its not Your Health Record it's a Government Record Of Your Health Information"

or

H. L. Mencken - "For every complex problem there is an answer that is clear, simple, and wrong."

Wednesday, December 14, 2011

It Does Seem Things Are Not Going All That Well With Canada Infoway. Are There Parallels We Need To Watch Closely?

The following article appeared in the Canadian Medical Journal last week.

NEWS

December 5, 2011

Nothing cutting edge about Canadian ehealth strategy, critics say

Critics have argued of late that Canada’s ehealth strategy entirely missed the boat because of an excessive focus on developing massive centralized data systems as opposed to promoting meaningful use of electronic health data by physicians and patients.
The situation may be even more worrying than that, though, as one of architects of Canada’s ehealth strategy says the evolution of technology, itself, has all but completely made that plan obsolete.
New technologies such as tablets and mobile devices long ago outstripped Canada’s ehealth strategy, says Will Falk, who is credited with writing one of Canada Health Infoway’s first business plans. “There are only a couple of homecare mobile projects that have received Infoway funding to date. This in the country that invented the Blackberry?”
Physicians are essentially bypassing the multibillion dollar project and finding their own ways to incorporate the new technologies into their practices, adds Falk, estimating that 90% of doctors now use smartphones, tablets and other personal communications devices without government prodding. “Doctors aren’t waiting for Infoway. They are voting with their feet.”
Far too much of the official investment in ehealth has gone towards subsidizing the development of overpriced, useless systems that unsuccessfully mimic cheaper, better,  privately-developed products, says Falk. As an example, he cites Ontario’s “ONE mail” system, a custom-built email system which has been harshly criticized by government auditors as being inferior to commercial products (www.auditor.on.ca/en/reports_en/ehealth_en.pdf).
A plethora of other investments have also soured but Infoway and its provincial counterparts seem incapable of cutting them loose, Falk adds. “It’s time they began sorting out their projects and eliminating those that can’t prove a business case for survival.”
“They just can’t keep on doing demonstration projects,” adds Falk, who in a recent report for the Mowat Centre for Policy Innovation at the University of Toronto in Ontario called on governments to either scuttle ehealth agencies or “monetize” them, perhaps as Crown corporations (www.mowatcentre.ca/research-topic-mowat.php?mowatResearchID=41).
Economist Donald Drummond similarly argues there’s a need to more effectively utilize new mobile information technologies and the Internet itself in the delivery of health services.
Better information should be available to patients regarding their own health care, says Drummond, visiting scholar at Queen’s University in Kingston, Ontario, and former vice-president of the Toronto-Dominion Bank. “With the proper information, patients, such as diabetes sufferers or their families, could provide the ongoing care rather than always relying on physicians and hospitals.”
“Greater use could be made of internet and telephone services to provide care” and to help Canadians find family physicians,” adds Drummond, who argued in a recent report, Therapy or Surgery? A Prescription for Canada’s Health System, for the C.D. Howe Institute that Canada must reconfigure its ehealth strategy so that it is driven by the needs of hospitals and family health teams (www.cdhowe.org/pdf/Benefactors_Lecture_2011.pdf).
Physicians need access to information that is relevant and “doesn’t end up being another compliance burden,” adds Drummond.
The views of Drummond and Falk align with those of many other critics who say that Infoway’s ehealth strategy was driven by industrial considerations and contracts with information technology firms, rather than health system needs (www.cmaj.ca/lookup/doi/10.1503/cmaj.109-4001).
Falk credits the billions channelled by the federal and provincial governments toward ehealth agencies with the subsidization of an industry that he estimates has grown from employing a few hundred experts to 30 000. But having accomplished that, the subsidies have created a situation where “several agencies and ministries have substantial internal software development shops which directly compete with private industry,” he says. “Many provincial and sub-provincial service providers are both purchasers of and providers of SI [systems integration] and outsourcing services. They are both clients and competitors at different points. They need to be put on a level-playing field with private industry and compete in open processes.”
.....
DOI:10.1503/cmaj.109-4065
— Paul Christopher Webster, Toronto, Ont
Lots more here:
I was alerted to this article by a frequent visitor to Canada who rather pithily describes Canada Infoway as ‘NEHTA’s Evil Twin’.
I do have to say that, while there are differences there are certainly some striking parallels.
First both organisations are set up at a slight arm’s length to Government while taking both federal and state funds.
Second both are big picture, architecturally driven with many in-house experts.
Third over-time both have becomes the ‘only game in town’ - often to the detriment of small already active solution providers.
Fourth there does seem to have been a rather top down, one size fits all approach where possibly a little more local flexibility might have helped.
Fifth both organisations like to use contractors and outsourcing for most delivery - providing them with very considerable market power.
Sixth in both environments there concerns from clinicians and other stakeholders that there is a degree of inflexibility and lack of consultation about what is being done.
Seventh both organisations have not impressed with the speed of delivery.
Eighth both organisations are very active self-promoters in the PR sense!
Four key differences has been however that Infoway has been much better funded, has been much more publicly accountable, has used a business case based model to distribute funding and has actively sought local involvement at a regional level. It is also true that Infoway has had some significant project wins - which we have yet to see from the slightly younger NEHTA.
A little honest cross learning between these two could be a very good thing for both organisations.
David.

