The Health Information Technology for Economic and Clinical Health Act, abbreviated the HITECH Act, was enacted under Title XIII of the American Recovery and Reinvestment Act of 2009 (Pub. L.Tooltip Public Law (United States) 111–5 (text) (PDF)). Under the HITECH Act, the United States Department of Health and Human Services (U.S. HHS) resolved to spend $25.9 billion to promote and expand the adoption of health information technology.[1] The Washington Post reported the inclusion of "as much as $36.5 billion in spending to create a nationwide network of electronic health records."[2] At the time it was enacted, it was considered "the most important piece of health care legislation to be passed in the last 20 to 30 years"[3] and the "foundation for health care reform."[3][4]

The former National Coordinator for Health Information Technology, Farzad Mostashari, has explained: "You need information to be able to do population health management. You can serve an individual quite well; you can deliver excellent customer service if you wait for someone to walk through the door and then you go and pull their chart. What you can't do with paper charts is ask the question, 'Who didn't walk in the door?'"[5]

Implementation and effects

In the years since the law was passed, electronic health records in the United States have become more common, but it's unclear how much this was caused by the law.[6] The meaningful use incentives in the law only applied to certain types of hospitals, however, and a 2017 study suggests that these hospitals did adopt electronic health records more aggressively.[6]

Subtitle A – Promotion of Health Information Technology

Part 1 – Improving Health Care Quality, Safety, and Efficiency

Electronic health records (EHR)

The HITECH Act set meaningful use of interoperable EHR adoption in the health care system as a critical national goal and incentivized EHR adoption.[7][8] The "goal is not adoption alone but 'meaningful use' of EHRs—that is, their use by providers to achieve significant improvements in care."[9]

Title IV of the act promises maximum incentive payments for Medicaid to those who adopt and use "certified EHRs" of $63,750 over 6 years beginning in 2011. Eligible professionals must begin receiving payments by 2016 to qualify for the program. For Medicare, the maximum payments are $44,000 over 5 years. Doctors who do not adopt an EHR by 2015 will be penalized 1% of Medicare payments, increasing to 3% over 3 years. In order to receive the EHR stimulus money, the HITECH act (ARRA) requires doctors to show "meaningful use" of an EHR system. As of June 2010, there are no penalty provisions for Medicaid.[10]

Health information exchange (HIE) has emerged as a core capability for hospitals and physicians to achieve "meaningful use" and receive stimulus funding. Starting in 2015, hospitals and doctors will be subject to financial penalties under Medicare if they are not using electronic health records.[11]

Meaningful use

The main components of meaningful use are:

In other words, providers need to show they're using certified EHR technology in ways that can be measured significantly in quality and in quantity.[12]

The meaningful use of EHRs intended by the US government incentives is categorized as follows:

The Obama Administration's Health IT program intends to use federal investments to stimulate the market of electronic health records:

The detailed definition of "meaningful use" was rolled out in 3 stages. Details of each stage were hotly debated by various groups.[which?] Stage 1 was finalized in July 2010,[13] Stage 2 in August 2012,[14] and Stage 3 in October 2015[15]

Meaningful use Stage 1

The first steps in achieving meaningful use are to have a certified EHR and to be able to demonstrate that it is being used to meet the requirements.[16] Stage 1 contains 25 objectives/measures for Eligible Providers (EPs) and 24 objectives/measures for eligible hospitals. The objectives/measures have been divided into a core set and menu set. EPs and eligible hospitals must meet all objectives/measures in the core set (15 for EPs and 14 for eligible hospitals). EPs must meet 5 of the 10 menu-set items during Stage 1, one of which must be a public health objective.[17]

Full list of the Core Requirements and a full list of the Menu Requirements.

Core Requirements:

  1. Use computerized order entry for medication orders.
  2. Implement drug-drug, drug-allergy checks.
  3. Generate and transmit permissible prescriptions electronically.
  4. Record demographics.
  5. Maintain an up-to-date problem list of current and active diagnoses.
  6. Maintain active medication list.
  7. Maintain active medication allergy list.
  8. Record and chart changes in vital signs.
  9. Record smoking status for patients 13 years old or older.
  10. Implement one clinical decision support rule.
  11. Report ambulatory quality measures to CMS or the States.
  12. Provide patients with an electronic copy of their health information upon request.
  13. Provide clinical summaries to patients for each office visit.
  14. Capability to exchange key clinical information electronically among providers and patient authorized entities.
  15. Protect electronic health information (privacy & security)

Menu Requirements:

  1. Implement drug-formulary checks.
  2. Incorporate clinical lab-test results into certified EHR as structured data.
  3. Generate lists of patients by specific conditions to use for quality improvement, reduction of disparities, research, and outreach.
  4. Send reminders to patients per patient preference for preventive/ follow-up care
  5. Provide patients with timely electronic access to their health information (including lab results, problem list, medication lists, allergies)
  6. Use certified EHR to identify patient-specific education resources and provide to patient if appropriate.
  7. Perform medication reconciliation as relevant
  8. Provide summary care record for transitions in care or referrals.
  9. Capability to submit electronic data to immunization registries and actual submission.
  10. Capability to provide electronic syndromic surveillance data to public health agencies and actual transmission.

