News 1/31/13

From LightsOut: “iPractice Group. The company posted a notice on its Website that it has ceased operations as a result of ‘depressed sales in the late 4th quarter leading to insufficient funding to continue operations.’” Between market saturation, practice consolidations, and MU requirements, I am certain that iPractice will not be the only EHR vendor to close up shop this year.

Huron Valley Physicians Association (MI) chooses eClinicalWorks EHR for its 600 providers. eClinicalWorks also announces that Holyoke Medical Center (MA) is adding eCW Care Coordination Medical Record for advancing ACO and PCMH objectives.

The website Software Advice scrubs CMS data on MU attestations through October 2012 to identify the top ambulatory EHR vendors. Epic, Allscripts, and eClinicalWorks had the most complete EHR MU attestations and accounted for 42 percent of all attestations. A total of 355 vendors had at least one attestation, though two-thirds of all attestations came from the top 10.

MacPractice and RT-MediBus integrate their MacPractice PMS and RT-MediBus EHR programs.

Cara Buckhaulter, a medical billing and coding consultant with Nuesoft, offers some tips for boosting practice revenues, decreasing rejected and underpaid claims, and reducing claims A/R days. Recommended steps include verifying insurance, submitting claims daily, following up promptly on rejected or unpaid claims, reviewing codes semiannually, and monitoring financial reports monthly.

Medical Office Today profiles NextGen customer Associates in Women’s Health (KS) and its use of NextGen’s NextPen digital pen technology.

SOAPware will implement the ELLKAY connectivity bridge for its EHR clients to provide integration with third-party PM systems.

CPA B.J. Hoffman suggests some internal control procedures to prevent fraud, waste, and abuse in medical practices. The bottom line: physicians should regularly review key financial documents and staff should segregate financial tasks to ensure proper checks and balances.

E-mail Inga.

News 1/29/13

From Tiffany: “Re: iPractice Group. You wrote a very nice blurb about our booth and presence at MGMA in San Antonio. Thought you might find it interesting that the company laid us all off on Friday and is filing bankruptcy.” Unconfirmed, but other readers have shared similar news. Mr H and I have e-mailed and called the Nashville headquarters but have received no response and all content has been removed from the company’s website. IPractice, which is (or was) a reseller for Greenway, moved to a new 30,000 square foot headquarters in October, made a big splash at MGMA, and in November was attempting to raise $10 million in additional equity.

Athenahealth files notice that it will lay off 36 employees in its Birmingham office, effective March 6. Birmingham is the location of Proxsys, the care coordination systems provider that athenahealth acquired in 2011. Margo Hendrickson, athenahealth’s VP of HR, sent us this note:

As a high growth company we are always looking to apply efficiencies to the way we work. While it is incredibly difficult to let people go from what otherwise is a growing employee base, our intent and commitment to shareholders is to align investment with business growth opportunities. This focused set of employee restructuring will allow us to achieve several critical business scaling and financial objectives that otherwise we would struggle to meet. At athenahealth, we are committed to ongoing team growth; in the past year alone the Company has grown its U.S. employee base 28 percent adding a total of 473 new employees to its U.S. total of 2,140.

Pioneer Medical Group (CA) signs an agreement with McKesson’s MED3OOO division to jointly own and operate an advancement management services joint venture that will offer physician group management, operations, administration, hosted technology, data warehousing, and other services for provider groups, physician networks, employers, and hospitals.

First Databank releases the FDB State and Federal Controlled Substances Module, which facilitates the e-prescribing, dispensing, tracking, reporting, and claims processing of controlled substances.

American Medical Group Association (AMGA) reports the addition of 51 new medical group members in 2012, representing 13,600 physicians. AMGA represents 430 group practices and 130,000 FTE physicians.

Billing service and collections provider Horizon Financial Management will use state and local tax incentives to establish a new 20,000 square foot headquarters in Merrillville, IN. The company plans to invest $1.9 million on the new facility and grow its staff from 60 to 276 by 2016.

Vitera Healthcare Solutions will give practices using its Vitera Stat PM/EHR product access to DiagnosisOne’s CDS content and patient education materials at the point of care.

As of the end of 2012, Medicare and Medicaid had paid over 175,000 EPs more than $3.3 billion in MU incentive since the program’s inception.

E-mail Inga.

HIStalk Practice Advisory Panel: Social Media, Security Practices

The HIStalk Practice Advisory Panel is a group of physicians, ambulatory care professionals, and a few vendor executives who have volunteered to provide their thoughts on topical issues relevant to physician practices. I seek their input every month or so on an important news development and also ask the non-vendor members about their recent experience with vendors. E-mail me to suggest an issue for their consideration.

