Identity Management

Not every healthcare organization embraced electronic medical records (EMRs) at first. But the incentives and regulations put in place by Meaningful Use and the Affordable Care Act have made it necessary to implement them. Now, organizations are not only embracing EMRs, but also making it easier for their patients to access and manage them through remote portals. According to the Office of the National Coordinator for Health IT, approximately 63 percent of patients who used portals did so at their doctors’ recommendation. Despite the growing popularity of patient portals, there are still more than 25 percent of patients who refuse to use them for fear of jeopardizing their data. Considering the sensitive nature of their protected health information (PHI), along with the nearly 5.6 million health records that were compromised last year, those fears are more than reasonable. What can providers do? Hackers have honed in on the healthcare industry for two main reasons: the treasure trove of valuable information in medical records and a sometimes dated approach to cybersecurity. In fact, between 2009 and 2016, more than 30 percent of all big data breaches occurred within healthcare systems. Without proper encryption methods, login redundancies, and detection tools, portals are almost as easily accessible to hackers as they are to authorized users. As their usage grows, that lack of security will become an exponentially greater threat to patients’ PHI and identities. “Many of us are accustomed to keeping the same name and password with our accounts, and as we know, that information is very lucrative to the right individuals," says Victoria Dames, Director of Identity Management for Experian Health. "While it's our due diligence to constantly change them, there are certain scenarios where maybe we forgot to change them or we don’t regularly login and that password may sit idle. When that happens, you want to make sure that you have the right technology in place to be able to catch somebody potentially logging in, trying to impersonate a patient.” Providers can’t lower the value of PHI to make it less attractive to hackers, but they can protect it more effectively with up-to-date cybersecurity measures. These four tips can help organizations bring their patient portal security up-to-date and keep their networks safe from unauthorized access: 1. Automate the portal sign-up process. Automating the initial sign-up process can stop false enrollments into the portal at the source. When implemented correctly, the automation will only require the patient to enter a few pieces of information, and then the software can confirm the user’s identity on the back end. 2. Leverage multilayer verification. After patients have signed up to access the portal, using multilayer verification can ensure all future sessions are equally secure. For example, two-factor authentication adds additional protection on top of conventional login credentials. In addition to a password or PIN, users also have to provide something personal such as a cell phone number, ZIP code, fingerprint, iris scan, or more. If the user’s device, account ID, and/or password are compromised, two-factor authentication can ensure the organization’s network remains safe. 3. Keep anti-virus and malware software up-to-date. Multilayer verification protects users’ direct access to portals, but there are other, more frequent vulnerabilities that also need attention. For instance, HIMSS Analytics recently found that 78 percent of providers experienced ransomware and malware attacks last year. Email is the avenue of choice for malware, and these attacks constantly evolve to slip past conventional security measures. If anti-virus software is outdated, it remains vulnerable to every new iteration of malware that attacks the network. Most solutions allow for automatic opt-ins so updates are downloaded and installed as soon as they’re made available. 4. Promote interoperability standards. When primary care physicians, specialists, and healthcare payers talk to one another throughout the course of a patient’s care, it isn’t always through email. When their systems aren’t compatible, they can’t communicate as clearly and securely as they need to. Interoperability makes it possible for disparate systems to share medical histories and patient data while making that data easily understandable on either system. Because interoperability is essential for improving the continuum of care, the Centers for Medicare and Medicaid Services provide standards for healthcare organizations to promote it. More patients and providers are optimistic about using technology to improve the healthcare experience. However, one in five patients remain so suspicious of healthcare data security that they refuse to even divulge some information to their physicians. Fortunately, with the right tools, organizations can effectively strengthen portal security and boost the confidence their patients have in them.

