Data Warehousing Part 2: Implementation & Issues Presented by: David Hartzband, D.Sc.Matthew Grob, CPHIMS, FHIMSS Director, Technology ResearchDirector.

Slides:



Advertisements
Similar presentations
Davis Wright Tremaine LLP HIT Legal Issues: HIPAA Implications to a Regional Health Information Organization Becky Williams, R.N., J.D. Partner, Co-Chair,
Advertisements

National HIT Agenda and HIE John W. Loonsk, M.D. Director of Interoperability and Standards Office of the National Coordinator Department of Health.
| Implications for Health Information Exchange – MetroChicago January 2011.
Minimum Necessary Standard Version 1.0
1 The HIPAA Privacy Rule and Research This presentation will probably involve audience discussion, which will create action items. Use PowerPoint to keep.
HIPAA Basics Brian Fleetham Dickinson Wright PLLC.
HIPAA: Privacy, Security, and HITECH, Oh My! Presented by Stephanie L. Ganucheau, Special Assistant Attorney General.
HIPAA – Privacy Rule and Research USCRF Research Educational Series March 19, 2003.
HIPAA PRIVACY REQUIREMENTS Dana L. Thrasher Constangy, Brooks & Smith, LLC (205) ; Victoria Nemerson.
Information Risk Management Key Component for HIPAA Security Compliance Ann Geyer Tunitas Group
HIPAA: FEDERAL REGULATIONS REGARDING PATIENT SECURITY.
Jill Moore April 2013 HIPAA Update: New Rules, New Challenges.
Are you ready for HIPPO??? Welcome to HIPAA
Health Insurance Portability Accountability Act of 1996 HIPAA for Researchers: IRB Related Issues HSC USC IRB.
August 10, 2001 NESNIP PRIVACY WORKGROUP HIPAA’s Minimum Necessary Standard Presented by: Mildred L. Johnson, J.D.
Project Update : Claims/Clinical Linkage Project MHDO Board of Directors June 6, 2013.
Information Integration. Modes of Information Integration Applications involved more than one database source Three different modes –Federated Databases.
Version 6.0 Approved by HIPAA Implementation Team April 14, HIPAA Learning Module The following is an educational Powerpoint presentation on the.
Organizing Data & Information
Coordinating Center Overview November 18, 2010 SPECIAL DIABETES PROGRAM FOR INDIANS Healthy Heart Project Initiative: Year 1 Meeting 1.
Informed Consent and HIPAA Tim Noe Coordinating Center.
2012 VA IRB Administrators Meeting Stephania H. Griffin, JD, RHIA, CIPP/G VHA Privacy Officer Director, Information Access and Privacy Privacy Officer.
A Robust Health Data Infrastructure P. Jon White, MD Director, Health IT Agency for Healthcare Research and Quality
1 HIPAA Security Overview Centers for Medicare & Medicaid Services (CMS)
Understanding Data Warehousing
HIPAA PRIVACY AND SECURITY AWARENESS.
AN INVITATION TO LEAD: United Way Partnerships Discussion of a New Way to Work Together. October 2012.
Confidentiality and Security Issues in ART & MTCT Clinical Monitoring Systems Meade Morgan and Xen Santas Informatics Team Surveillance and Infrastructure.
Privacy and Security Laws for Health Care Organizations Presented by Robert J. Scott Scott & Scott, LLP
Computerized Networking of HIV Providers Workshop Data Security, Privacy and HIPAA: Focus on Privacy Joy L. Pritts, J.D. Assistant Research Professor Health.
Data Warehousing Part 1: What is a Data Warehouse and How Your Organization Can Benefit Presented by: David Hartzband, D.Sc.Matthew Grob, CPHIMS, FHIMSS.
State HIE Program Chris Muir Program Manager for Western/Mid-western States.