If you work for a practice, you are welcome to join the panel. Many thanks to the HIStalk Practice Advisory Panel members for willingness to participate.

For this report, I asked panel members about social media in their practice and privacy and security measures.

What social media tools are being used in your practice?

We’ve had to tighten things up due to fear of lawsuits or other problems. We encourage our providers to only use the official practice website or official practice-based Facebook and Twitter accounts. There are a couple of physicians who use personal Facebook accounts and have patients who have friended them, but that’s discouraged.

Website with vetted patient education content, Twitter, e-mail – with marked restrictions (until we engage our portal) and patient communications portal (pending).

We have a very basic Facebook presence and starting to do some rare tweets. But right now we believe our patients really want connectivity rather than content,  so our focus is on making sure it is very easy to send in messages via our secure portal.

Employed clinics have a Facebook presence to make general announcements about clinic-sponsored community events, new services, and physicians joining the group. Periodic reminders about seasonal flu shots are also posted. There is very little social media usage among the private practice clinics within our market.

Patient portal is in place and gaining adoption. We also use YouTube to distribute videos of clinic providers, the clinics news, and leadership messages. Some use of LinkedIn and other social media for recruiting. Still discovering ways to leverage the social media. This is an example of a YouTube video we use to promote our medical group in the community:

What security and privacy measures are in place in your practice? For example, encryption, passwords, remote access, antivirus, backup/recovery processes, etc.

All of the above including mandatory machine encryption and mandatory antivirus measures etc.

Passwords with complexity requirements, fingerprint scanners, Norton 360, Avast Antivirus, Malwarebytes Anti-Malware, LogMeIn Pro, daily incremental local backups to external hard drive, weekly full backups to external hard drive, off-site storage of redundant external backups, pen tablets not allowed to be taken off-site.

Employed clinics follow the enterprise-wide policies and procedures for security and privacy. Those policies address encryption for all devices, minimum password complexity standards, frequency of password changes, non-reusable passwords, antivirus protection active and definitions up to date, OS and application security patches applied, redundancy/backup protection, business continuity and disaster recovery, and employee required annual training on HIPAA security, social engineering, phishing, etc. These policies align and in some case are even more stringent than the regulatory requirements to protect the information and system assets of our enterprise and patients. Daily automated audit systems are in place to notify the appropriate personnel of devices that do not comply with policy.

Unfortunately, for most of the private practices that I have visit, they do not fully comply with the basics of existing regulations regarding security and privacy of electronic patient information, systems, and access. Private practice clinics (especially the small to medium sized clinics) do not have the internal expertise nor resources to accomplish what a larger organization can do with pooled resources. Some clinics are relying on the HITECH REC services or third-party providers to monitor and accomplish some or all the tasks necessary to be compliant with regulations.

We use passwords and antivirus. Remote access is allowed only from home. Not sure if we encrypt. We did not have a backup system initially. We did discuss that once in a staff meeting at which it was decided that another database would be added at another site for backup, but I’m not sure if that ever materialized.

VPN, encryption, daily back-up, antivirus.

We are part of a larger AMC, so lots of the regular network stuff – passwords, virus protection, backups. For remote access, we use dual authentication with a token. In our exam rooms, we set up a system that automatically secures the exam room computers when the door is opened, thus ensuring security when the doctor or nurse leaves the room. Has worked out great!

On the encryption front, we have a disk encryption product on our laptop machines called Credant. The software is a hybrid encryption product that only encrypts some of the files on the laptop, leaving others — like the OS — unencrypted. They say that this is better when compared to full disk encryption because only the user who is logged into the machine has files that are decrypted, whereas full disk encryption products decrypt all of the files for all of the users on successful login.

I think there may be a weakness in it because the whole drive is not encrypted. Given time, I’d try to hack it to see if it fails to encrypt files that it should. So hopefully it is doing a good job. I’m aware of a few cases where users have lost data because the keys were corrupted or something else went wrong with the encryption product.

We use whole-disk encryption for all portable devices and only allow PCs on the network (no BYOD, unfortunately) for making the security easier. Passwords must change every 45 days and cannot repeat for 24 months. Remote access is available with either hard or soft tokens. Antivirus is in place. We do allow users to be administrators on their own devices, but if we suspect trouble, we will then remove those rights. We assume you’re innocent until you mess up. We back up the EHR database nightly and every two weeks a backup is sent to some kind of secure bunker, I think in Nebraska. We randomly test the backups to make sure they are actually usable.