This week, Experian Health is a proud partner of National Health IT Week. U.S. National Health IT Week is a nationwide awareness week focused on catalyzing actionable change within the U.S. health system through the application of information and technology. Comprehensive healthcare reform is not possible without system-wide adoption of health information technology, which improves the quality of healthcare delivery, increases patient safety, decreases medical errors, and strengthens the interaction between patients and healthcare providers. Initiated in 2006 by the Healthcare Information and Management Systems Society (HIMSS), National Health IT Week has emerged as a landmark occasion for using health IT as part of the overall solution to improve America’s healthcare as a bipartisan, federally led, market driven initiative. While the healthcare industry has transformed in the last decade as health organizations have moved to electronic health records (EHRs), it brings us one step closer to the vision of comprehensive care coordination, but fully achieving care coordination across the vast health enterprise is still a long way ahead. While a recent American Hospital Association (AHA) survey showed that nearly all reported hospitals (96 percent) possessed certified EHR technology in 2015, the Office of the National Coordinator for Health Information Technology reports that there is very little coordination of patient data across the healthcare ecosystem. Much of this disconnect begins with the inability to transfer data in a secure manner that will match, manage and protect patient identities across enterprises. "As hospitals must now deal with hundreds of thousands of electronic patient records, spanning multiple systems and departments, the traditional technologies to managing patient information are no longer sufficient," says Karly Rowe, Vice President of New Product Development, Identity and Care Management Products for Experian Health. "Leveraging sophisticated matching technology and outside data sources, can improve patient identification and prevent duplicate or overlapping records which result in inappropriate care, redundant tests, and medical errors – as well as make data accuracy higher for clinical, administrative, and quality improvement decision purposes." To solve the industry problem of matching, matching and protecting patient identities across the healthcare ecosystem, we must start by creating a universal patient identifier (UPI) to make patient data truly interoperable. For example, one of the biggest challenges in managing patient data begins when patients move, change names, or switch doctors and their EHR doesn’t follow them. They have to start over, trying to recall events and dates in their medical history with a new doctor, who is tasked with providing care without the detailed insight into the patient’s medical record. But if that same patient had a universal identifier that allowed healthcare providers to communicate with another healthcare provider about a patient, the new provider would know all the ins and outs of that patient’s history, leading to a more holistic approach to care and higher patient satisfaction. Simply put, a UPI can be thought of as a mechanism to link all patient information and associate it with the right individual based on patient data. This is similar to how credit bureaus link an individual’s credit history to the right individual to ensure accurate reporting. Using a similar model, patient data — and supporting patient demographic data — can be used for the common good to improve patient safety, increase quality of care and reduce mistaken identity risks. The benefits of a UPI extend across the entire healthcare system as well, as it improves the quality of patient identities, which can have duplicate, overlapping and incomplete records. Additionally, a UPI can help eliminate incorrect medical treatments; deliver current and accurate patient data; and prevent identity fraud, HIPAA breaches and incidental disclosures of protected health information (PHI). Ultimately, this will build patient trust through increased visibility and record accuracy. Knowing that preventable medical errors, many of which are the result of incorrect patient identification, are the third leading cause of death in the United States. The creation of a UPI will allow the healthcare industry to facilitate accurate information exchange to stop problems before they start. For example, if a patient shows up to fill a prescription and is mistaken for another patient with the same name and given the wrong prescription, there could be fatal interactions with other medications that patient is taking. The National Council for Prescription Drug Programs (NCPDP) has already started using this technology to establish national patient safety identifiers. A national patient safety identifier, or UPI, is a vendor-neutral, cost-effective solution that will link patient data at scale efficiently and accurately to improve patient safety and care coordination. Identity management is a critical, underlying component to every interaction, and healthcare is no exception. To fully achieve the goal of comprehensive care coordination, creating a UPI to help match, manage and protect patient data is the first step in achieving the interoperability of patient data. Participate in National Health IT Week’s Virtual March and help catalyze actionable change within the U.S. health system through the effective use of health IT.