HIT Policy Committee Privacy & Security Workgroup Update Deven McGraw Center for Democracy & Technology Rachel Block Office of Health Information Technology.
LeToia Crozier, Esq., CHC Vice President, Compliance & Regulatory Affairs Corey Wilson Director of Technical Services & Security Officer Interactive Think.
Health Insurance Portability and Accountability Act (HIPAA) CCAC.
Copyright © 2009 by The McGraw-Hill Companies, Inc. All Rights Reserved. McGraw-Hill Chapter 6 The Privacy and Security of Electronic Health Information.
Eliza de Guzman HTM 520 Health Information Exchange.
FleetBoston Financial HIPAA Privacy Compliance Agnes Bundy Scanlan Managing Director and Chief Privacy Officer FleetBoston Financial.
The Culture of Healthcare Privacy, Confidentiality, and Security Lecture d This material (Comp2_Unit9d) was developed by Oregon Health and Science University,
Policies for Information Sharing April 10, 2006 Mark Frisse, MD, MBA, MSc Marcy Wilder, JD Janlori Goldman, JD Joseph Heyman, MD.
Rhonda Anderson, RHIA, President  …is a PROCESS, not a PROJECT 2.
Working with HIT Systems
While most HMORN projects involve two to five Network sites, its largest consortiums are the most widely recognized. Nearly 40% of HMORN projects and consortium.
1 Privacy Plan of Action © HIPAA Pros 2002 All rights reserved.
Adoption and Use of Electronic Medical Records (in Federally Qualified Health Centers) and Supporting an ASP Community Care Network of Virginia, Inc.
Metadata By N.Gopinath AP/CSE Metadata and it’s role in the lifecycle. The collection, maintenance, and deployment of metadata Metadata and tool integration.
HIT Policy Committee NHIN Workgroup HIE Trust Framework: HIE Trust Framework: Essential Components for Trust April 21, 2010 David Lansky, Chair Farzad.
HIPAA Security Final Rule Overview
Copyright © 2015 by Saunders, an imprint of Elsevier Inc. All rights reserved. Chapter 3 Privacy, Confidentiality, and Security.
Case Study: Applying Authentication Technologies as Part of a HIPAA Compliance Strategy.
HIPAA Privacy Rule Positive Changes Affecting Hospitals’ Implementation of the Rule.
DAF Phase 3-Data Access for Research Frequently Asked Questions DRAFT VERSION
COMMUNITY-WIDE HEALTH INFORMATION EXCHANGE: HIPAA PRIVACY AND SECURITY ISSUES Ninth National HIPAA Summit September 14, 2004 Prepared by: Robert Belfort,
EECS David C. Chan1 Computer Security Management Session 1 How IT Affects Risks and Assurance.
HIPAA Privacy Rule Positive Changes Affecting Hospitals’ Implementation of the Rule Melinda Hatton -- Oct. 31, 2002.
HIPAA 2017 JHSPH IRB Clarifications and Changes
Agenda NACHC and Health Centers Health Systems Collaboration Models
Denise Chrysler, JD Director, Mid-States Region
HIPAA Administrative Simplification
Paul T. Smith Davis Wright Tremaine LLP
Data Quality By Suparna Kansakar.
HIPAA Security Standards Final Rule
Paul T. Smith, Esq. Partner, Davis Wright Tremaine LLP
National Congress on Health Care Compliance
Enforcement and Policy Challenges in Health Information Privacy
The Health Insurance Portability and Accountability Act
THE 13TH NATIONAL HIPAA SUMMIT HEALTH INFORMATION PRIVACY & SECURITY IN SHARED HEALTH RECORD SYSTEMS SEPTEMBER 26, 2006 Paul T. Smith, Esq. Partner,
Analysis of Final HIPAA Privacy Modification Rule
PSO Overview for (name of organization’s) PSES Workgroup
Strategies to Comply with the HPAA Privacy Rule Before the HIPAA Security and Enforcement Rules are Final Presented by: Steven S. Lazarus, PhD, FHIMSS.
Presentation transcript:

