Protected Health Information (PHI)

Private health information is contained in electronic medical records (EMR) and must be kept secure. With the move to EMR, as required by U.S. law, patient and privacy advocates have become increasingly concerned that sensitive patient information and data be thoroughly protected. PHI that identifies health (such as drug abuse or mental health issues) can potentially lead to denial of employment or other opportunities. Thus, PHI must be properly protected to prevent the unauthorized access of private patient health information.

According to the Health Insurance and Accountability Act (HIPAA), IT departments have a primary role in PHI, as they are required to record each instance of access to such information HIPAA rules also acknowledge the increasing collaboration of IT and legal departments as they work toward the common goal of securing PHI. IT professionals and consultants are expected to play an increasingly responsible role, per HIPAA laws and other federal guidelines for PHI. As such, their value in the EMR arena is expected to surge.