Tag: medical identity theft

Patchy patient data has plagued the healthcare industry for decades, but the pandemic opened the door to a whole new set of identity management challenges. As patients rushed to register for patient portals and book vaccines, many unwittingly created multiple accounts, having forgotten they’d already signed up. Fluctuating unemployment levels meant many individuals were forced to jump health plans, which meant their records were moved between various organizations. As a result, data errors crept in, and identity updates were omitted. Incomplete and inaccurate patient identification data leads to suboptimal clinical decision-making, poor patient experiences, and higher costs for patients and providers. A 2020 study found that one in five patients had spotted an error in their electronic health record (EHR). Many clinicians have also witnessed medical errors that stem from patient misidentification. Hospitals lose millions of dollars every year in denied claims arising from identity errors, which can easily be avoided with a standardized approach to identity management. In a recent survey conducted by Experian Health, we found that identity management emerged as a major challenge for healthcare providers. Almost half of the respondents said that having inaccurate and incomplete patient data hindered follow-up contacts and patient outreach. It matters to patients too – a 2020 survey for the Pew Charitable Trusts found that four in ten were more supportive of data-sharing efforts among providers because of the pandemic, and twice as many were open to the idea of biometric identity verification. "Patients still welcome proactive outreach by providers, but more say their providers fail to do this, and 45% of providers say inaccurate or incomplete patient data gets in the way." - Experian Health's State of Patient Access, June 2021 Providers know that a 360-view of their patients is essential for improving patient outcomes and delivering positive patient experiences; however, duplicate and incomplete data continues to thwart their efforts. With a unique patient identifier (UPI) and a robust identity verification solution, providers can achieve single, accurate, and current records, and solve for these data standardization challenges. Data standardization creates a single source of truth for each patient Despite bipartisan recognition of the need for a national standard for patient identities, statutory barriers have hampered the adoption of a nationwide UPI. In the absence of a national approach, providers must take the lead to ensure high-quality patient records and prevent duplication, gaps and errors. The first step towards data standardization is identifying the type of patient information your organization needs. What data must be collected from patients? Which form fields are required and which are optional? How should data fields be formatted when updating patient records? Standardizing data collection and ensuring content and format consistency will help create reliable records for every individual patient. Next, a Universal Identity Manager (UIM) can hold and protect that single view of each patient, creating a standardized approach when new data is added. The software assigns a unique identifier to each patient, which follows them throughout their entire healthcare journey. By drawing on referential and probabilistic matching techniques with Experian data and patient rosters, the UIM uses the unique identifier to accurately match the patient’s identification and medical history, to help both clinical and non-clinical staff offer optimal care and support. Confirming the patient is who they say they are Having an accurate picture of each patient is only the first step. Next, providers must feel confident that each record can be correctly matched to the individual who is trying to log on to the portal or sitting in the waiting room. A complete and current record is useless if clinicians are matching it to the wrong person. To solve patient matching challenges, most healthcare organizations assign employees or contractors to fix and clean up data records. Without a software-driven identity management engine, these teams are forced to rely on manual processes, which are time-consuming, costly, and still vulnerable to errors. Alongside the consistent approach to content and format mentioned above, providers should have a reliable way of checking and amending the patient’s records at every touchpoint in the healthcare journey, using cutting-edge identity proofing techniques, risk-based authentication, and knowledge-based questions. A tool like Identity Verification can easily identify every patient and help maintain a clean and accurate patient database. Each patient’s demographic data can be validated and corrected during pre-registration, so providers know that the person is who they say there. This is even more crucial as the pandemic leads more patients to opt for remote and virtual services alongside in-person care. Future-proofing patient identities as the pandemic prompts long-term change Since March 2020, many Americans have gone through major life changes. Whether it’s the loss of a loved one or loss of a job, a change of address or a change in attitude towards their health, patients’ lives are changing. The healthcare system must adapt to follow suit. Many more players are involved in delivering healthcare, with digital apps and tools growing in popularity. These developments mean more patient data is being generated and shared, and by more diverse and distributed sources. A robust identity verification system built on standardized data can help smooth out the bumps in patient records and offer better patient experiences and improved health outcomes. Providers don’t need to completely overhaul their records system, but by investing in incremental changes to improve the quality and governance of their data, they can accelerate the move towards data standardization. Talk to Experian Health about how our proven tools can help your organization deliver better patient data quality today, and build a universal identity management system fit for the future.