Tuesday, December 13, 2011

The Health Information Breach Problem Seems To Be Getting A Lot Of Coverage. Australia Needs To Take a Serious Stance On the Issue and Soon!

Last week I ran a blog on some material on Health Information Security.
This is found here:
Just after this we have had ongoing reports about the situation in the US.
First here:

Health data breaches cost $6.5B annually

December 1, 2011 — 5:43pm ET | By Ken Terry
The number of reported data security breaches in healthcare organizations increased 32 percent from 2010 to 2011, and, on average, there were four breaches per healthcare provider this year, according to the Ponemon Institute's second annual survey on the topic.
The mean cost of these breaches to healthcare organizations was $2.2 million, up 10 percent from last year. In addition, respondents reported that security breaches reduced productivity, caused a loss of goodwill, and contributed to patient churn. Twenty-nine percent of providers said that data breaches had resulted in medical identity theft.
Based on the survey responses, Ponemon estimates that data security breaches cost the U.S. healthcare industry about $6.5 billion a year.
.....
To learn more:
- read the Ponemon Institute
press release
- see the Healthcare IT News
article 
More here:
This was followed up by a long interview here:

Q&A: How a health 'data spill' could be more damaging than what BP did to the Gulf

By Tom Sullivan, Editor
Created 2011-12-05 11:12
The street value of health information is 50 times greater than that of other data types. Even worse, the healthcare industry is among the weakest at protecting such information. With organized criminals trying to steal medical IDs, sloppy mistakes becoming more commonplace, mobile devices serving as single sign-on gateways to records and even bioterrorism now a factor, healthcare is ripe for some a wake-up call – one that just might come in the form a damaging "data spill."
Government Health IT Editor Tom Sullivan spoke with Larry Ponemon, chairman and founder of the Ponemon Institute, and Rick Kam, president of ID Experts (pictured below), which sponsored Ponemon's second annual Benchmark Study on Patient Privacy and Data Security. He asked about that data spill assertion, why healthcare lags other industries in privacy and security, and how the $6.5 billion spent on responding to data breaches could be better invested.
Q: The study finds that breaches are up 26 percent. Are things as bad as they seem to be?
Larry Ponemon: Data loss and data breaches happen all the time. And one of the possible reasons for increase in frequency for the data breach events can be due to the fact that organizations are more cognizant of it and are mandated by law to report it. In other words, it’s the old adage, 'If a tree falls in the middle of the forest and we don’t hear it, did it actually fall?' Well, organizations have a heightened sense of awareness, hopefully, about these laws and therefore the frequency is increasing because of that.
There is a second more nefarious possibility that data loss occurs because there’s just more criminal enterprise around data theft. And there’s evidence that, not just in healthcare, but generally that number seems to be on the increase as well.
So it’s a combination of factors, but the results of our research on a matched sample basis suggest that number certainly isn’t going down. Instead of getting better, it seems to be on the increase.
Q: What, specifically, are those factors?
Rick Kam: One of the interesting things within privacy circles is growing concern about the strategic nature of the data. For example the TRICARE information that was breached, there’s concern about the data including the vaccination and health information of our fighting forces being released or perhaps picked up by a nation-state like China or North Korea or others that would look at a bioterrorism strategy against our country in some respect. It might seem a little out there in terms of concern, but just as there’s nefarious for criminal or financial gain, there’s also nefarious for other types of issues where health information can be very useful.
Q: So, an enemy could potentially find out weaknesses in terms of vaccinations, and deduce the best way to attack our troops?
RK: Exactly. To use a bioterrorism agent that weakens the fighting forces of the U.S., knowing what they are vaccinated against and what they are not would be an important detail.
Q: Beyond the military, is the healthcare industry at large vulnerable to some sort of big data heist?