To receive federal incentive money, CMS requires participants in the Medicare EHR Incentive Program to "attest" that during a 90-day reporting period, they used a certified EHR and met Stage 1 criteria for meaningful use objectives and clinical quality measures. For the Medicaid EHR Incentive Program, providers follow a similar process using their state's attestation system.[18]

In 2017, the government for the first time charged an EHR vendor with falsely representing to customers and the government that its EHR system met the requirements for meaningful use. eClinicalWorks agreed to pay $155 million to settle government charges and a "qui tam" lawsuit brought by a whistleblower who implemented eClinicalWorks' system at Rikers Island Correctional Facility in New York City.[19] The government also alleged that ECW paid kickbacks for referrals.[19] The government also reached separate settlement agreements with three eClinicalWorks employees who will pay a total of $80,000 to the government to settle civil allegations.[20]

National Coordinator for Health Information Technology (HIT)

There is established within the Department of Health and Human Services an Office of the National Coordinator for Health Information Technology (ONC). The National Coordinator is appointed by the Secretary and reports directly to the Secretary.

The National Coordinator is responsible for the development of the Nationwide Health Information Network.[21]

HIT Policy Committee

The HIT Policy Committee recommends a policy framework for the development and adoption of a nationwide health information technology infrastructure that permits the electronic exchange and use of health information.[22]

HIT Standards Committee

The HIT Standards Committee recommends to the National Coordinator standards, implementation specifications, and certification criteria. The Standards Committee also harmonizes, pilot tests, and ensures consistency with the Social Security Act.

Part 2 – Application and Use of Adopted Health Information Technology Standards; Reports

Subtitle B – Testing of Health Information Technology

This section is empty. You can help by adding to it. (February 2013)

Subtitle C – Grants and Loans Funding

This section is empty. You can help by adding to it. (February 2013)

Subtitle D – Privacy

Part 1 – Improved Privacy Provisions and Security Provisions

The HITECH Act requires entities covered by the Health Insurance Portability and Accountability Act (HIPAA) to report data breaches, which affect 500 or more persons, to the United States Department of Health and Human Services (U.S. HHS), to the news media, and to the people affected by the data breaches.[23] This subtitle extends the complete Privacy and Security Provisions of HIPAA to the business associates of covered entities.[24] This includes the extension of updated civil and criminal penalties to the pertinent business associates. These changes are also required to be included in any business-associate agreements among the covered entities. On November 30, 2009, the regulations associated with the enhancements to HIPAA enforcement took effect.[25]

Another significant change brought about in Subtitle D of the HITECH Act is the new breach notification requirements. This imposes new notification requirements on covered entities, business associates, vendors of personal health records (PHR) and related entities if a breach of unsecured protected health information (PHI) occurs. On April 27, 2009, the Department of Health and Human Services (HHS) issued guidance on how to secure protected health information appropriately.[26] Both HHS and the Federal Trade Commission (FTC) were required under the HITECH Act to issue regulations associated with the new breach notification requirements. The HHS rule was published in the Federal Register on August 24, 2009,[27] and the FTC rule was published on August 25, 2009.[28]

The final significant change made in Subtitle D of the HITECH Act implements new rules for the accounting of disclosures of a patient's health information. It extends the current accounting for disclosure requirements to information that is used to carry out treatment, payment and health care operations when an organization is using an electronic health record (EHR). This new requirement also limits the timeframe for the accounting to three years instead of six as it currently stands. These changes took effect January 1, 2011, for organizations implementing EHRs between January 1, 2009 and January 1, 2011, and January 1, 2013, for organizations who had implemented an EHR prior to January 1, 2009.

Subtitle D also includes a "third-party directive" stating that individuals have the right to obtain a copy of their health information in an electronic format and, if the individual chooses, to direct the covered entity to transmit such copy directly to an entity or person designated by the individual. Although HHS had interpreted the statutory cap on the provision of medical records to an individual to apply to medical records delivered under the third-party directive, a 2020 decision by the United States District Court for the District of Columbia voided that regulation on the grounds that it had not gone through notice and comment. [29]

On July 14, 2010, HHS issued a rule that listed categories that included 701,325 entities and 1.5 million business associates who would have access to patient information without patient consent after the patient had given general consent to their medical practitioner's HIPAA release.[30][31]