Editor's note: This blog post was updated on October 2, 2023.  In today's rapidly evolving healthcare landscape, the need for a standardized approach to patient matching and identification has become crucial. Not having a unique patient identifier (UPI) not only poses challenges to managing patient data but also hampers interoperability between healthcare organizations. A unique patient identifier (UPI) is a method for standardizing patient identification. Individuals are assigned a unique code, and that code, rather than a Social Security Number, name, or address, is what is used by healthcare organizations to identify and manage patient information. A standardized code like this not only protects sensitive health information but supports the exchange of data between healthcare organizations and states as it is a number and format easily read and recognized by all. Advocates for a coordinated approach to patient matching are continuing to make the case for a national unique patient identifier (UPI). In April 2023, healthcare organizations wrote to legislators urging them to reject language in the 2024 Health and Human Services appropriations bill that prohibits the use of federal funding for a national UPI standard. More than 150 healthcare and medical organizations signed the letter, including Experian Health. The coalition argues that a standardized approach to patient matching could save lives, avoid medical errors, reduce unnecessary costs and greatly improve operational efficiency. While federal funding currently remains off-limits, the industry is poised to move forward to develop a national patient identity solution that is cost-effective, scalable, secure and one that protects patient privacy. Let's explore how a UPI can revolutionize the healthcare industry and create a truly connected ecosystem. How a unique patient identifier is used in healthcare UPIs give providers and payers a way to link records for the same patient or member, so they have one complete record. Without a UPI, a provider may inadvertently create a duplicate patient record because a slight variation in the patient's name or address means their original record isn't accurately matched to them. A 2022 survey by Patient ID Now found that 6 in 10 healthcare organizations had estimated duplication rates of 4-8%, while 16% of organizations had more than 15 patients with the same name.  If there's more than one record for a patient, providers may miss important medical information that's not carried through to the version of the record they're looking at. Unreliable records can also lead to misidentification, where patients with a similar name may have their records incorrectly matched. According to the ECRI Institute, misidentification is one of the top ten threats to patient safety. Patients could be given the wrong treatment or medication, with life-altering or fatal consequences.  While patient safety is the top concern for providers, efficiency is another driver of attempts to improve records management. Organizations report spending $1.3 million per year on patient identity resolution, as resources must be redirected to figuring out who patients are and fixing errors. Being able to correctly link records for a complete view of an individual's identity can help circumvent these challenges.  A unique patient identifier is the key to interoperability Managing patient data across the entire healthcare ecosystem is a long-standing challenge. Many organizations rely on master patient indexes to match patients using demographic data. But these single-source databases are rife with gaps, overlaps, and outdated patient information. They can't keep up with simple name and address changes or easily identify and fix data entry errors.   A more effective solution involves combining data sets to create complete identities and profiles, where every piece of new data is instantly updated and verified. Experian Health uses referential matching technology to achieve a fuller picture of each patient's identity. The UPI then acts as a golden thread, linking each patient record correctly within and between systems.  For example, if a provider has a patient in their EHR twice under two spellings of the patient's name, a UPI would link those two profiles, creating a singular view of the patient. If a pharmacy has a patient listed under a birth name but the doctor has them listed under their married name, a UPI can ensure both systems match the patient correctly.  When combined with other patient engagement solutions, data and identity management tools  create the infrastructure needed for healthcare to truly become one cohesive, patient- and member-centric network.  It is important to note that the UPI is not a patient-facing number and is not known to the patient or provider. It does not collect or share any clinical claims or diagnostic information; its purpose is simply to link records together giving providers and payers a complete view of someone's identity.  Improving the patient experience with a unique patient identifier  Healthcare consumers are increasingly seeking digital-first, efficient processes, and they're sensitive to the need for robust data security. Healthcare organizations must demonstrate their ability to manage patient data properly from the patient's first interaction. If data management is inefficient, patients will find themselves being forced to fill out forms they've already filled out multiple times or undergo duplicate tests as they travel between facilities. Patients with similar names may be confused if they're shown someone else's details during the identification process.  In an ecosystem built around a strong healthcare network, these discrepancies can be avoided. The patient's unique identifier remains consistent across every healthcare facility they visit – including physicians' offices, hospitals, pharmacies, specialists and long-term care facilities – so all providers know exactly who they are.   While patients welcome a more convenient, coordinated experience, they'll also be reassured by the reduced risk of medical errors that comes with a well-connected healthcare network.   Efforts to improve patient identity resolution in healthcare  While there may not be a national UPI yet, the industry is trying to find workaround solutions. The Centers for Medicare & Medicaid replaced Social Security Numbers with Medicare Beneficiary Numbers as the primary means of identifying Medicare beneficiaries. But while this addresses the risk of data breaches, it doesn't resolve the interoperability challenge.   Another initiative is Project US@ (Project USA), run by the Office of the National Coordinator for Health Information Technology (ONC). This aims to create a consistent healthcare industry-wide specification for representing patient addresses, to improve address accuracy. This would ensure that, for example, the same street name written as “road” and “Rd.” is not mistakenly viewed as two different addresses by the software.   To support efforts to integrate disparate software solutions, Experian Health announced in 2019 that every person in the United States had successfully been assigned a unique UPI, powered by Experian Health Universal Identity Manager (UIM) and NCPDP Standards™ (the “UPI”).  Combining Experian's expansive data assets and innovative UIM technology along with NCPDP standards, each person who has received medical care or used a pharmacy has been assigned a UPI. As new patients enter the healthcare ecosystem, this number will continue to grow.  Dave Roberts, VP of Platform Products at Experian Health, says that “the technological foundation is already in place for data interoperability through the creation of UPIs that are maintained in a master person index. These solutions are vendor-neutral, meaning data can flow freely between disparate electronic health systems, regardless of size or location.” Utilizing Experian Health's Patient Identity Solutions The implementation of unique patient identifiers holds immense potential for creating a connected healthcare ecosystem. By standardizing patient identification and enhancing data management, a unique patient identifier can improve patient safety, reduce costs, and streamline processes across the entire healthcare industry. Find out more about how Experian Health's patient identity solutions serve as stepping stones towards a more efficient and patient-centric healthcare network.