RK: Like when BP had their massive oil spill, there’s the potential for something like this to occur in the data security/privacy within healthcare – which would be a wake-up call for the industry. To put this into context, healthcare information compared to financial data or even oil is something that cannot be put back in the box. You can get a new Social Security number or a new credit card from a financial or identity theft. If you have an issue with the theft from TJX or one of those types of situations or even Sony with the email addresses and account numbers, but losing even a handful of hundreds of pieces of patient data that might surround a stigmatized illness or some variation on that theme, that information cannot be put back into the box. Once it’s out there, it’s out there forever. There are a couple of issues around that. One is that the information is worth 50 times what Social Security numbers are worth based on some of the things I’ve seen in various pieces of research, some of which Larry has done. So a Social Security number is worth, say, $1 on the street while a health insurance number and/or health information is worth $50 on the street, which points to the value of that information for other uses, whether it’s getting access to prescription drugs illegally, or health services.
So I do think there’s going to be a giant data spill of health information and that might be tens of thousands or even millions of records that create that impact. Since you’re Government Health IT, I love this example: Imagine if the health information of the U.S. Congress was compromised ... or of the GOP candidates … or some variation on that theme.
Q: The study found that sloppy mistakes are among the most prevalent causes of data breaches. What are the most common examples?
LP: Basically, it’s hard to say what the sloppiest is, or the worst example, but I think we see billing information, administrative applications like scheduling apps, definitely clinicians that are not paying attention to detail that unfortunately might lose a device like a handheld that contains patient information. Part of the whole ecosystem of healthcare is about collecting information. You have to do it. That’s why you’re in a hospital, right, to recover from an illness or for diagnostic purposes. There’s information that has to be collected about you, but there’s the handling of that between clinicians, administration, billing, and others including third-parties that creates kind of a perfect storm for data loss. There’s also the culture. I’m just going to jump in here – and this might sound pretty negative and damning to clinicians – but culturally we’re dealing with people who measure their efficiency in seconds. There’s pressure on healthcare organizations to be more efficient than they’ve previously been. There’s efficiency in terms of time, the time it takes to get something done. So if it takes a little bit of time to secure your handheld device with a password, that doesn’t get done. That goes back to the culture of healthcare where we push people to work very, very efficiently but they may not have the resources to go a little slower to be more mindful of their privacy and security responsibilities. This might also be true in other industries but based on the research we’ve done over the years healthcare seems to be one of the worst in terms of balancing the need for security with the mission of more efficiency.
Q: So why is healthcare among the worst?
LP: Well, I think there are financial challenges for many healthcare providers, so as a result of that it’s hard to get enough funding to have the right technology and the right people, the right governance processes in place to deal with these regulatory and real requirements, more than just regulatory. So that has a lot to do with it and as I said culturally the main vision in healthcare is to heal people. It’s not about protecting data. Some industries like financial services learned a long time ago that data protection is core to customer trust.
That concept does not seem to pervade the healthcare organizations that participated in our study and, interestingly enough, patients, people who are the victims of data loss, if a healthcare provider loses their data, they’re going to lose trust pretty quickly and say ‘Why do I want to go to a hospital that can’t manage my data? How can they manage my illness?’ ‘How can they manage a laboratory test if I can’t trust them to manage my billing order?’ Those kinds of issues are pervasive in healthcare. Other industries experience some of these, it’s not uniquely a healthcare problem – but it does seem that healthcare has more of these challenges than other industries.
RK: Widespread use of mobile devices is one of the culprits. It’s not unique to healthcare but they are causing problems.
Lots more here (really worth a browse):
And concern also made it to the Australian press. See here:

