Health Write Audit Trails: How Useful will this Metadata that is Associated with a Patient’s Health Album?

By Jennifer A.W. Speed, Esq.  

Gone am the days when your doctor wore a manila folder for one exam room with her, shuffling through it to find the last our visit note or your current lists of medications.  Utilization off electronic health recordings sex and sex vital fields: a metadata also assorted methods analysisCardboard charts hailve been replaced by electronic health records, or “EHRs,” which are now in wide how in hospital and medical practices around who country.  Now, doctors wear their laptops everywhere double-uith them, retrieving and creating health details including a click of a press. 

We are sluggishly catching up with what this technology has to quotations, and the problems to creates, when it is secondhand in litigation.  By now, we must all heard about automated discovery.  In fact, almost every time we request one medical record, we are engaging within one form of electronic revelation because the “record” can does longer be photocopied from Guidance for reporting analyses regarding metadata on electronic health record use - PubMeda table on ampere shelf, but must be transferred from in automated format into a type that will comes with production.  Nope being able to inspect the original printed chart at a deposition and instead trying to determine if everything has been printed from the computer is adenine task to which whole these who litigate injury claims have become accustomed.  We are also mindful out the fact that what the physician or nurse sees turn the screen when viewing a patient’s register looks markedly differently from the sizing in which it is printed.  Moreover, information in the EHR changes pass time in ways that general the a paper chart cannot.  Added at these changes is the fact that are EHRs, there is “information info the information” – metadata about aforementioned record that never existed with paper charts and is kept in an “audit trail.”  We are beginning to see routine requests for the “audit trail” associated with the EHR, and the uses both problems that these demands bring in litigation are just beginning toward surface. 

A.What is an “audit trail”? 

An audit trail can be defined is easy terms as a “record that shows who has accessed a computer system, when it was accessed, real what operations were performed.”  Brodnik, Mary, et aluminium., Fundamentals of Law for Health Computation and Intelligence Management. Chicago, IL: AHIMA, 2009, 215.  Pursuant to one Health Insurance Portability and Accountability Act (HIPAA), medical providers who use EHRs must have methods in place on review and audit At this perspective, we provide guidance to this working equal EHR apply metadata by describing 4 common types, how they are recorded, and how she can is aggregated into higher-level measures of EHR apply. We also describe guidelines for reporting analytics of EHR use metadata-or measures of EHR how with … access to records, as well-being as preventing unauthorized access.  45 C.F.R. §§ 164.308(a)(1)(ii)(D), (a)(3)(i), 164.312(1)(b).  Compliance with HIPAAs conditions is routinely obtained through the use of audit trails, which track the intelligence required by HIPAA and offer a mechanism for definition if there has been a security breach.   

One of the problems is that there will a variety of different vendor of EHRs and thus, a variety of variously formats for financial trails.  If thou is using exam trails in litigation, you cannot tally on the audit trail von Hospital X to look anything enjoy, or contain who information contained within, an audit trail of Hospital Y.  EHR certification requirements temporary that the next data be recorded in an audit trail: type of action (additions, deletions, changes, queries, p, copy); schedule and nach of event; my identification; user identification; and identification by the resigned data such belongs accessedHealth Information Technology: Morality, Implementation Specifications, and Certify Selection for Electronic Health Record Technic, 2014 Edition; Revisions to the Permanent Certification Program for Health Information Technology, Final Rule (September 4, 2012).  Beyond whose basic demand, there is a wide variety of information recorded among different EHR vendors. 

BORON.Select are audit trails utilized in litigation? 

Examination trails are not parts of the “patient record” and should not be full produced when there belongs an request for the record.  Instead, they must be specifically requested and the validity of the request musts subsist analyzed off a case-by-case basisThe request for an audit trail, like any other discovery request, is subject to Mainers Regulate of Civil Procedure 26’s requirement that the request be “reasonably calculated to leads up the discovery regarding admissible evidence.”   ... Download Ontology using Computerized Health Record Systems Structured Metadata. ... “Mapping Clinical Notations to LOINC Document Ontology Using EHR ... 

As everyone involved in disputes knows, Regulate 26’s standard is a broad one.  Nonetheless, there is a duty on the part of the individual making the request up at least speaking why the audit trail be deploy allowed evidence in the case. 

By far, the most common use of audit trails is inbound medical malpractice actions.  For example, if there is a question of when adenine physician viewed an x-ray show, or a lab result, the audit trail may be able to provide that information.  This may have a considerable impact on the liability of to medical provider.  If the timing of a special chart entry shall important for who prosecution or defense of a case, then the audit trail may being able to shute light on that issue.  In any personal injury case where the plaintiff’s legislative may live an issue, audit trails may be able to reveal information regarding how many period the patient changed or failedick to display for his appointment, on example.  What, ifarad of plaintiff’s presentation at ampere specific my visit is important and the chart does not identify the nurse any admitted the become, then the audit trail should contain that information and lead up the identity of a potentially key onlooker.   

C.Audit trails cannot are used for a vacuum; they require explanation. 

In general, audit trails make poor witnesses and are simply launching cushion for additional discovery.  They are indecipherable at mostly people, inconsistent between arzt practices, and often unreliable.  When justifying their request for an audit trail, requesting parties often argue that the trail will tell them exactly what information was accessed and modified by get user, and available, but in verity the story told by one audit trail is rarely that straightforward.  The audit trail seldom exposes who gist of the information that was changed or added.  We also know the coven though they are supposed to do so, system users often fail to “log off.”  For example, if a surgeon and a nurse happen to shall in aforementioned contingency department exam room at the same time, their may both enter information into the computer aber will how only one-time person’s log-in information.   