  When a doctor pulls up a patient’s record, it should be a safe assumption that the information on the screen relates to the patient sitting in front of them. It should contain every detail of the patient’s medical history, along with their current address and accurate personal information. It certainly shouldn’t contain anyone else’s data! Yet all too often, patient records are plagued with inaccuracies. Around 30% of patient data in electronic health records is incomplete or inaccurate, and up to half of records are not linked to the correct patient. The ONC estimates that around a fifth of patients may not be matched to their entire medical record within an organization, while more than a half of records shared between organizations contain errors. Despite all of modern medicine’s ground-breaking achievements and our increasingly digitized world, the ability to share information between different payers and providers in a reliable and secure way remains frustratingly out of reach. Could a universal patient identifier unlock interoperability? Imagine a healthcare ecosystem where administrators and clinicians can safely exchange information without worrying about whether it’s inaccurate, incomplete, or incompatible with each other’s systems. Interoperability could make life easier for healthcare staff and patients alike. While regulations such as the Affordable Care Act introduced many carrots and sticks to drive up adoption of electronic medical records to support interoperability, they also revealed a critical gap in healthcare: the need for a universal patient identifier (UPI). This is an identifier that would help manage patient identification across the whole healthcare ecosystem. A UPI would allow providers and payers to follow patients throughout all their major medical and life events and be sure that the information they hold for their member or patient is 100% accurate, current and complete. Instead, the absence of a UPI, compounded by the sheer volume and fluidity of patient data, has created significant issues downstream. Billing errors, unnecessary treatment and testing, HIPAA breaches, prescriptions filled for the wrong patients and many other issues all play a role in the growing number of preventable medical errors (estimated to be the third leading cause of death in the US). Striving for truly interoperable patient information should be a priority across the entire healthcare industry. Still, while federal funding for a UPI is currently being considered by Congress, we’re seeing more and more industry-led responses to help improve patient identity management. 5 benefits of using a universal patient identifier for interoperability Improve patient safety How can physicians be sure they’re recommending the right treatment for a patient, when there could be a vital piece of information missing from their medical history or allergy list? How can a pharmacist feel confident handing over a prescription, when there’s a chance the patient in front of them isn’t the same patient named on the script? A UPI can help avoid ‘wrong patient’ events and allow providers to share information to spot trends in recurring errors so that action can be taken to prevent them in future. Lower healthcare costs The West Health Institute found that that medical device interoperability could save the U.S. healthcare system more than $30 billion per year. For individual providers, UPIs could improve productivity by reducing the amount of time clinicians and hospital staff spend trying to sort out inaccurate records. And with nearly a third of claims denied as a result of patient misidentification, this could mean savings in the region of $17.4 million for the average hospital. A better patient experience Patients are right to be frustrated when their physician doesn’t have up-to-date records about them, or their provider sends appointment reminders to an old address. Expecting patients to fill out multiple forms (often multiple times) is inefficient and hardly contributes to a positive patient experience. A tool such as Universal Identity Manager can help providers exchange timely data, eliminate duplicate records and coordinate care, so the patient is supported throughout their healthcare journey. Stronger privacy Electronic records linked with a UPI allow healthcare organizations to phase out manual processes—which is not only more efficient, but also helps minimize the risk of patient data falling into the wrong hands. It’s much easier to keep the data secure when it’s contained in a single record, compared to multiple versions of a record filled with scribbled notes and random updates that could easily end up attached to the wrong record. Experian Health’s Precise ID gives healthcare organizations a HIPAA-compliant way to authenticate patients and reduce the risk of a data breach during enrollment. Better data to tackle the social determinants of health As consumer data opens up new opportunities to improve population health, a network of shared data will be essential for identifying trends in the social and economic factors that affect medical outcomes. Interoperable data sets and technologies can enhance the way public health data is collected and used, for better patient outcomes and population health. Interoperability currently remains a challenge, but the tools exist to improve the way information is shared and used across the healthcare ecosystem. By integrating clinical data into the patient access workflow, you can increase productivity, reduce costs, and ultimately improve the patient experience. Contact our team to find out how this could help your organization achieve more efficient, accurate and actionable data sharing.  