Experian Health will be at HFMA ANI again this year–booth 1025–at the Venetian-Palazzo Sands Expo in Las Vegas, Nevada. Kristen Simmons, Senior Vice President, Strategy, Innovation, Consumer Experience, and Marketing, with Experian Health, chatted with Joe Lavelle of IntrepidNOW to provide her insights on this year’s HFMA ANI conference, consumerism in healthcare and much more! Excerpt below: Experian Health booth activities  "[In our booth this year at HFMA ANI, we want to focus] around peer to peer learning and exchanges, so we are doing less selling and more engaging and more understanding. Understanding folks problems and helping to collectively arrive at solutions. We are doing a lot this year in terms of hands on demos of our solutions. We'll be showing some of our patient engagement products which include, self-service portals and mobile options for getting price estimates for applying for charity care, and setting up payment plans. Likewise, on the revenue cycle management side to automate orders with patient access functionality, contract management claims and collections, all those types of things that we do to improve efficiency and increase reimbursement for our clients. We'll also be showing off some of our identity management capabilities to match, manage, and protect patient identities so we can safe guard medical information and reduce risks for our clients. And on the care management side, our early support and sharing of post acute patient care information to help providers succeed as we all move forward into a value based paradigm." How Experian Health is addressing the need for consumerism in healthcare  "When it comes to consumerism, it's interesting when you're a company that has a lot of data and a lot of capabilities to say, 'Hey what can we do for people?' One of the things we really wanted to look at for our consumer approach, was to say, 'What is it that needs to be done?' We had some great hypotheses coming in and a lot of those were borne out but we actually undertook a big national study to take a look at what consumers biggest pain points were. It has a qualitative and a quantitative component. But, we basically looked at the entire healthcare journey so we weren't just asking them about the administrative and financial aspects of care, but also the clinical aspects. As we walked through the journey and were able to get a lot of quantitative data about all these different aspects of their healthcare journey, what actually turned out to be the most painful for the most people, were all the things around the financial equation. And, so clearly there can be pain in a clinical side, especially if you're unhealthy, you've got something chronic, you've got something terminal. There's all kinds of awful situations there but, really affecting almost everyone is a lot of the pain around the financial aspect of healthcare. So, we were able to look closely at some of those pain points and decide on some of the biggest ones that we wanted to tackle." How Experian Health is helping providers address financial pain points for patients and providers "Some of the big pain points for people is just the fact that you don't know what you're going to owe and as the patient portion of responsibility increases, understanding what you're going to be paying becomes more and more important to a consumer. So, understanding what I owe earlier, being transparent, and then helping me pay, those are some of the areas. And there are others but those are some of the absolute biggest pain points. And as you pointed out with some of our propensity to pay analytics, and some of the other capabilities that we have, we're able to help providers understand the financial situation patients are in much earlier in the process so they can get them to the right kind of funding sources. They can give them peace of mind so that they know what they're paying upfront, which may impact when they choose to go in for a major procedure or how they might want to save up for it or how they might want to access different funding sources." Listen to the full podcast

There's no question that portals increase patient engagement. According to the Office of the National Coordinator for Health IT, almost eight in 10 patients appreciate the improved access to healthcare information afforded to them by self-service systems. Unfortunately, portal systems also offer an obvious target for healthcare hackers. Within a patient portal, criminals can steal medical identity data, which is worth somewhere between 20 and 50 times as much as financial data, such as credit card numbers. They then use the stolen information to submit fraudulent claims, fill prescriptions, and resell medical equipment. What's more, because many healthcare organizations lack proper detection tools and some patients neglect to check their explanation of benefits (EOB) statements, health data breaches tend to go undetected longer than those in other sectors. No wonder healthcare data security incidents rose 211 percent in 2017, according to the 2018 "McAfee Labs Threats Report." Protecting patients' data with technology Patient portals engender patient engagement and loyalty, but if a data breach occurs, that loyalty is quickly lost. Besides losing patients’ trust, healthcare organizations that experience a data breach face potentially severe HIPAA penalties. Healthcare firms can learn a great deal from how other industries have met similar security challenges without overburdening consumers. Providers can use best-in-class technologies, data and analytics systems, and their deep understanding of patient needs to manage risks and protect patient identities. To arm providers against breaches, Experian Health offers Precise ID® with Digital Risk Score to protect portal users’ identities from their first sign-in to their last. By automating the portal signup process, it stops false enrollments at the source. Then, using multilayer verification, it provides access protection for future sessions. Because Precise ID takes less than a second to evaluate access risks, patients don't need to sit through loading screens. On the provider side, Precise ID satisfies the Centers of Medicare and Medicaid Services' Promoting Interoperability standards, minimizing compliance risks. At a time when one in five patients withhold information from physicians because of data breach concerns, Precise ID builds trust between patients and providers by protecting patients' data from unauthorized access. Giving patients the power to access their medical information through portal technology has been one of the past decade's biggest steps forward in improving patient-provider relationships. But with that reward comes responsibility: Providers must protect portals from unauthorized access and theft of medical records. With Precise ID with Digital Risk Score, providers get the security they need, and patients get the seamless access they've come to expect.