See also

References

  1. ^ HHS.gov/Recovery Recovery Act-Funded Programs Archived 2013-05-14 at the Wayback Machine Health Information Technology (IT) section Archived 2013-09-26 at the Wayback Machine, also known as HIT
  2. ^ "The Machinery Behind Health-Care Reform", The Washington Post, May 16, 2009
  3. ^ a b Contractors hungry for stimulus Archived 2013-11-03 at the Wayback Machine, July 24, 2009
  4. ^ Why and How Secretary Sebelius Should Avoid a Network Monopoly, ADRIAN GROPPER MD, Mar 5, 2009
  5. ^ ONC Chief: Meaningful Use of Meaningful Use Measures Archived 2013-06-22 at the Wayback Machine, July 23, 2012
  6. ^ a b Adler-Milstein, Julia; Jha, Ashish K. (August 2017). "HITECH Act Drove Large Gains In Hospital Electronic Health Record Adoption". Health Affairs. 36 (8): 1416–1422. doi:10.1377/hlthaff.2016.1651. ISSN 0278-2715. PMID 28784734.
  7. ^ CDC (Jun 3, 2011). "Introduction". Meaningful Use. CDC. Retrieved 31 October 2011.
  8. ^ Blumenthal, D. (2010). "Launching HITECH". New England Journal of Medicine. 362 (5): 382–385. doi:10.1056/NEJMp0912825. PMID 20042745.
  9. ^ Blumenthal, D.; Tavenner, M. (2010). "The "Meaningful Use" Regulation for Electronic Health Records". New England Journal of Medicine. 363 (6): 501–504. doi:10.1056/NEJMp1006114. PMID 20647183.
  10. ^ Habib JL. EHRs, meaningful use, and a model EMR. Drug Benefit Trends. May 2010;22(4):99-101.
  11. ^ Pear, Robert. "Warnings Over Privacy of U.S. Health Network." New York Times, February 18, 2007.
  12. ^ Centers for Medicare & Medicaid Services (Oct 12, 2011). "CMS EHR Meaningful Use Overview". EHR Incentive Programs. Center for Medicare & Medicaid Services. Archived from the original on 30 October 2011. Retrieved 31 October 2011.
  13. ^ "Secretary Sebelius Announces Final Rules To Support 'Meaningful Use' of Electronic Health Records" (Press release). Washington, DC: U.S. Department of Health & Human Services. July 13, 2010. Archived from the original on July 15, 2010.
  14. ^ "HHS announces next steps to promote use of electronic health records and health information exchange" (Press release). U.S. Department of Health & Human Services. August 23, 2012. Archived from the original on September 16, 2012.
  15. ^ 80 FR 62761
  16. ^ "Meaningful Use Definition & Objectives". HealthIT.gov. U.S. Department of Health and Human Services. 6 February 2015. Retrieved 16 October 2017.
  17. ^ See subsection (e), "42 CFR Sec. 495.6. Meaningful use objectives and measures for EPs, eligible hospitals, and CAHs" (PDF). Government Publishing Office. Retrieved 16 October 2017.
  18. ^ Torrieri, Marisa (December 24, 2011). "Dealing with Meaningful Use Attestation Aggravation". Physicians Practice. UBM Medica LLC. Archived from the original on January 8, 2012.
  19. ^ a b "Electronic Health Records Vendor to Pay $155 Million to Settle False Claims Act Allegations". U.S. Department of Justice. 31 May 2017. Retrieved 16 October 2017.
  20. ^ Arndt, Rachel Z. (31 May 2017). "eClinicalWorks will pay $155 million for misleading users". Modern Healthcare. Retrieved 16 October 2017.
  21. ^ H.R. 1 Archived 2016-01-26 at the Wayback Machine Subtitle A, Sec. 3001. "The National Coordinator is responsible for the development of a nationwide health information technology infrastructure."
  22. ^ H.R. 1 Archived 2016-01-26 at the Wayback Machine Subtitle A, Sec. 3002.
  23. ^ "HIPAA/HITECH Enforcement Action Alert". The National Law Review. Morgan, Lewis & Bockius LLP. 2012-03-22. Retrieved 2012-04-16.
  24. ^ 42 U.S.C. §17931
  25. ^ HHS Strengthens HIPAA Enforcement
  26. ^ Guide to Privacy and Security of Electronic Health Information
  27. ^ Health and Human Services Breach Notification Rule
  28. ^ Federal Trade Commission Breach Notification Rule
  29. ^ What is The Effect of Ciox Health v. Azar on HiTECH letters
  30. ^ Federal Register Document 2010-16718 tables under paragraphs 75 FR 40911 334, 376.
  31. ^ Health Freedom Watch Newsletter September 2010, Proposed Changes to Privacy Rule Won't Ensure Privacy

Further reading

External links

Authority control databases
Health informatics
Categories