Medical identity theft is a growing concern for healthcare organizations in the digital age. In 2017, healthcare data breaches accounted for 24% of all data breaches, rising to 29% in 2018. In just 12 months, the total number of personal medical records exposed jumped from 5.3 million to 9.9 million. In fact, healthcare data breaches tend to expose many more individual records than other industries. For example, according to the Identity Theft Resource Center, 43.9% of breaches in the first half of 2019 were in business, while only 36.9% were in healthcare. But for healthcare, this meant exposing a staggering 77.4% of all records left vulnerable to identity theft, compared to just 9.5% by business breaches. The potential impact of a healthcare data breach seems to be further-reaching than in other fields. At the same time, healthcare is slightly behind other industries when it comes to data security. Financial services have a two-decade head start to refine their anti-fraud strategies. This, coupled with the fact that medical identities are worth 20 to 50 times more to fraudsters than financial identities, means medical identity theft is increasingly appealing to criminals. It’s a big concern, but healthcare organizations can use data to fight data theft. When you’re armed with the right information, you can put in place the right strategy to protect your patients. What is medical identity theft? Medical identity theft is when someone uses another person’s health-related identifying information without them knowing. This could include their name and address, Social Security number, health records, or insurance information. Fraudsters can use this information to access medical services without paying, submit false insurance claims, or buy drugs. They pretend to be someone else to access services illegally. In addition, that personal information could be used for other kinds of identity fraud or blackmail. What are the consequences of medical identity theft? Karly Rowe, Vice President New Product Development, Identity & Care Management Product at Experian Health, says: “For patients, the impact of having their personal information stolen, and then possibly used to make false claims in their name, can be hugely violating. When someone’s record becomes overlaid with a thief’s record, this can have massive consequences for that person’s future treatment. It’s a major stress to sort out – both administratively and financially. And for organizations, there’s obviously the reputational hit. The relationship between provider and patient is based on trust. When you fail to secure your patients’ most personal information, you risk losing that trust for good.” It’s also a major cost. Medical fraud in the U.S. is estimated to cost somewhere between $80 billion and $230 billion, with the cost to individual providers and payers coming in at around $2 million per breach. To tackle the problem, healthcare organizations are stepping up their security practices across the board. A HIMSS survey, in partnership with Experian Data Breach Resolution, reported that data security strategies have improved. Ninety-two percent of those asked had performed a formal risk analysis, and more than half had increased their patient data security budget. A number of organizations also teamed up to form the Medical Identity Fraud Alliance, to mobilize the industry to tackle the problem. Still, there’s a ways to go. 3 ways to leverage data insights to prevent medical identity theft Protecting patient data calls for a data-based solution. Here are three ways to leverage consumer data and technology to protect your patients and keep their information safe: Resolve patient identities. Accurate patient data is the cornerstone of data management. If your records aren’t entirely reliable to begin with, keeping them safe and secure will be much harder. Put preventative measures in place to minimize the risk of duplicates and errors. Assigning a Universal Patient Identifier (UPI) will let you follow the entire patient journey, so you have a complete, accurate and secure picture of each patient. Protect patient identities. Patient portals allow people to access their health information from their personal devices. It’s convenient and can improve engagement and health outcomes. Unfortunately, they can also become vulnerable to breaches by data thieves. You have to make it easy for patients to use portals, but difficult for fraudsters to get their hands on that personal data. As patient portals gain popularity, you must have the right technology in place to validate and protect patient identities. Automating patient enrollment with a tool like Precise ID® can help authenticate patient identities from the start using identity-proofing, fraud management and device recognition. Enrich patient identities. With data insights, you can check that your patient is who they say they are the moment they arrive in reception. Using the broadest and most trustworthy datasets, identity verification solutions make constant checks, so you have a single, accurate and 360° view of each patient. Not only is this ‘golden record’ the cornerstone of patient care and experience, it’ll let your staff update patient data during intake without manual corrections. Medical records contain some of the most sensitive personal information, so it’s vital to safeguard it with the strongest security that exists. — Download this free eBook to learn how to evolve today's patient matching technologies or find out more about how to protect your patient data and prevent medical identity theft.