Data breaches common in US health system

NINETY-six per cent of US healthcare organisations have reported at least one data breach in the past two years, the Ponemon Institute reports in its second annual Patient Privacy and Data Security benchmark survey.
The independent privacy researcher found that organisations suffered an average of four data breaches during the period, at an average cost of $US2.2 million per incident.
Ponemon chairman Larry Ponemon described medical information handling practices as "sloppy", and "a disturbing reality check for patients".
"Data breach risks are high, identity theft and medical identity theft are on the rise, and patients’ privacy is affected," Dr Ponemon said.
Employee negligence was the primary culprit for the 32 per cent rise in the number of breaches during the 2010-11 financial year over the previous period, with 41 per cent of respondents blaming "sloppy mistakes" involving protected health information.
Forty-nine per cent of respondents cited lost or stolen computing devices, while 46 per cent reported "snafus" by third-parties or business associates.
Technical glitches played a part in one-third of the breaches, while criminal attacks were involved in 30 per cent of cases.
The average number of lost records was 2575, up from 1769 a year earlier.
The widespread use of mobile devices was a significant risk, with 81 per cent of respondents collecting, storing and transmitting some personal health information wirelessly – 49 per cent admitted their organisations did nothing to protect these devices.
.....
In Australia, there is no compulsion for healthcare organisations to report data breaches, so the scale of the problem here is unknown.
More here:
The most telling here is the last paragraph - pointing out we don’t have a clue what is happening in Australia.
On the local front we have NEHTA with its work on a Security and access framework and NASH.
See here:

Nehta releases security framework

The National E-health Transition Authority (Nehta) has released the security and access framework that sets out how health information should be collected, stored and accessed – a critical step in its bid to win consumer support for the personally controlled electronic health records which Australians can sign up for starting mid-2012.
Details of the National eHealth Security and Access Framework (NESAF) which was unveiled today by Nehta are currently only available to vendors registered with the Nehta website.

The heart of the framework however is understood to be descriptions of the standards and protocols organisations should use when writing e-health systems, which have been compiled as a toolkit to help organisations design and develop health related computer systems.
Lots more here:
I would tell you more about the document but it seems I can’t.
From Page ii.
Security
The content of this document is confidential. The information contained herein must only be used for the purpose for which it is supplied and must not be disclosed other than explicitly agreed in writing with NEHTA.
I can however point out that the NESAF aims to deliver a risk based management process framework that is to be used by any organisation that is receiving or sending information to the public e-Health infrastructure (PCEHR, IHI etc. one assumes) and that compliance mechanisms are still a bit of a work in progress and may be addressed in Version 4 of the NESAF which is due in March 2012.
Just who funds what, how compliance is to be audited and who needs to apply the framework will almost certainly become clear over time. The cost and complexity of some of what seems to be being proposed to a solo GP practice may be an issue I suspect.
In passing I note we have this available describing NASH - which works with the NESAF.

National Authentication Service for Health

The National Authentication Service for Health (NASH) is a key foundational component for eHealth in Australia. It is essential that the identity of people and organisations involved in each eHealth transaction can be assured, and this requires high quality digital credentials. The NASH,  Australia’s first nationwide secure and authenticated service for healthcare delivery organisations and personnel to exchange sensitive eHealth information, will provide this.
In March 2011 the contract to design and build NASH was awarded to IBM, and NEHTA began working with stakeholders to develop its Concept of Operations and solution design.
The service will issue digital credentials, including digital certificates managed through the Public Key Infrastructure and secured by tokens such as smartcards. These credentials will validate identity when used to access eHealth systems that are enabled to use NASH authentication.
Specifically, NASH will:
  • provide a governance approach that would allow health sector participation in the operational policies and services NASH develops
  • establish the standards framework for national tokens/smartcards in healthcare delivery
  • establish a national supply of digital credentials available to all healthcare delivery entities in the health sector, allowing the traceability of eHealth transactions to trusted identities
  • allow healthcare communities to issue and manage authentication credentials locally, supported by national infrastructure
  • support software vendors in transitioning their products to use nationally recognised digital credentials
Found here (December 9, 2011).
Any close reading of this makes what I said last week seem optimistic. Implementation of NASH is going to take years and years and the costs are going to be more than considerable - both in initial implementation and ongoing maintenance.
Just how this fits with the PCEHR time-table I leave for resolution by the reader!
David.

Monday, December 12, 2011

Weekly Australian Health IT Links – 12th December, 2011.

