Methods and systems for analyzing accessing of medical data
Various aspects described herein relate to presenting electronic patient data accessing information. Data related to a plurality of access events, by one or more employees, of electronic patient data can be received. A set of access events of the plurality of access events can be determined as constituting, by the one or more employees, possible breach of the electronic patient data. An alert related to the set of access events can be provided based on determining that the set of access events constitute possible breach of the electronic patient data.
1. A computer-implemented method for detecting a non-compliant access of electronic patient data, the computer-implemented method comprising:
receiving, by one or more processors of a patient privacy monitoring server, access data from a plurality of electronic patient data access devices situated at various locations, the access data comprising a plurality of electronic patient data access events by one or more employees;
determining, by the one or more processors and based on the access data, that at least one electronic patient data access event of the plurality of electronic patient data access events constitutes a possible non-compliant access of electronic patient data, the determining including:
detecting, by a data patterning component and based on the access data, at least one data pattern of electronic patient data access events by a clinical care group; and
determining, by the data patterning component, the at least one electronic patient data access event by a subset of the clinical care group that is inconsistent to the at least one data pattern of electronic patient data access events;
in response to the determining that at least one electronic patient data access event of the plurality of access events constitutes a possible non-compliant access of electronic patient data, causing to present on a display of a user interface, by the one or more processors, an alert indicating the at least one electronic patient data access event, and a feedback indicator configured to allow a user to provide feedback indicating whether the at least one electronic patient data access event associated with the alert presented on the display of the user interface is a valid non-compliant access of electronic patient data or a false positive non-compliant access of electronic patient data;
receiving, by the one or more processors, feedback via the feedback indicator, the feedback indicating whether the at least one electronic patient data access event is a valid non-compliant access of electronic patient data or a false positive non-compliant access of electronic patient data; and
in response to receiving the feedback, modifying or maintaining, by the one or more processors, at least one of the plurality of rules for detecting possible subsequent non-compliant access of electronic patient data.
2. The computer-implemented method of claim 1 , wherein, when the feedback indicates that the at least one electronic patient data access event is a false positive non-compliance access of electronic patient data, modifying or maintaining the at least one of the plurality of rules comprises:
deactivating, by the one or more processors, at least one of the plurality of rules.
3. The computer-implemented method of claim 1 , wherein, when the feedback indicates that the at least one electronic patient data access event is a valid non-compliance access of electronic patient data, modifying or maintaining the at least one of the plurality of rules comprises:
activating, by the one or more processors, at least one of the plurality of rules.
4. The computer implemented method of claim 1 , wherein the access data is distributed across one or more networks.
5. The computer-implemented method of claim 1 , wherein the access data identifies at least one employee of the one or more employees requesting access to electronic patient data, and patient information.
6. The computer-implemented method of claim 1 , wherein the at least one of the plurality of rules relates to determining that the at least one electronic patient data access event is for a duration of time that is greater than a threshold duration of time.
7. The computer-implemented method of claim 1 , wherein modifying or maintaining the at least one of the plurality of rules comprises:
increasing a number of standard deviations for determining the at least one electronic patient data access event of the plurality of electronic patient data access events constitutes at least one possible non-compliant access of electronic patient data.
8. The computer-implemented method of claim 1 , further comprising:
generating, by the one or more processors, an alert associated with the at least one electronic patient data access event, wherein the alert comprises a description of the at least one electronic patient data access event.