  Medical identity theft is a growing problem for the healthcare industry: nearly 15.1 million patient records were compromised in 2018, an increase of nearly 270% on the previous year. While providers are busy rolling out patient portals and electronic medical records to better serve consumers, criminals are sneaking through the cracks to steal patient data and profit from vulnerable health systems. The rapid rise in medical identity theft is partly explained by the fact that it goes undetected for much longer than other types of identity theft, giving criminals more time to use stolen personal information for financial gain. It’s also a lot more lucrative. Medical identities can be used to access treatment and drugs, make fraudulent benefits claims and even create fake IDs to buy and sell medical equipment. This can be devastating for victims, both emotionally and financially. Unlike credit card theft, where victims aren’t considered financially liable, 65% of people who fall prey to medical identity fraudsters are left with hospital bills running into the tens of thousands. The compromised medical record is tough to reconcile, jeopardizing future medical treatment. For providers, a data breach can mean significant reputational damage and loss of trust, and huge financial consequences – each breach costs an average of $2.2 million. But what’s most alarming for providers is that more than half of data breaches originate within the organization. Unfortunately, many providers lack sufficient security protocols and detection tools to safeguard the data they’re holding. The good news is that the tools exist to help you protect your patient data. What can healthcare providers learn from other industries about identity protection? Banking and financial services have pioneered identity protection over the last twenty years, and healthcare can learn a lot by looking at what’s worked in those industries. For consumers, using digital technology to pay your bills, book flights and buy pretty much anything is the norm, all with reassuringly quick fraud detection and resolution. Healthcare has been a little slower to embrace digitization in this way. Despite the opportunities, fears around security, privacy and inconveniencing patients have stalled efforts to transform outmoded processes. Drawing on two decades of innovations in other fields, fast-paced technological developments mean many of the early challenges around implementing safe and secure patient portals have been overcome. 6 strategies to keep patient data safe Here are six smart ways to ensure your organization has done everything possible to safeguard patient data.     Tell your patients how you’re keeping their data safe Patient trust is at the heart of a successful patient-provider relationship. Share the steps your organization is taking to secure patient information, so patients feel reassured and confident in using their portal. Data security should be a key strand in your patient engagement messaging.     Verify patient identities to protect access to medical records To avoid HIPAA violations, it’s critical to ensure you’re giving access to the right patient. Secure log-in monitoring and device intelligence can help you confirm that the person trying to log in is who they say they are. When something doesn’t add up, identity proofing questions can be triggered to provide an extra check. In an exciting new development, the healthcare industry is also starting to see the use of biometrics to supplement existing identity-proofing solutions. Just as you might use facial recognition to unlock your smartphone, there are now ways to authenticate your healthcare consumers’ identity using the same technology.     Automate patient portal enrollment You want your portal to be as secure as possible, but not at the expense of your patients’ time and effort. An automated enrollment process can eliminate the hassle of long, complicated set-ups and reduce errors at the same time.       Arm your organization with a multi-layered security strategy There is no silver bullet for protecting patient information—it will require various tools. A robust data security strategy will be multi-layered, including device recognition, identity proofing and fraud management.     Educate staff on security threats and warning signs Data breaches aren't all malicious – human error is a massive component, from mailing personal data to the wrong patients, to accidentally publishing data on public websites or leaving a laptop behind after getting off the subway. Training staff on the potential pitfalls will help them help you in protecting confidential patient information.     Develop a robust device strategy ‘Bring Your Own Device’ arrangements (BYOD) are convenient for staff and patients, but personal devices need to be secured when accessing patient information across the network. Make sure your teams, patients and visitors are aware of how to log-on securely to WiFi and follow best practice to keep data safe. In a climate of ‘doing more with less’, healthcare leaders are turning to other industries to find ways to boost quality of care and streamline operational efficiency. Automation, digitization and consumer-centric approaches make good business sense across the board, but they’re sensible investments for your data security strategy too. Investing in secure patient identities is a way to prevent painful and unnecessary losses down the line – and it’s what patients have come to expect. ⁠— Find out what more you could do to shore up your data security and prevent medical identity theft.