Here are a few I have come across this week.
Note: Each link is followed by a title and a few paragraphs. For the full article click on the link above title of the article. Note also that full access to some links may require site registration or subscription payment.

General Comment

Interesting week with a lot of security related material seeming to turn up this week. I suspect that as we move forward there will be rising awareness of these problems and that it is going to be a real problem for the PCEHR program to provide enough re-assurance for the public to put their private information in the hands of Government (and its bureaucrats).
Time will tell how it plays out.
-----

Outback satellites at risk of overload with e-health data

OUTBACK networks face "saturation" when new e-health record systems are placed on top of existing systems while satellite technology is too slow to handle the data load, medical providers warn.
The Aboriginal Health Council of Western Australia says "crucial IT communication issues" need to be understood in the context of continuing reliance on satellite in remote areas excluded from the National Broadband Network.
The forthcoming rollout of the $500 million personally controlled e-health record system will put further strain on existing infrastructure, the council says in a submission on the PCEHR bill introduced into parliament last month.
"Decision-makers need to recognise a problem of saturation which comes about because we are putting the PCEHR on top of email, government Aboriginal and Torres Strait Islander health systems and the online community health reporting environment, OCHREStream," says the council, which represents 19 local health services in WA.
-----

NEHTA releases security framework

By Suzanne Tindal, ZDNet.com.au on December 6th, 2011
The National E-Health Transition Authority (NEHTA) has been released to the National E-Health Security and Access Framework (NESAF) this week, providing a toolkit for the industry on how to protect patient information.
"The framework released acknowledges that it is essential to preserve the integrity and protect the confidentiality of personal health information and personally identifiable information, while balancing the need to support improved and unhindered healthcare," NEHTA CEO Peter Fleming said.
-----

Nehta releases security framework

The National E-health Transition Authority (Nehta) has released the security and access framework that sets out how health information should be collected, stored and accessed – a critical step in its bid to win consumer support for the personally controlled electronic health records which Australians can sign up for starting mid-2012.
Details of the National eHealth Security and Access Framework (NESAF) which was unveiled today by Nehta are currently only available to vendors registered with the Nehta website.
The heart of the framework however is understood to be descriptions of the standards and protocols organisations should use when writing e-health systems, which have been compiled as a toolkit to help organisations design and develop health related computer systems.
-----

Health bodies fear medical data distortion from e-health records

PEAK Aboriginal health bodies have warned that data derived from personally controlled e-health records must not be used to discriminate against indigenous people and their medical providers.
The National Aboriginal Community Controlled Health Organisation and the Aboriginal Medical Services Alliance Northern Territory say that de-identified data will provide statistics around populations and diseases, but because the PCEHR is opt-in "it must be considered to be an incomplete picture" of the health of indigenous people.
"NACCHO believes that other bodies may use this incomplete data to claim statistics that are untrue and cause the Aboriginal community, the Australian government and the general public to be confused," it said.
-----

Australians turn to magazines and online for information on Health, Wellbeing & Fitness

Roy Morgan Research
According to the latest Roy Morgan Single Source data (October 2010 – September 2011), Australians aged 14+ years consider the internet and magazines to be the most useful media for information on products and purchasing in the health, wellbeing and fitness category.
The internet ranks the highest, with 31% of Australians 14+ nominating it the most useful media channel for product information and purchasing in the health, wellbeing and fitness category.
Magazines rank second, nominated by 22% of Australians 14+ as the most useful media channel for this category.  Magazines also show a definite skew to women: 25% of women (compared to 19% of men) consider magazines the most useful medium for health, wellbeing and fitness.
-----

Queensland's new email system a $46m white elephant

A MUCH-hyped email system which cost taxpayers $46 million has been rejected by most State Government departments.
Trumpeted as a revolutionary way to centralise systems allowing workers to more easily move between agencies, the email platform was rejected as too costly by some of the departments it was specifically designed for, reported The Courier-Mail.
So far only 2000 users have signed up, at an estimated cost of $23,000 each – the price of a small car.
A Public Works Department spokesman insisted the Identity, Directory and Email Services program was set for wider installation by 2013 but sources said the Education, Communities and Community Safety departments had already opted out.
-----

