Computerized method and system for restricting access to patient protected health information
A computerized system and method for allowing restricted access to patient healthcare information is provided. Upon determining that one or more users are assigned to the location where an order for a patient is to be performed, the method allows one or more users restricted access to the order. The system includes an order entry module, an access evaluation module, a location entry module and a user module. The access evaluation module includes an assignment determination sub-module for determining whether one or more users are assigned to the specified location where an order for a patient is to be performed. The assignment determination module also includes a restricted access sub-module coupled with the assignment determination module and configured to allow restricted access to one or more users assigned to the specified location.
1. A computer-implemented method, which is carried out using one or more of a server computer and computer-storage media, for allowing restricted access to a patient's healthcare information in a computing environment of a healthcare organization, the method comprising:
generating a list of personnel that are authorized to perform a healthcare procedure at a healthcare location;
receiving an order that indicates that a patient is to undergo the healthcare procedure;
assigning the order to the healthcare location;
receiving from a user a request to access the order;
determining that the user is included on the list of personnel that are authorized to perform the healthcare procedures at the healthcare location; and
allowing the user to access the order.
2. The method of claim 1 , further comprising:
allowing the user assigned to the location to access other healthcare information of the patient.
3. The method of claim 1 , further comprising:
determining whether the user has security clearance to enter test results for the type of order to which the user seeks access.
4. The method of claim 3 , wherein the healthcare location includes a physical location and a virtual location.
5. The method of claim 4 , wherein the healthcare location includes a work queue.
6. The method of claim 4 , wherein the healthcare location includes a patient examination room.
7. The method of claim 4 , wherein the healthcare location includes a testing laboratory.
8. The method of claim 4 , wherein the healthcare location includes a surgical suite.
9. One or more computer storage media having computer-executable instructions embodied thereon for performing the computer-implemented method recited in claim 1 .
10. The method of claim 1 , wherein the order is assigned based on information regarding the patient.
11. The method of claim 1 , wherein the order is assigned based on the availability of the one or more users to complete the order.
12. The method of claim 1 , wherein generating a list of personnel that are authorized to perform a healthcare procedure at a healthcare location comprises:
presenting for selection on a display the healthcare location that is usable to perform the healthcare procedure;
in response to a selection of the healthcare location, listing personnel that are authorized to perform the healthcare procedure at the healthcare location; and
receiving an approval of the personnel.
13. The method of claim 1 , wherein generating a list of personnel that are authorized to perform a healthcare procedure at a healthcare location comprises:
presenting on a display the healthcare location that is usable to perform the healthcare procedure; and
receiving an input that identifies a user that is authorized to perform the healthcare procedure at the healthcare location.
14. A computer system embodied on one or more computer storage media having computer-executable instructions embodied thereon for allowing restricted access to patient healthcare information in a healthcare organization, the system comprising:
a location-entry module for input of a healthcare location at which a user is authorized to perform a healthcare procedure, wherein the location-entry module is configured to:
present for selection on a display the healthcare location that is usable to perform the healthcare procedure,
in response to a selection of the healthcare location, list personnel that are authorized to perform the healthcare procedure at the healthcare location, and
receive an approval of the personnel;
an order entry module for both input of a patient order and assignment of the patient order to a specified location;
an assignment-determination module for determining that the user is assigned to the specified location where the patient order is to be completed; and
a restricted access module coupled with the assignment determination module and configured to allow the user to have restricted access to the order.
15. The system of claim 14 , further comprising:
an order access module for one or more users to access one or more patient order.
16. One or more computer storage media having embodied thereon computer-executable instructions that when executed cause a computing device to perform a method for allowing restricted access to patient health information in computing environment of a healthcare organization, the method comprising:
presenting on a display a list of personnel that are authorized to perform a healthcare procedure at a healthcare location;
receiving input that removes a user from the list of personnel;
receiving an order that indicates that a patient is to undergo the healthcare procedure;
assigning the order to the healthcare location;
receiving from the user a request to access the order;
determining that the user is not included in the list of personnel that are authorized to perform the healthcare procedures at the healthcare location; and
denying the user access to the order.