“Build it and they will come” might work for 1980s movie characters, multinational coffee franchises and beloved sports teams, but it’s not a great engagement strategy for most consumer-facing organizations – especially in healthcare. Take patient portals, for example. Giving your patients a way to access their health records can help improve their health outcomes, increase compliance with care plans, and create a more positive healthcare experience overall. But do your customers know the portal exists? Do they know how it could serve them? Do they trust it? You’ve built it, but how many patients are actually logging on? In 2017, over half the US population had access to a patient portal. Around half of those people used it at least once in the previous year. Of those who didn’t, 59% said it was because they didn’t feel they needed to access an online medical record, and 25% were worried about privacy and security. This tells us two things: If healthcare providers want to increase the number of patients using their portal, they need to proactively communicate the benefits to those patients, and healthcare providers could do more to reassure patients they take portal security seriously. If patients discover that using the portal is better than not using it, and that they can do so securely, they will be more likely to log on. You can address both in your patient engagement and marketing strategies. Perhaps the better mantra is: “if you solve their problem and tell them about it, they will come”. Balancing portal security and patient convenience Your patient portal is more than just a platform for patients to access test results, sort out bills or schedule appointments. It’s a way to nurture the patient-provider relationship. And at its heart, that relationship is about trust. One way to build trust is to ensure your portal meets the strictest of security measures without creating an excessive admin burden for patients. You can do this with a security strategy that layers up several protective measures to help you tackle common areas of vulnerability, including weak ID verification, over-reliance on password-protection, and failure to encrypt sensitive data. A few practical ways to keep your patient portal secure include: using ID verification when someone signs up for the portal using device intelligence and identity proofing when a user signs in to the portal deploying extra security checks where the risk of identity fraud is higher putting systems in place to flag and respond to security breaches as fast as possible. A solution like PreciseID® can help you take care of your patients’ privacy and security behind the scenes. They’ll see just enough to reassure them that you’re taking their security seriously, without any protracted log-in process that puts them off using the portal altogether. Marketing your patient portal so more patients benefit from it Solving your patients’ concerns about security is just one route to boosting portal utilization. Another important way to ensure more patients use and benefit from the patient portal is to actively encourage them to access their online records regularly. Research suggests individuals who are encouraged to use their online medical record by their provider are almost twice as likely to access it, compared to those who weren’t actively encouraged. So how do you convince your patients of the benefits of regularly logging on? That it’s not just a convenient way to manage their medical journey, but could result in better health? The answer lies in consumer data – the lifestyle, demographic, psychographic and behavioral information that gives you a fuller understanding of what drives your patients. Experian Health’s ConsumerView data analytics can capture insights that let you reach out to your consumers with the right message, in the right way, at the right time.  Do they live a busy lifestyle? Reassure them that the portal can save them time. Are there lifestyle factors that may hinder their adherence to medication? Encourage them to use the portal to make sure their prescriptions are up to date. If you discover your consumers are big social media users, you might target your portal engagement campaign through those channels. Equally, if a consumer doesn’t have any social media accounts, there would be no point investing in Facebook ads. Personalization makes your patients feel taken care of, leading to greater trust, loyalty and satisfaction. Increase patient portal engagement today In the wake of consumerism and IT transformation across many other industries, a tailored and digitally secure healthcare service is a must.  “Consumers now expect to be provided with a turnkey, individual experience that is fast and seamless,”  said Kristen Simmons, Experian Health’s senior vice president of strategy and innovation. Your patient portal must be seen to provide a valuable and secure service. While there’s a way to go to increase the number of patients making full use of portals, the tools exist to support healthcare providers’ engagement goals. Learn more about how your organization can leverage consumer insights to improve patient retention and engagement. 