9. The computer-implemented method of claim 1 , wherein the feedback is provided via one or more interfaces.
10. A system for detecting a non-compliant access of electronic patient data, the system comprising:
at least one processor; and
at least one storage device comprising instructions which, when executed by the at least one processor, cause the at least one processor to perform operations comprising:
receiving access data from a plurality of electronic patient data access devices situated at various locations, the access data comprising a plurality of electronic patient data access events by one or more employees;
determining, based on the access data, that at least one electronic patient data access event of the plurality of electronic patient data access events constitutes a possible non-compliant access of electronic patient data, the determining including:
detecting, by a data patterning component and based on the access data, at least one data pattern of electronic patient data access events by a clinical care group; and
determining, by the data patterning component, the at least one access event by a subset of the clinical care group that is inconsistent to the at least one data pattern of access events;
in response to the determining that at least one electronic patient data access event of the plurality of access events constitutes a possible non-compliant access of electronic patient data, causing to present, on a display of a user interface, an alert indicating the at least one electronic patient data access event, and a feedback indicator configured to allow a user to provide feedback indicating whether the at least one electronic patient data access event associated with the alert presented on the display of the user interface is a valid non-compliant access of electronic patient data or a false positive non-compliant access of electronic patient data;
receiving feedback via the feedback indicator, the feedback indicating whether the at least one electronic patient data access event is a valid non-compliant access of electronic patient data or a false positive non-compliant access of electronic patient data; and
in response to receiving the feedback, modifying or maintaining at least one of the plurality of rules for detecting possible subsequent non-compliant access of electronic patient data.
11. The system of claim 10 , wherein modifying or maintaining the at least one of the plurality of rules comprises deactivating at least one of the plurality of rules.
12. The system of claim 10 , wherein modifying or maintaining the at least one of the plurality of rules comprises activating at least one of the plurality of rules.
13. The system of claim 10 , wherein modifying or maintaining the at least one of the plurality of rules comprises increasing a number of standard deviations for determining the at least one electronic patient data access event of the plurality of electronic patient data access events constitutes at least one possible non-compliant access of electronic patient data.
14. The system of claim 10 , wherein at least one of the plurality of rules relates to determining that the at least one electronic patient data access event is for a duration of time that is greater than a threshold duration of time.
15. The system of claim 10 , wherein the feedback is provided via one or more interfaces.
16. A non-transitory computer readable medium storing instructions which, when executed by at least one processor, cause the at least one processor to perform operations for processing access data to determine a non-compliant access of electronic patient data, the operations comprising:
receiving access data from a plurality of electronic patient data access devices situated at various locations, the access data comprising a plurality of electronic patient data access events by one or more employees;
determining, based on the access data, that at least one electronic patient data access event of the plurality of electronic patient data access events constitutes a possible non-compliant access of electronic patient data, the determining including:
detecting, by a data patterning component and based on the access data at least one data pattern of electronic patient data access events by a clinical care group; and
determining, by the data patterning component, the at least one access event by a subset of the clinical care group that is inconsistent to the at least one data pattern of access events;
in response to the determining that at least one electronic patient data access event of the plurality of access events constitutes a possible non-compliant access of electronic patient data, causing to present, on a display of a user interface, an alert indicating the at least one electronic patient data access event, and a feedback indicator configured to allow a user to provide feedback indicating whether the at least one electronic patient data access event associated with the alert presented on the display of the user interface is a valid non-compliant access of electronic patient data or a false positive non-compliant access of electronic patient data;
receiving feedback via the feedback indicator, the feedback indicating whether the at least one electronic patient data access event is a valid non-compliant access of electronic patient data or a false positive non-compliant access of electronic patient data; and
in response to receiving the feedback, modifying or maintaining at least one of the plurality of rules for detecting possible subsequent non-compliant access of electronic patient data.
17. The non-transitory computer readable medium of claim 16 , wherein modifying or maintaining the at least one of the plurality of rules comprises deactivating at least one of the plurality of rules.
18. The non-transitory computer readable medium of claim 16 , wherein modifying or maintaining the at least one of the plurality of rules comprises deactivating at least one of the plurality of rules.
19. The non-transitory computer readable medium of claim 16 , wherein modifying or maintaining the at least one of the plurality of rules comprises increasing a number of standard deviations for determining the at least one electronic patient data access event of the plurality of electronic patient data access events constitutes at least one possible non-compliant access of electronic patient data.
20. The non-transitory computer readable medium of claim 16 , wherein at least one of the plurality of rules relates to determining that the at least one electronic patient data access event is for a duration of time that is greater than a threshold duration of time.