Data breaches common in US health system

NINETY-six per cent of US healthcare organisations have reported at least one data breach in the past two years, the Ponemon Institute reports in its second annual Patient Privacy and Data Security benchmark survey.
The independent privacy researcher found that organisations suffered an average of four data breaches during the period, at an average cost of $US2.2 million per incident.
Ponemon chairman Larry Ponemon described medical information handling practices as "sloppy", and "a disturbing reality check for patients".
-----

Stopping falls is name of the game at iStoppFalls

LOCAL researchers are part of a groundbreaking project to develop iStoppFalls, an ICT system to prevent falls in the elderly.
The European Union project brings together sensor technologies, telemedicine and videogames to keep older people fit and living at home for longer.
Neuroscience Research Australia's renowned falls and balance team was asked to join the project because of its innovative use of videogames to achieve healthcare outcomes.
-----

Metro Spinal Clinic uses IBM analytics to manage patients' pain

Software records and collates patient data to enable doctors to track a patient's progress over time
The Melbourne-based Metro Spinal Clinic has enlisted analytics software from IBM to track and record data to better manage patients' pain.
The spinal pain and intervention facility, which treats an average of 450 new patients per month, is primarily a day-care hospital although some patients require overnight stays.
The clinic implemented IBM SPSS Data Collection Web Interviews as part of a data collection system the facility has been developing for some years called Clinical Intelligence.
-----

Schools IT scheme a 'stuff up'

Anna Patty
December 8, 2011
$176 million already spent and now "disaster" implementation will be delayed.
A $386 million information technology system for the NSW Department of Education, which has so far cost it $176 million, has failed to deliver what it promised.
The state's Auditor-General, Peter Achterstraat, yesterday confirmed what school teachers and principals have long suspected - that the program has been a ''disaster''.
The so-called Learning Management and Business Reform software program was aimed at replacing finance, human resources, payroll and student administration systems.
-----

GE, Microsoft in e-health venture

  • by: Karen Dearne
  • From: Australian IT
  • December 09, 2011 6:08AM
GENERAL Electric and Microsoft are joining forces to create an open platform and provide real-time, system-wide intelligence across healthcare organisations for better population data analysis.
A new joint venture company will bring together Microsoft’s platform expertise and GE Healthcare’s experience in clinical and administrative workflow systems.
The move represents a major shift to the use of advanced analytics in healthcare for improved patient care and safety and administrative efficiencies.
GE Healthcare has been using SAS Business Analytic tools to mine patient data streamed from remote monitoring systems and new digital imaging and diagnostic tools as part of its work on clinical safety.
-----

Question: Australian Health Information Security Requirements

Posted on December 9, 2011 by Grahame Grieve
This report of a breach of personal health information has been doing the rounds lately – it’s a very well written, from a great blog, and it’s deservedly getting a lot of attention. I sent it to several contacts in Australian commercial vendors, and one of them came back to me with a question:
What best practice standards, and applicable regulations do I need to aware of here in Australia?
-----

Victorian government invests $100,000 in ICT Geelong

Regional cluster to continue e-health, research projects
  • Lisa Banks (Computerworld)
  • 09 December, 2011 11:41
The Victorian government has announced that $100,000 will be put towards supporting the activities of ICT Geelong.
State minister for technology, Gordon Rich-Phillips, said the regional information and communications cluster has a number of projects in the pipeline that will benefit the local ICT community.
“Major projects include the development of ICT research and investment opportunities, commercialisation of technologies...and delivery of the annual technology entrepreneurship forum and ICT investment pitching competition,” Rich-Phillips said.
-----

Telstra customer database exposed

Asher Moses and Ben Grubb
December 9, 2011 - 6:26PM
Bundle account holders' details unbundled in public.
Detailed information about Telstra's customer accounts - including usernames and passwords - has been found to be sitting on the open web for anyone to access via a Google search.
A user of the Whirlpool forum discovered the "Telstra Bundles request search" page after doing a web search for a Telstra customer support phone number they were told to contact.
Anyone who visits the page can search Telstra's customer database based on the customer's last name, account number, sales force ID or reference number.
-----

eBay wants the Gillard government to be cautious with data breach laws

  • by: Fran Foo
  • From: Australian IT
  • December 08, 2011 12:00AM
ONLINE shopping giant eBay has urged the Gillard government to adopt a three-tiered approach to proposed mandatory data breach notification laws or risk crushing small businesses.
Privacy and consumer advocates have called on the government to introduce legislation compelling companies to inform customers when data leakage occurs.
Entertainment giant Sony was criticised earlier this year when it waited one week before informing customers of a data breach on its PlayStation network.
In contrast, Dell Australia wasted no time when a malicious attack hit its e-marketing provider Epsilon.
-----