Data Warehousing Part 2: Implementation & Issues Presented by: David Hartzband, D.Sc.Matthew Grob, CPHIMS, FHIMSS Director, Technology ResearchDirector & Practice Leader, Health IT RCHN Community Health FoundationRSM McGladrey NACHC FOM-IT Conference November 11, 2009

Agenda Review Technical Planning Designing the Data Model Implementation Privacy, Security & Secondary Use Non-Technical Issues Uses of the Data Warehouse Future Developments Questions

Review 1.A Data Warehouse is an extract of an organization’s data — often drawn from multiple sources — to facilitate analysis, reporting and strategic decision making. It contains only alpha-numeric data, not documents or other types of content. 2.Data Warehouses have different value for patients, providers, populations & organizations 3.Planning must be done with respect to what you want to accomplish 4.Scale implementation both technically & organizationally with respect to what you want to accomplish

Planning a Data Warehouse is NOT a technology project it must fit into the business & clinical goals of your organization Technology is not the Goal!

Technical Planning - 2 Now for the technology: – Infrastructure: Network (100MBPS minimum to 1 GBPS) connecting all participating organizations Servers – 1 Ghz processer, 2-4 GB virtual memory, 2 database servers (1 for application data, 1 for the ETL application) Associated scalable disk storage, DW size % for growth –Portfolio of software applications (in addition to the DW/ETL software) HIT apps Commercial relational database Analysis & reporting tools – This type of infrastructure & software portfolio usually requires an IT Staff

Data Model Design Doctor, DR., DR, Dr., Dr, dr., dr, MD, md all map to Dr. A data model defines & maps all the forms that data take in the real world & across different systems Data is Extracted from different sources (PM, EHR, registries, etc.) & potentially different organizations It is Transformed according to rules defined in the data model It’s then Loaded into the data warehouse This is what the ETL tool does

Data Model Design - 2 PM EHR Reg Other Docto r DR. dr Dr Transform Design Model Rules Load Data Mart Warehouse Data Mart Staging Tables Could be from multiple locations Extraction

Data Model - 3 Top-Down design requires that every data item that you want to analyze be defined along every dimension you want to analyze & every relationship it has with other data items –Cost: cost-per-item, cost-per-use, cost-per-day, cost-per-week, etc. –This is a huge effort& is usually only undertaken by large organizations with deep pockets Bottom-up design defines a set of transform & relationship rules with respect to a specific business or clinical problem. –A data mart is then loaded to be used for this problem –Multiple data marts are defined & loaded for strategic business & clinical problems –These designs are analyzed for similarities & data marts are combined where possible –This is the approach most often used (unless you are the Government or Goldman Sachs)

Additional Design Two more design tasks: –Data cleansing Rule set written to eliminate duplicates, obvious errors, ambiguities and/or contradictions Applied to transformed data before Load –Query development Linked to Key Performance Indicators May also be linked to regional or Federal reporting needs – UDS – Epidemiology, Population statistics – Other

Implementation Generally requires selecting a vendor who will: –Evaluate infrastructure & software portfolio –Assist in data model design & query development –Deploy hardware & software (or host) HCCN or PCA may provide leverage for single vendor selection across the network or association –Already may provide hardware & software portfolio –Might also already aggregate data from members –Makes many of the technology (& some of the organizational) issues easier to address

Implementation - 2 Design & deployment of a data warehouse is real work Even with a vendor assisting, your staff (not just your IT staff) will have months of work that you will have to plan for It may take as much as 2 years to go from your decision to develop a data warehouse until you are routinely producing reports with it

Privacy, Security, Secondary Use

Privacy A data warehouse may contain huge amounts of protected health information (PHI) – patient information that cannot be disclosed except under specific circumstances Most data is mined & analyzed in aggregated & deidentified form Actual PHI can only be shared if ‘business associates agreements’ are in place among all covered entities that participate in the data warehouse PHI can be disclosed between covered entities: –For treatment purposes –If both entities have relationships with the patient –For health operations purposes (including quality efforts) –To authorized public health entities for a specific public health purpose –For research purposes only with patient consent

Security The data in a data warehouse is only useful if it can be used, but this requires effective security be deployed HIPAA privacy rule requires that administrative, technical & physical security to ensure the privacy of PHI & to reasonably safeguard PHI from intentional or unintentional disclosure HIPPA security rule requires that covered entities protect against reasonably anticipated threats to the security of electronic PHI, that their workforces adhere to the Security rule & that there contractors (like HCCNs & HIEs) assure compliance through business associate agreements

Secondary Use The large amounts of data in a data warehouse are attractive to many parties for a variety of purposes PHI is generally not appropriate for secondary use disclosure unless it it deidentified The stewardship of PHI is a primary issue for participants in a data warehouse. Policy on privacy, security & secondary use must be developed before issues come up Secondary use must be addressed in the business associates agreements among covered entities & with their contractors – HCCNs, PCAs, HIEs

Culture Matters!

Non-Technical Issues Culture? –Use of a data warehouse requires substantial commitment to transparency & data sharing across all participants –Not all participating organizations may have that commitment –Some queries may reveal differences among organizations Differences in adherence to quality criteria Differences in outcomes Etc.

Non-Technical Issues - 2 Readiness –Not all organizations may be at the same level of preparation: Training Use of electronic technology Lack of Executive/Board commitment –Nothing ensures failure of a project that requires such a large investment than lack of support from the management or Board of a health center, HCCN or PCA Lack of agreement on: – Appropriate level of transparency –Assignment of liability –Data stewardship

Current Use Future Developments

Uses of the Data Warehouse Development of new or more productive reports for: –Quality evaluation –Registry development –Epidemiologic & public health efforts –Etc. Larger scale & novel analysis for –Improvement of clinical outcomes –Improvement of business results Provision of deidentified data for –Research –Quality comparisons –Etc.

Future Developments Search –Becoming more & more important as even results sets become very large –New forms of search including numeric, pattern matching, context based etc. Visualization –Visual representation of analytic results makes them more understandable New organizational forms –Virtual &/or actual organizations based on business or clinical similarities revealed by analysis –May provide new/different opportunities for improvement of clinical outcomes or business results

Questions David Hartzband (617) Matthew Grob (212)