  The roll-out of patient portals has been a slow burn. While consumer finance, retail and other markets have given customers secure electronic access to their personal information for decades, healthcare has been playing catch-up. But thanks to regulatory pushes, such as the Promoting Interoperability and Meaningful Use programs and the Affordable Care Act, digitized health records are now the norm. Over half of healthcare consumers in the US use patient portals to access their health information at the click of a button – just as they do with their bank accounts or grocery deliveries. Aside from the convenience factor, research suggests that when patients have access to their health records through patient portals, they experience better health outcomes, greater satisfaction levels, and improved communication with their provider. There’s a higher chance of spotting errors. Adherence to medications is increased, and care becomes more accessible for some otherwise hard-to-reach patients. For providers, this sense of ownership, transparency and connection contributes to elevated consumer loyalty and engagement. As consumers embrace online portals to view their medical records and lab results, renew prescriptions, schedule appointments, and in some cases pay bills, they expect and assume their provider will keep that data secure. Providers must balance convenience and security. Unfortunately, some patients remain unconvinced of their providers’ ability to get this balance right. Patients worry about portal privacy and security Despite the upsides, a quarter of patients with access to online portals in 2017 chose not to access them because of worries about privacy and security. They’re right to be cautious: medical identities are said to be worth 20-50 times more than financial identities. It's no wonder identity thieves are increasingly targeting the healthcare industry. In 2018, the US Department of Health and Human Services’ Office for Civil Rights (OCR) reported 351 data breaches of 500 or more healthcare records, resulting in the exposure of more than 13 million patient records. Hackers are always on the lookout for vulnerabilities to exploit, with patient medical records, log-in credentials, passwords and other authentication credentials among their top five targets. Without adequate IT security, your prized patient engagement tools – like patient portals – can become an open door for hackers. As a provider, your job is to make it easy for patients to access and manage their own data, but hard for fraudsters to get their hands on sensitive data.​​​​​​​​​​​​​​ ​​​​​​​How to keep patient portals secure The good thing about being somewhat late to the party is that healthcare organizations can learn from other industries in how they have tackled online security challenges without creating too much of a burden for consumers. Think about how consumers authenticate their accounts for financial services or even social media profiles. Typically, there's an email to verify they are who they say they are, or a two-factor authentication process with a code sent to their cell phone. Most patient portals don't have these layers of security. At Experian Health, we recommend a multi-layered solution incorporating device recognition (especially important as more users access portals via cell phones and tablets), identity proofing and fraud management. Here are some examples: Sign-up screening When someone enrolls in the portal, use identity proofing to ensure they are who they say they are. It’s particularly important to ask out-of-wallet questions, such as their city of birth, first car model, or previous address to make sure they’re not an imposter.     Log-in monitoring Device intelligence will help you confirm the patient is using a cell phone or tablet your system recognizes, to minimize the risk of someone else accessing their account. This technology will tell you if the device is associated with previous fraudulent activities or potentially impersonating multiple patients. If a device fails to meet the risk threshold, identity proofing questions can be used to verify the user’s right to access the account. Additional checks on risky requests Some patient portal activities, like downloading medical records and editing a patient’s profile, increase the risk. You’d want to add an extra layer of control here, such as additional out-of-wallet questions, to safeguard your patient’s data. Rapid response and damage containment Given the sensitivity and richness of medical data, an attack on the portal can be devastating for patients and costly for providers. In the event of an attack, providers can put in place early warning systems to flag up which patients have been compromised and trigger rapid response measures to shut down the attack and prevent the damage from spreading. Promote interoperability Physicians and care providers need to share information on patients in the course of providing good care. But how are they doing this? To keep that data secure and ensure it’s only seen by the right people, you can set up your systems to share data across different platforms in a safe and secure way. Underlying all of this is the need to reassure your patients that you can be trusted with their data. Victoria Dames, Senior Director of Product Management, Experian Health, explains: “Healthcare breaches are nothing new, and neither is hackers’ and identity thieves’ penchant for medical records. What is new, however, is the broad range of tools that organizations can now utilize to stop them from accessing that personal data. Give patients the peace of mind they deserve by taking advantage of up-to-date solutions that actually work in our ever-evolving tech climate.” Learn more about how protect patient portals and encourage more patients to enjoy the full benefits of their patient portal, knowing that their sensitive personal details are safe.

In a recent healthcare information technology survey, more than 40 percent of chief information officers identified patient matching as healthcare’s top IT concern. And though a quarter of the respondents admitted it wasn’t a current priority for their organizations, they did say that it very much should be. There’s no shortage of reasons why, but the most pressing is the need to reduce medical errors, which account for over 250,000 deaths in the United States every single year. Case in point: Seventeen percent of CIOs acknowledged that errors in matching data with the right medical identities have led directly to adverse outcomes for patients. The numbers speak for themselves: Healthcare organizations must find more effective ways to manage the data within their networks. That begins with building a robust medical database that not only hoses data, but also knows how to match it with the proper patients. How robust EMPIs streamline workflows An enterprise master patient index (EMPI) is a database that can help you clean up your data and eliminate duplicate and inaccurate records. It uses algorithms to match exact data elements among disparate records, as well as elements that fall within