As the health industry faces extraordinary changes, how can leaders better drive efficiency and optimize resources? Recently President for Experian Health, Jennifer Schulz, sat down with The Business Debate to answer this pressing question. In short, the best way to get there is to turn to data-driven technology. In this interview, Jennifer touches on some of the main barriers to efficiency in health systems: Patient financial payments and identity management. Here are some excerpts from her interview. To watch the video and read Jennifer’s editorial, please click here. Patient financial payments and price transparency “The use of technology in healthcare is slim. When a consumer in a retail experience or a financial service experience uses their mobile device, or goes online, that experience doesn't translate into healthcare. Experian Health is very focused on improving the transparency of healthcare from a financial perspective. We've launched things like patient estimators because there’s no other large purchase you make in your life that you don't know what you're about to buy. And healthcare, for the most part, this all happens after the transaction, and that type of transparency in healthcare can come with the use of technology.” Universal patient identification “Another issue is identity isn't the same when you go from system to system. Every hospital, every provider looks at you as an individual, and puts a number associated with you. That number is within their system only, and so you may go across systems, but there is no view of identity. One of the solutions we've launched here at Experian Health is the universal identity manager, and we're offering that with no charge to our clients because we think identity is the one key to provide transparency across systems.” As we have done for other industries, Experian is at the forefront of bringing this type of consumerism to healthcare. Through our data assets and technology, we empower our clients to connect with consumers through a tailored approach that is personalized along the patient journey. To learn more, visit www.ExperianHealth.com.

This is an exciting time for our industry, and agility and knowledge are critical for your organization to Lead the Way by meeting the growing expectations of patients and keeping pace with the ever-changing healthcare landscape. Since 2004, the Experian Health 2017 Financial Performance Summit has connected business leaders to discuss innovative ideas and solutions, allowing organizations to improve their overall financial performance and increase profits. Summit 2017 focused on collaboration, idea sharing and networking, with numerous sessions on how you can take control of your organization’s road map for growth and operational efficiency. The intimate setting of Summit 2017 allowed for unique networking opportunities, one-on-one conversations with subject matter experts and numerous breakout sessions that will provide valuable insights from industry thought leaders. The three-day Summit provided hands-on learning opportunities with product experts and the exchange of knowledge with peers in an engaging environment. The agenda featured industry-leading speakers, provider- and Experian Health-led educational sessions, a dedicated leadership track, one-on-one training, networking lunches and receptions, and evening events featuring live entertainment. Break-out sessions at the Summit covered: Claims Collections Contract Manager Patient Access Patient Engagement Price Transparency Thought Leadership If you attended the Financial Performance Summit about would like to download any of the presentations, they are available here. If you would like to attend one of our future events, please contact us.

Healthcare has always been driven by data, and today, providers have access to an unprecedented amount from a wide variety of sources. While this influx could be a blessing to the healthcare industry as a whole, it also poses a number of challenges, particularly when it comes to patient identity management. With a soaring volume of patient information coming in from numerous sources, identity errors become increasingly more likely, as well as the potential consequence of fatal mistakes. Keeping this in mind, the importance of effective identity management cannot be overstated. Every year, an estimated 195,000 people die due to medical mistakes. More than half of those deaths – 10 out of every 17 – are the result of identity management errors, such as duplicate records and mistaken patient identities. While current healthcare IT solutions attempt to tackle these discrepancies, they only succeed in identifying about 10 percent of all duplicate records. Consequently, patients often undergo repeated tests or receive incorrect treatment or medication that can result in adverse effects to their health. Also, there is limited coordination of patient data throughout the healthcare ecosystem. The main culprit of this is the lack of secure data transfers that compromise patient records and identity. This raises the question: How can healthcare organizations better manage the massive amounts of data related to each patient’s medical identity? Luckily, such issues can be improved with Experian Health’s Universal Identity Manager (UIM), which creates a single identity for individual patients across multiple disparate healthcare databases. Upgrade your identity management system The ability to share patient information across multiple healthcare organizations with different care management programs is at the core of optimizing overall patient care. Properly utilizing patient and population health data can dramatically improve an organization’s efficiency, raise its quality of care, and lower its readmissions rate. For patient data to be useful, however, providers require a robust infrastructure that allows for secure, precise, and accurate storage of patient data. The same framework should be able to assign patients unique identities across the entire network. In turn, a single, universal patient identity system allows for better analytical insights and more effective care personalization. This kind of management system also allows an organization to add relevant data to a patient’s medical profile faster and more accurately, creating an improved dynamic database that can develop personalized patient engagement and care plans. How Experian Health’s universal identity management software helps Administrative slip-ups in healthcare can have drastic consequences for a patient’s health and wellbeing. Eliminating these inaccuracies is the main goal of Experian Health’s UIM solution. Experian Health has the benefit of leveraging data assets available to us from being part of broader Experian. As a result, the identity management software generates and assigns a unique identifier to each patient that remains consistent across various healthcare systems, such as hospitals, therapeutic facilities, pharmacies, and healthcare payers. Drawing on decades of experience in identity management, Experian Health's multi-matching methodology approach eliminates duplicate and erroneous data through comprehensive search and alert processes. It provides a high degree of likeliness because it expands beyond the limitations of the conventional single-matching methodology that most health systems use today. Even records created on disparate healthcare systems can be automatically analyzed and assigned to the appropriate patient identity. In addition to eliminating discrepancies that could affect the quality of patient care, universal identity management also reduces medical and billing errors, ultimately minimizing an organization's risk of fraud. The solution also works in tandem with Experian Health’s suite of patient engagement and transparency tools, including its Patient Self-Service portal, to further optimize an organization’s ability to deliver personalized, high-quality care. Unique patient identifiers are critical for healthcare organizations to reduce the risks of inaccurate and duplicate records that lead to errors and low-quality care. Combined with Experian Health's suite of patient engagement and price transparency tools, its identity management software is a leap toward making efficient and reliable interoperability more possible across the healthcare ecosystem.