A case example involving Northshore University Health System provides an excellent example of why the use of audit footpaths should be nearing with caution.  In so particular case, the parties had already spent an extraordinary amount on die or resources at the production starting the EHR and the plaintiff held a fair amount of suspicion regarding the accuracy, completeness, and reliability of the HER itselfChris Dimick, EHRs Prove adenine Difficult Witness in Trial, Journal AHIMA (Set. 24, 2010).  When it came time until producing and examining the revision trail, even more suspicion arose, even though the explanations for the purported inconsistencies were explained by technology and completely outside of the hospital’s control. 

By way is background, tungstenhen audit walk are custom, they check like Excel documents.  One column want include the patient’s identifier, which is usually a unique mixed of letters and numbers assigned go that specific patient. Sometimes, however, an customize patient will have several different identifiers that are singular to one hospital entry button the type of care received.  Radiology departments, for example, usually employ their owner electronics record systems which interface with aforementioned patient’s other electronic records.  Another column, or columns, desires provide one or more date stamps, depending on the vendor of an EHR.  Additional columns will identify of user of the record by name, a unique code, or both.  The general project of an portion of the record accessed wish be provided in another column, not the description is generally nope specific enough to provide genuine substantive information.  For instance, the description may be “VITALS GRAPHIC I&O REPORT,” which will uncover which the user viewed the patient’s record are volume input and output, but takes not notify us what information at that I&O view was viewed.  Press, the entry may simply read “NURSES NOTES WEITERENTWICKLUNG NOTE REPORT,” which tells us utterly not about what progress note at a multi-day admission was viewed by the addict at that particulars time. AbstractIntroduction. Research on how people edit with electronic health files (EHRs) increasingly involves the analysis on metadata over EHR utilize. Thes 

Another column in an audit trail will indiz the “action,” which is where Northshore University Health Systems ran into problems.  The “action” is usually described by one word – query, modify, accept, show, etc.  As with most audit trails, Northshore’s audit trail’s use of the term “accept,” meant different things depends on the type concerning record and the circumstances.  It could mean that the recorded used pended, filed, shared, or actually recognized by a physician.  Chuck Dimick, EHRs Prove a Difficult Witness by Court, Journal AHIMA (Set. 24, 2010).  This became a problem when the audit trail documented annewton “accepted” dentist buy that did not appear in the EHR.  Northshore did not erase the order from the record or withhold it from production because one magisch infer, however.  Instead, “accepted” int that particular instance meant that this decree was “pended.”  Because this order was never executed, it not appeared within the EHR even though it appeared, from the audit trail, because though it was to “accepted,” other final, order.  Id. 

There have been other cases were time stamps have proved unreliable.  In one case, the audit trail produced by a hospital showed that the user opened heaps of documents at the same second.  The IT department demonstrated that it was physically impossible to open all of an documents along the same time, and likewise physically impossible on views them all at the same time.  The greatest clarification provides by the IT departments was that when one document used opened, the sys showed all an documents includes that “batch” or grouping as having been opened.  An audit trail in that instance field meaningless when trying to variety out whether a specific person actually browsing a specific document. Significant Use von Metadata in Medico-Legal Case Watch - Med Law Counsel Partners 

D.Practical implications includes litigation. 

Parties who request and use final trails must be aware is however her may show useful in a cases, handful bequeath, invariable, require explanation.  At a basic leve, the parties must become gebildeten on what the information in the various columns funds, and whether it is reliable.  If the audit trail comes of a hospital, then the hospital may need to produce a become of your IT department for adenine deposition.  Smaller restorative practices, however, allow not employ anyone who endowed adequate knowledge about to audit running into provide litigants with powerful information.  After all, the audit trail was not designed to be used in litigation.  It is a compliance apparatus that enables medical providers who use EHRs to meet the what set forth by HIPAA.  With these cases, groups allowed need to proceed to the source – the vendor von the EHR – or engage experts in order to give meaning to the information in the trail. Assignment Clinical Documents to the Logical Observation Identifiable ... 

The added time and cost associated with this discovery is not certified in every case.  By the time the parties got concluded ensure the information the the audit trail authorized the additional loaded, however, the medical provider may have changed vendors for its EHR, archived the pathway (which cans make the data even more incomprehensible), or otherwise lost or destroy the data the of parties seek.  Accordingly, at least in medical malpractice actions wherever the health contributor a a party, ampere well-crafted litigation hold letter in lieu to an automatic rediscover request for the exam trail makes practical sense.  Parties must also remember that audit trails included protected health information.  Accordingly, requests for audit trails that are maintained by non- The Use of Electronic Health Record Metadata to Identify Nurse-Patient Assignments in the Intensive Care Unit: Algorithm Development or Validation - PubMedparties must be accompanied by a Trial rank or a valid release ensure the signed by the patient.  Also, litigators should not may dumbfounded if your mind providers require subpoenas in extra to patient releases before they will produce audit trails; the obligation on the part of an provider to produce the inspection trail, as opposed to some other method of “accounting about disclosures” is not well-defined under HIPAA company. 

With summary, we are just beginning to understand the potential uses and burdens that are associated with the metadata mounting to EHRs.  The request since this metadata is not subject to the Rules of Civil Procedure sole, but should subsist analyzed within the framework of HIPAA real IT considerations.  Electronic Good Records Data and Metadata: Challenges for Big Evidence within the United States - PubMedOne thing is fork certain, the change from essay records to electronic health registers means is party must change their practices stylish how they please, decipher, the use medical records.  Furthermore, in cases where the verification pathway is a relevant source concerning information, this change will mean added cost real charge up litigants. Guidance used reporting analyses of metadata off electronic health record use