Upwards of 75 percent of all physicians have adopted some form of Electronic Health Record (EHR) system. Which devices they use to access information, however, can directly impact the confidentiality and security of patient records. With close to 90 percent of physicians incorporating personal devices into their work environment the need for a bring your own device (BYOD) policy has become a priority. While the benefits of enhanced patient care may seem to outweigh any potential issues, the use of unsecured devices by unprepared practitioners could result in a data breach and non-compliance fines.
Cause and Effect
Statistics show that over 50 percent of medical staff access unsecured connections offsite with the same devices they use at work, leaving them exposed to spyware and malware.
Even something as seemingly innocent as downloading an application can place patient information at risk, as more than a million mobile malware applications currently exist. Any application has the potential to damage the integrity of your network and all should be scanned prior to installation.
Security and encryption are two vital components of any secure device, yet surprisingly, over 40 percent of healthcare workers use devices with inadequate password protection. It’s estimated that 38 percent of medical facilities have yet to implement policies and procedures to ensure personal devices meet the security requirements necessary to protect their EHR system and office network.
A Secure BYOD Policy
EHR is here to stay, as are personal devices, so the best solution is one which allows the two to work in harmony while protecting patient records and your network. Some ways to enhance your security include:
- Educating staff on the importance of using password protection.
- Installing applications which can eradicate sensitive data should the device become lost or stolen.
- The installation of malware scanning software.
With the right BYOD policy in place you’re free to utilize the latest technology while keeping your patients’ confidential data safe.