A spam filter for HIV is in the works

Deborah Netburn
December 5, 2011 - 10:20AM
HIV: a deadly virus that kills an estimated 5,000 people a day.
Spam: annoying emails that infiltrate your inbox and try to get you to shell out for erectile dysfunction drugs, credit cards and international scams purportedly involving Nigerian princes.
Could these two things possibly have anything in common? According to Microsoft researcher David Heckerman, the answer is yes.
Heckerman is the inventor of Microsoft's spam filter that protects Hotmail, Outlook and Exchange clients from deluges of unwanted email, but for the last seven years he's been working on designing a vaccine for HIV.
He said it's not so strange that he shifted his attention from protecting email systems to protecting body systems. He is a doctor, and besides, fighting spam and fighting HIV are not as different as you might think.
-----
Greg Johannes
Acting Secretary, Department of Health and Human Services
Tuesday, 29 November 2011

RESTRUCTURING TECHNOLOGY IN HEALTH

The Department of Health and Human Services is to restructure its use of information technology to improve services to patients and clients.
Acting Secretary Greg Johannes said the plan to restructure the DHHS Care and Business Solutions branch had been under discussion with staff and unions for several weeks.
The plan was further communicated to affected staff today and would be refined through consultation over coming weeks.
-----

Google's Chrome browser challenges Firefox

Chrome was the world's second favourite web browsing program in November, bumping Firefox from that position for the first month
  • AAP (AAP)
  • 05 December, 2011 10:01
Google's Chrome Web browser is gaining ground on Firefox, and one industry tracker says it may even have eclipsed its open-source rival in the global market.
Chrome was the world's second favourite web browsing program in November, bumping Firefox from that position for the first month ever, according to StatCounter Global Stats.
Google's Chrome had a 25.69 per cent share of online browsing last month compared to 25.23 per cent for Firefox, according to StatCounter. Firefox is managed by the nonprofit Mozilla Foundation.
-----
Enjoy!
David.

I Think There Is Now A Chance Common Sense Can Prevail in Australian E-Health! I Sure Hope So!

The following appeared in the Medical Observer today - and I suspect the sentiments will be echoed elsewhere in other articles quite soon.

Tanya Plibersek takes Health reins

12th Dec 2011
A CABINET reshuffle announced this morning is being seen as an opportunity for new Health Minister Tanya Plibersek and the government to back away from the 1 July deadline for the introduction of a personally controlled e-health record (PCEHR).
Former Health Minister Nicola Roxon was promoted to Attorney General in the reshuffle, which was triggered by the resignation of Small Business Minister Nick Sherry.
RACGP president Professor Claire Jackson said Ms Roxon’s contribution over nearly five years had been valuable, but the college would have liked more consultation on some recent decisions.
“Tanya Plibersek comes with a strong record in her previous portfolio and the college looks forward to an early meeting,” Professor Jackson said.
Lots more here:
To be frank I think Ms Roxon was a very poor Health Minister who for apparently ideological reasons drove initiatives which were confusing (Medicare Locals), unnecessary by and large ( GP Superclinics) and utterly lacking any evidence base (the PCEHR Program).
It is also clear from the way many of the so-called reform programs were executed that program implementation was really not a strong suit - not that she is to blame alone for that!
She also managed to really alienate much of the Medical profession by her cuts to the PBS and her failure to properly consult on many matters as reflected in the article above.
Ms Plibersek has a golden opportunity - as I said earlier today - to snatch victory from the jaws of defeat in e-Health. I hope she takes it!
David.

AusHealthIT Poll Number 100 – Results – 12th December, 2011.

The question was:
Will The Senate Enquiry Into The PCEHR Result In Substantial Improvements In The Program?
For Sure
  1 (4%)
Possibly
  2 (8%)
Probably Not
  4 (17%)
Of Course Not
  14 (60%)
I Have No Idea
  2 (8%)
Votes : 23
It appears that over 75% of readers don’t have much confidence in the Senate Enquiry to help fix things.
Again, many thanks to those that voted!
David.

