Resource Library

In the digital practice — where sensitive business and patient information is stored electronically — ransomware is one of the most devastating forms of malware. It works by encrypting or blocking access to sensitive files and demanding payment to restore access.¹ The loss to a healthcare practice — and its patients if medical records access is blocked — could be devastating. If the attack is successful, it is nearly impossible to recover the data without paying the ransom.

Text messaging has changed the way we communicate with each other. Like most people, healthcare team members use their mobile devices at work,^1,2,3 and texting about patients is common.⁴ Texting with patients and other members of the healthcare team has risks and benefits.

The 1996 Health Insurance Portability and Accountability Act (HIPAA) gave patients a right to view and request corrections to their medical records. In the intervening years, the widespread adoption of electronic health records (EHR), patient portals, and smartphone applications have led to an increase in patients accessing their medical records electronically. The digital evolution of the medical record has prompted a number of healthcare professionals and patient safety advocates to promote quicker access to information stored in the EHR.

An online search for the phrase “slip and fall” returns a never-ending wave of advertisements for personal injury lawyers, premises liability insurance products, and risk management services. Absent from this deluge of results is any mention of medical malpractice. Ostensibly, this makes sense. Premises liability and medical malpractice are two separate and distinct categories of negligence.

The reporting of unusual occurrences and adverse events has been a staple of the risk management plan in hospitals and healthcare facilities for many years. Incident and event reports, whether written or oral, are a means of alerting hospital leaders to potential or actual patient harm. These reports are critical to the ongoing identification of risk and the investigation of the circumstances that led to an adverse event. The reports, too, are key to the development of risk mitigation strategies designed to create a safer environment for patients, physicians, and staff. Additionally, the incident report, and the information it contains, is a valuable alert to potentially compensable events and the need for disclosure discussions.