Electronic health record transaction monitoring

• US 20070078686A1
• Filed: 09/30/2005
• Published: 04/05/2007
• Est. Priority Date: 09/30/2005
• Status: Active Grant

• Current Assignee: HCL Technologies Limited
• Original Assignee: International Business Machines Corporation
• Inventors: Dettinger, Richard, Stevens, Richard, Kolz, Daniel
• Granted Patent: US 8,423,382 B2
• Time in Patent Office: Days
• US Class Current: 705/3
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 40/08 Insurance
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 15/00 ICT specially adapted for medical reports, e.g. generation or transmission thereof

Abstract

Method, apparatus and article of manufacture for providing individuals with notifications pertaining to use of health records. In one embodiment, a network-accessible storage repository is configured to store a plurality of electronic health records regarding a plurality of individuals. Requests to access selective records of the plurality of individuals are received over a data communications network. For each individual whose respective records are accessed, a report is generated describing the access. The reports may then be provided to the respective individuals.

Claims

1. A computer-implemented method of providing individuals with notifications pertaining to use of health records, comprising:

providing a network-accessible storage repository configured to store a plurality of electronic health records regarding a plurality of individuals;

receiving, over a data communications network, requests to access selective records of the plurality of individuals;

for each individual whose respective records are accessed, generating a report describing the access; and

providing the reports to the respective individuals.

2. The method of claim 1, further comprising providing each of the plurality of individuals with an electronic health records account (HMR account), wherein each HMR account identifies which electronic health records in the network-accessible storage repository are associated with a particular individual.

3. The method of claim 2, wherein a transaction specified by the request comprises a deposit request to deposit an electronic health record included with the request into a particular HMR account.

4. The method of claim 1, further comprising:

providing each of the plurality of individuals with an electronic health records account (HMR account), wherein each HMR account identifies which electronic health records in the network-accessible storage repository are associated with a particular individual;

determining whether the individual, corresponding to the HMR account specified by a given request, has authorized the request; and

if the individual has authorized the request, granting access to the HMR account, and performing a transaction specified by the request.

5. The method of claim 1, wherein each of the accesses described in the reports includes an identification of a specific research project for which the accessed health records are to be used.

6. The method of claim 1, wherein each of the accesses described in the reports includes an identification of a requesting entity initiating the respective request and a reason for the request.

7. The method of claim 1, wherein one or more of the reports include links to web sites at which a respective individual can register to participate in a clinical trial related to a research project for which the respective individual'"'"'s accessed health records were requested.

8. The method of claim 1, wherein the reports are generated according to a predefined frequency.

9. The method of claim 1, wherein generating the reports occurs selectively depending on a sensitivity of data contained in the requested medical reports for a given individual.

10. The method of claim 1, wherein providing the reports to the respective individuals comprises emailing the reports to the respective individuals.

11. A computer-readable storage medium including a program, which when executed on a processor performs a method for providing individuals with notifications pertaining to use of heath records, comprising:

generating a report describing accesses to health records of respective individuals of a plurality of individuals whose respective health records are accessed in a network-accessible storage repository configured to store a plurality of electronic health records for the plurality of individuals;

wherein the network-accessible storage repository is configured to allow research organizations access to the health records and wherein each of the accesses described in the report are related to a one or more research projects; and

providing the reports to the respective individuals, whereby each report is specific to the health records of the respective individual being provided the report.

12. The computer-readable medium of claim 11, wherein each of the plurality of individuals has an electronic health records account (HMR account) that identifies which electronic health records in the network-accessible storage repository are associated with a particular individual;

and further comprising;

determining whether the individual, corresponding to the HMR account specified by a given request, has authorized the request; and

if the individual has authorized the request, granting access to the HMR account, and performing a transaction specified by the request.

13. The computer-readable medium of claim 11, wherein each of the accesses described in the reports includes an identification of a specific research project for which the accessed health records are to be used.

14. The computer-readable medium of claim 11, wherein, for each request, the reports include an identity of a requesting entity initiating the respective request and a reason for the request.

15. The computer-readable medium of claim 11, wherein the providing comprises emailing the reports.

16. The computer-readable medium of claim 11, wherein the accesses to the respective health records stored in the network-accessible storage repository is controlled at least in part by access rights established by the respective individuals.

17. A system for providing notifications of patient-controlled access to electronic health records, comprising:

a network-accessible storage repository configured to store a plurality of electronic health records regarding a plurality of patients;

a plurality of electronic health records accounts (HMR accounts) provided to the plurality of patients, wherein each HMR account identifies which electronic health records are associated with a particular patient;

a computer with a memory containing a program configured to receive, over a data communications network, requests to access selective records contained in the plurality of HMR accounts;

a report generator configured to;

generate a report describing each access for each individual whose respective records are accessed; and

provide the reports to the respective individuals, whereby each report is specific to the health records of the respective individual being provided the report.

18. The system of claim 17, further comprising a security component configured to enforce access rights to the respective health records, the access rights having been established by the respective individuals;

and wherein the security component ensures requests to selective records are permitted only if the respective individual corresponding to the selective records being requested has established an appropriate access right granting access to the selective records.

19. The system of claim 17, wherein, for each request, the reports include an identity of a requesting entity initiating the respective request and a reason for the request.

20. The system of claim 17, wherein each of the accesses described in the reports includes an identification of a specific research project for which the accessed health records are to be used.