an acceptable range of possible compatibility. Using technology that can apply an algorithm of probabilistic and referential matching methodologies will allow healthcare organizations to expand beyond the limitations of conventional single methodology matching, as both probabilistic and referential matching techniques provide a higher degree of likeliness. The system assigns these data points to unique identities that follow patients throughout the organization. Any new data generated within the network is also attached to this identity, meaning physicians, specialists, pharmacists, and other members of the patient’s care team can access and update it as needed. EMPI support tools and unique patient identities are building blocks toward creating a healthcare ecosystem that’s truly interoperable. According to an April 2018 survey by Black Book, hospitals with an EMPI report “consistently correct patient identification at an overall average 93 percent of registrations and 85 percent of externally shared records among non-networked providers.” Unfortunately, not all healthcare systems possess the IT infrastructure to support these programs. And as long as some organizations fail to integrate similar platforms, providers won’t reap the benefits of industry-wide interoperability — and patients will continue to suffer. Whether it’s a frustrating billing mix-up, privacy breach, or a detrimental (or even fatal) misdiagnosis, many errors can be successfully prevented with an EMPI. Filling in the holes The goal of such a system should be to standardize data entry and access within each healthcare organization, as well as across the entire industry. Such a network could protect, govern, and match unique patient identities across every discipline and every aspect of their care continuum. But in order for the system to achieve these goals, you need to be sure you’re feeding it relevant, recent patient information. To ensure you have enough patient data to build an EMPI that accurately matches profiles, ask yourself these questions: 1. What kind of medical care have my patients received before this visit? When patients enter a new hospital, they’re given a brand-new identity, or patient number, that’s only relevant to that healthcare system. The identity you assign them within your own organization doesn’t provide any insight about what they’ve experienced before their current visit — and that’s the crux of the matter. When patient information is siloed within a specific system, you have no view of the patient’s medical history. But when it’s shared across systems and fed into a more dynamic and interoperable data management system, patients will ultimately receive better care. 2. Who are my patients when they’re not “patients”? It’s important to understand who patients are when they’re not in the hospital. Yes, they’re husbands and wives, mothers and fathers, brothers and sisters. But some could be physically fit, while others haven’t seen the inside of a gym in years. Some might get regular checkups, but others cannot afford to see a physician regularly. All of these traits factor into your patients’ identities. With a comprehensive EMPI, you can tie them together to understand the environmental and socioeconomic factors that influence your patients’ health. You can then identify what social determinants of health need to be addressed or could potentially influence the efficacy of certain treatments. 3. Can we identify patients without a picture ID? Biometrics such as fingerprints and iris scans are more secure forms of identification than a photo ID. They’ll not only make it easier to identify patients, but will also offer heightened security against fraud. That being said, even biometric identification isn’t 100 percent secure unless it’s part of a database, such as the EMPI, that accurately matches patient identities with relevant medical data. Accepting that the healthcare industry needs better data management and patient-matching strategies is the first step to realizing those goals. EMPIs have shown organizations the value in universal patient identities. Now, they simply need comprehensive databases that are robust enough to keep patient identities consistent across the entire healthcare ecosystem.

There's no question that portals increase patient engagement. According to the Office of the National Coordinator for Health IT, almost eight in 10 patients appreciate the improved access to healthcare information afforded to them by self-service systems. Unfortunately, portal systems also offer an obvious target for healthcare hackers. Within a patient portal, criminals can steal medical identity data, which is worth somewhere between 20 and 50 times as much as financial data, such as credit card numbers. They then use the stolen information to submit fraudulent claims, fill prescriptions, and resell medical equipment. What's more, because many healthcare organizations lack proper detection tools and some patients neglect to check their explanation of benefits (EOB) statements, health data breaches tend to go undetected longer than those in other sectors. No wonder healthcare data security incidents rose 211 percent in 2017, according to the 2018 "McAfee Labs Threats Report." Protecting patients' data with technology Patient portals engender patient engagement and loyalty, but if a data breach occurs, that loyalty is quickly lost. Besides losing patients’ trust, healthcare organizations that experience a data breach face potentially severe HIPAA penalties. Healthcare firms can learn a great deal from how other industries have met similar security challenges without overburdening consumers. Providers can use best-in-class technologies, data and analytics systems, and their deep understanding of patient needs to manage risks and protect patient identities. To arm providers against breaches, Experian Health offers Precise ID® with Digital Risk Score to protect portal users’ identities from their first sign-in to their last. By automating the portal signup process, it stops false enrollments at the source. Then, using multilayer verification, it provides access protection for future sessions. Because Precise ID takes less than a second to evaluate access risks, patients don't need to sit through loading screens. On the provider side, Precise ID satisfies the Centers of Medicare and Medicaid Services' Promoting Interoperability standards, minimizing compliance risks. At a time when one in five patients withhold information from physicians because of data breach concerns, Precise ID builds trust between patients and providers by protecting patients' data from unauthorized access. Giving patients the power to access their medical information through portal technology has been one of the past decade's biggest steps forward in improving patient-provider relationships. But with that reward comes responsibility: Providers must protect portals from unauthorized access and theft of medical records. With Precise ID with Digital Risk Score, providers get the security they need, and patients get the seamless access they've come to expect.