Tanya Plibersek will Join Cabinet as the New Health Minister. Good Luck Tanya!

Gillard reshuffles cabinet

December 12, 2011 - 1:56PM
Prime Minister Julia Gillard says her new ministerial line-up will give Labor new energy and fire power heading into 2012.
Ms Gillard announced a widely-tipped reshuffle today, which includes extra portfolio responsibilities of industry and innovation for Climate Change Minister Greg Combet.
"With this new cabinet in place we will see an important mix of new energy, as well as wise heads and experienced heads," she told reporters in Canberra.
"This will give us the focus and fire power that we need in 2012."
.....
Tanya Plibersek will join cabinet as the new health minister.She was formerly human services and social inclusion minister.
Mental Health and Ageing Minister Mark Butler retains his position but will join cabinet. He will also take on social inclusion responsibilities.


David.

Big Changes For Health Ministry Coming Is The Rumour. Might Change The E-Health Game.

It seems Plibersek, The Hon Tanya, Member for Sydney is about to replace Ms Nicola Roxon as the Health Minister.

The implications of this may very well be to get DoHA / NEHTA out of a very big hole with an excuse to now change strategy, objectives and timelines in the e-Health space.

Surely Minister Plibersek will take a golden opportunity to sort out a potential festering mess. Time will tell.

David.
 

Sunday, December 11, 2011

Here Are Some Weasel Words To Make One Absolutely Cringe As Tassie Health Swings an Axe at E-Health! How Did I Almost Miss This!

The Google alert system spotted this for me early this week. It has been around for a few days.
As I read I just became more and more amazed at the brazen spin I found myself reading.
Greg Johannes
Acting Secretary, Department of Health and Human Services - Tasmania
Tuesday, 29 November 2011

RESTRUCTURING TECHNOLOGY IN HEALTH

The Department of Health and Human Services is to restructure its use of information technology to improve services to patients and clients.
Acting Secretary Greg Johannes said the plan to restructure the DHHS Care and Business Solutions branch had been under discussion with staff and unions for several weeks.
The plan was further communicated to affected staff today and would be refined through consultation over coming weeks.
“There are a number of important national reforms being rolled out, and how we use information technology to enable eHealth will be a key part of making sure the reforms are successful.
“In order to play our part in reform, we need to make sure our use of information technology and associated staff resources is innovative and responsive to the needs of patients and clients.
“By its nature, information technology has to be cutting edge and innovative – so the staff structures we use should mirror that.
“The structural changes communicated today will help make our organisation more efficient and more sustainable, while delivering required budget savings.
Mr Johannes said staff and unions have been consulted through the review process.
“We have taken a measured and planned approach and will have a leaner structure that will focus on essential services for Tasmanians.
Mr Johannes said that the restructure mainly affected the Care and Business Solutions branch, which on the first of October 2011 employed 67 staff.
The new structure will see a net reduction in full-time equivalent positions of up to 42 positions.
The Care and Business Solutions branch has traditionally been responsible for project delivery and consultancy services across the Agency.
“It’s also important to bear in mind that some staff will be able to be transferred and others may leave voluntarily – so the final number of impacted staff is still to be determined.”
Mr Johannes said that the restructure also opened up a number of opportunities for staff which would be explored further.
“We anticipate that some current staff will not have a position in the new structure, and we will work hard to redeploy staff across the State Service as quickly as possible.”
The full release is found here:
Now let us parse what is actually being said here. The key points are:
1. We have taken the axe to our Care and Business Solutions Branch.
2. The reduction in staff will be 63% i.e. only 37% of the staff will remain.
3. These changes will make the Branch sustainable
4. We have decided to focus on essential services.
5. Losing 63% of our staff will save money and at the same time make everything more efficient.
There are only two conclusions that can be drawn from this. One is that the Branch was grossly overstaffed and management simply did not notice or two is that we are going to stop providing at least half the services we used to (implying they were not needed).
In a time when we are apparently seeing a transition to the use of more e-Health to try and preserve front line services and improve safety and efficiency this is a just appalling and more shockingly transparent piece of political spin.
No wonder the Minister does not have their name attached to such a stinking piece of rotten fish.
This was not a restructure - it is an out and out massacre!
David.