The MongoDB Innovation Awards celebrate organizations building the world's most innovative applications, recognizing those with a transformative impact on their respective sectors. Recently, Experian Health was recognized for our innovation in healthcare. Our Universal Identity Manager (UIM), which integrates with MongoDB to accurately sequence patient data, can accurately match, manage and protect patient identity. Drawing on more than 40 years of experience managing identities across various industries, Experian Health’s interoperable patient identification solution leverages consumer credit data to improve record quality. Our UIM creates a unique, universal patient identifier to identify patients and link their records to allow entities (pharmacy, lab, payer, and provider) with disparate databases, systems, and data formats to share a single view of the same patient. Accurate and complete information is securely exchanged, minimizing medical and billing errors, and fraud. “We leverage MongoDB to deliver UIM information in real-time – and that makes performance critical,” said Michael Ochs, chief technology officer of Experian Health. “If patient data is delivered out of sequence, it can create multiple issues in the delivery and accuracy of patient information. This technology makes the interoperability and exchange of information across the healthcare ecosystem is an achievable goal. With UIM, it is possible to successfully address problems caused by data integration challenges and fluid patient data.” Our consumer demographic information combined with reference data and referential matching methodologies allow the UIM to achieve higher matching rates and mitigate matching challenges associated with data quality. “We encourage health organizations to adopt universal patient identifiers because there is a well-documented need for it – the absence of which poses both business and safety issues,” said Jennifer Schulz, group president of Experian Health. “Our UIM batch product is being offered to organizations at no charge* to provide a universal patient identifier that will help address the complexities of managing patient identification by identifying consumers in the healthcare ecosystem more accurately.” Michael accepted the award on behalf of Experian Health at the annual MongoDB World event in Chicago on June 21, where he joined 13 other innovative companies being awarded in different categories. This award for Experian Health comes shortly after being recognized in the healthcare industry by Healthcare Informatics as no. 45 on the list of “Top 100 Companies by Revenue.” *Offer is limited to Experian Health’s UIM Batch Process product and shall remain open for such time as Experian Health may decide.

Phillip Scott of NCPDP attended HIMSS17 and took some time to chat with IntrepidNOW about NCPDP's strategic alliance with Experian Health and the benefits of a universal patient identifier. Below is an excerpt from that interview. "Well, I have to say with NCPDP’s reputation of neutrality is it’s been a key to our business, our business model. We bring all parties to the table. It’s big in collaboration and all of our standards and best practices come from a consensus building environment. Well, having said that, we have been looking for some time at a relationship that could create a unique patient identifier, at least our version of what that would be. We vetted a number of different companies and actually started working on this in 2013. The good fortune brought us in touch with Experian [Health], and we come together nicely, culturally. We both spent a tremendous amount of effort working for the common good, and the solution that Experian [Health] brought to our vision for what a unique identifier was made for a great opportunity there, and we’ve been very excited about that offering. That UPI, that universal patient identity, would go to that number and when they marry my prescription or my pharmacy benefits to my medical benefits. Then it can move over and move out of pharmacy and over into the health systems. So not only is it great service, it’s just fun to think about it. So our effort gives you 2 versions of a flavor, we as an American consumers are all about instant gratification, right? So this gives you instant gratification because Experian [Health]'s identifying the numbers and identifying those patients uniquely, and sending it back to you, that is an instant gratification." Listen to the full podcast Learn more about Experian Health's Universal Identity Manager solution