News 1/24/13

Medical billing software provider Kareo raises $20.5 million in new funding to launch Kareo Billing Services and expand its sales and marketing efforts. Kareo, which serves over 6,000 customers, doubled its employee base and its revenue in 2012.

Greenway Medical Technologies unveils an interactive developer portal and extended PrimeSUITE API to facilitate the creation of apps that interoperate with the PrimeSUITE EHR/PM solution.

Grace and Mercy Health Clinic (TX) chooses iPatientCare EHR.

SRS reports a 94 percent increase in revenues from 2011 to 2012 and the addition of 56 new employees, plus an 8,000 square foot expansion to its office space.

Prince George’s County Health Department (MD)  implements WebChart EHR from Medical Informatics Engineering and NoMoreClipboard PHR across 25 clinics.

Epocrates says the use of its application has helped clinicians avoid more than 27 million adverse drug events, which represents over 25 percent of all Epocrates drug lookups. Sixty percent of physicians using Epocrates report avoiding at least one adverse drug error every week.

National HIT Coordinator Farzad Mostashari, MD highlights some of ONC’s 2012 achievements, including:

• 64 percent of EPs registered for the MU program
• 33 percent of EPs received MU payments
• 132,842 primary care providers in over 31,000 practices received EHR assistance from RECs
• Over 100,000 of the REC-assisted EPs are now live on an EHR and nearly 40,000 have achieved MU
• Over 80 percent of all FQHCs were assisted by RECs.

E-mail Inga.

News 1/22/13

A growing number of pharmaceutical companies and other businesses are taking advantage of advertising opportunities within cloud-based EMRs. EMRs such as Practice Fusion generate ads based on keywords and allow advertisers to message directly to doctors at the point of care. More than 85 percent of the major pharmaceutical companies currently run ads within Practice Fusion.

athenahealth announces it will offer an anesthesia-specific billing solution for hospitals and independent practices.  MedOasis will provide the capabilities for anesthesia coding, charge-entry, contract management, and compliance.

EMR/PM provider iSALUS Healthcare and RCM firm CIPROMS partner to integrate and co-promote their services to physicians.

A study published in JAMA Internal Medicine suggests e-visits may be just as effective as in-person office visits for uncomplicated ailments such as sinus infections and UTIs. Researchers also found patients receiving online care were prescribed more antibiotics, perhaps because providers used more conservative treatments when unable to see patients in person. Even with additional prescriptions, e-visit care costs for UTI patients were less than in-person visits ($74 versus $93 a visit.)

Neighborhood Health Plan and Partners Health (MA) will provide $4.25 million in grants to 49 community health centers to expand HIT systems, train on Meaningful Use and medical coding, and train and build capacity for performance improvement.

Last week HHS Secretary Kathleen Sebelius announced the final omnibus privacy and security rule that expands HIPAA’s reach to business associates, increases penalties to $1.5 million per violation, and clarifies breach notification requirements. One provision that particularly impacts practices is the requirement for providers to give patients their medical information in electronic form if requested, assuming the data is stored electronically. Another provision that could require vendors to modify their software and practices to change workflows allows cash-paying patients to instruct providers not to share treatment information with their insurance company.

AMA News reviews the new CPT codes for transitional care management and complex chronic care coordination, including advice on when to use which code. The new codes went into effect January 1 and allows practices to bill for coordinating the care of patients when discharged from a hospital or with multiple chronic conditions.

Last week the HIStalk Practice Advisory Panel provided some good insight into the resources their practices use when comparing HIT vendor and products. A few of my favorite comments:

Lately we’ve awarded three contracts without a formal RFP or competitive vendor selection process. Unfortunately, that approach has been both expensive and has resulted in us owning products or buying consulting services that have failed to meet the functionality or quality our users desire. Hopefully we’ll learn a lesson soon.

When our administrators looked for an EHR, they simply looked at the market leader in our niche market, got a one-hour demo, and chose it. Turns out that’s not a good method.

Google and Web research. EMRConsultant.com. Personal recommendations from colleagues. Demos, demos, demos.  Getting access to a test site for extended, unrestricted hands-on experience seems to be the most helpful.

Greenway Medical Technologies, Inc., announces that Greenway PrimeSUITE 2014 (17.0) is compliant with the ONC 2014 Edition criteria and was CCHIT-certified as an EHR Module.

E-mail Inga.

.