<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>MT Exchange &#187; security</title>
	<atom:link href="http://www.mtexchange.com/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.mtexchange.com</link>
	<description>Medical transcription exchange</description>
	<lastBuildDate>Thu, 03 Nov 2011 14:22:05 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
		<item>
		<title>Medical transcription offshore</title>
		<link>http://www.mtexchange.com/medical-transcription-exchange/medical-transcription-offshore/</link>
		<comments>http://www.mtexchange.com/medical-transcription-exchange/medical-transcription-offshore/#comments</comments>
		<pubDate>Tue, 19 Apr 2011 03:46:42 +0000</pubDate>
		<dc:creator>JulieW8</dc:creator>
				<category><![CDATA[Medical Transcription Exchange]]></category>
		<category><![CDATA[computers]]></category>
		<category><![CDATA[EMR]]></category>
		<category><![CDATA[healthcare IT]]></category>
		<category><![CDATA[HIPAA]]></category>
		<category><![CDATA[HITECH]]></category>
		<category><![CDATA[medical transcription]]></category>
		<category><![CDATA[medical transcriptionists]]></category>
		<category><![CDATA[offshoring]]></category>
		<category><![CDATA[overseas]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.mtexchange.com/?p=1389</guid>
		<description><![CDATA[The comments generated by the article on MT Stars&#8217; and offshore ownership got me thinking about the whole sticky wicket that constitutes the anti-offshore sentiment in the US medical transcription community. Donna Littrell questioned the use of my time in addressing the issue. I&#8217;ve been in the discussion forums online for a long, long time [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.mtexchange.com/wp-content/uploads/2011/04/flag.jpg"><img class="alignleft size-full wp-image-1383" style="margin: 5px;" title="big american flag" src="http://www.mtexchange.com/wp-content/uploads/2011/04/flag.jpg" alt="Medical Transcription Exchange" width="300" height="214" /></a>The comments generated by the article on <a href="http://www.mtexchange.com/74z" target="_blank">MT Stars&#8217; and offshore ownership</a> got me thinking about the whole sticky wicket that constitutes the anti-offshore sentiment in the US medical transcription community.</p>
<p>Donna Littrell questioned the use of my time in addressing the issue. I&#8217;ve been in the discussion forums online for a long, long time &#8211; and questioning someone&#8217;s effective use of time in pursuing a line of discussion is intended to stop a conversation, similar to <a href="http://en.wikipedia.org/wiki/Godwin%27s_law" target="_blank"><em>Godwin&#8217;s Law</em></a>:</p>
<blockquote><p>As an online discussion grows longer, the probability of a comparison involving Nazis or Hitler approaches.</p></blockquote>
<p>Were I to posit <em>Julie&#8217;s Law</em> (well, <em>Laws</em>, since there has to be more than one), it would be that as soon as someone reaches the point where they cannot logically defend their position, they will call into question the use of time of (a) the original poster, (b) other participants in the conversation, and then declare THEY don&#8217;t have time for this nonsense, so they&#8217;re done discussing it.</p>
<p>So, I decided to address a topic that is surely dear to the heart of the founder of ATA and its members: anti-offshoring attitudes and policies in the medical transcription community.</p>
<p>Let me start by relating an incident that happened to me many years ago, when offshoring first became an issue. At that time, I was paying for a listing in a publication that listed medical trancription services. (I believe this publication is now defunct, but I have the 2003 and 2004 directories, which is like looking through a registration of gravestones.) I received a solicitation in the mail about listing my service, filled it out and sent a check. I was subsequently contacted by the editor, who told me they would be unable to list my business in the directory because they had a policy against listing companies that were involved with offshoring work and they believed I was sending work overseas. I asked the editor to point out to me where in their contract this policy was stated. She stuttered and stammered a bit before admitting the policy wasn&#8217;t written. She also couldn&#8217;t tell me when the policy had been put into place. Then, I asked her how they were verifying whether or not a company sent work overseas. Signed affadavits? Audit? Not to my surprise, there was no verification process. Obviously, with no verification process and no written policy, the <em>policy</em> was being unevenly applied. In fact, I had the prior year&#8217;s directory and I pointed out to her all the companies that were listed that were sending work overseas and/or doing training overseas. I asked her if she really wanted to go down this road, at which point she decided that maybe, in fact, they would allow my business to be listed in the directory.</p>
<p>The editor admitted that her reason for attempting to deny my listing was based on posts I&#8217;d made in medical transcription forums that she felt were supportive off offshoring. Aside from that, whether or not I was sending work overseas isn&#8217;t  the point. Even if this editor had had a written policy, there was no way to verify the accuracy of any information. And, as I&#8217;m going to discuss, application of any policy is, by its very nature, difficult to impossible to uniformly apply.</p>
<p>How far is someone who is anti-offshore willing to go to stand by their principles and <em>walk the walk</em>? This is where things get sticky.</p>
<p>First of all, how does an individual or organization verify the uniquely <em>nationalist</em> work ethic and policies of a company or individual? Take their word on it? Ask for copies of contracts? Not having a process in place to verify the truthfulness or accuracy of claims is the same as having a contract with no early termination penalty; it&#8217;s a nice framework for working together, but pretty toothless. The organization formerly known as MTIA based its membership categories (and dues) on revenue, and members were required to submit financials. At least they&#8217;re asked to prove a positive &#8211; how do you prove a negative?</p>
<p>In spite of my belief that absent a method of independent verification, these policies are worthless, I&#8217;ll continue&#8230;</p>
<p>How far is an organization or individual willing to go to <em>walk the walk</em> and back up their beliefs and/or policies? Refuse to work for a company that sends work offshore? Boycott publications that accept advertising from companies that send work offshore? Boycott websites that are owned by offshore interests and/or have advertisers that are offshore or send work offshore? Refuse to accept advertising  from companies that are involved with offshore transcription? Boycott vendors that sell their products and services to offshore companies or companies that send work offshore?</p>
<p>The possibilities seem endless, don&#8217;t they?</p>
<p>Over the years, anti-offshore sentiment has evolved to center around privacy and security issues. HIPAA and HITECH have strengthened this argument &#8211; and I believe it is a valid concern. Looking at significant HIPAA breaches over the past year reveals that out of over 260 incidents reported that affect 500 or more individuals, only 3 involved transcription services. For more information, you can read <a href="http://www.mtexchange.com/srh" target="_blank">Brenda Hurley&#8217;s summary</a>. Right now, I&#8217;m feeling like I ought to contact Gair Transcription and offer to do some consulting about their online presence &#8211; aside from their address (in the US), Google search results returned only information about this breach. But here&#8217;s my favorite part &#8211; they exposed PHI on the internet for <strong>over 2 years</strong>! &lt;thud&gt; I don&#8217;t even know if any of these companies are involved with overseas transcription, but since these breaches occurred on their servers, it&#8217;s really a moot point.</p>
<p>Quite frankly, I&#8217;m more concerned about hackers in Russia than I am about transcription contractors in India.</p>
<p>To drive the sticky wicket in even further, we might be able to make an issue over whether or not these companies utilized overseas <em>website maintenance and programming</em>. Whether or not there was a breach, any overseas contractor maintaining the website would have access to the same information a transcriptionist would have &#8211; probably more. Is that something medical transcriptionists object to, or are they leaving that issue for the US programmers? In fact, according to Dr. Ahmed, he worked on the website design and programming for MT Stars. Is anyone concerned that their personal information is being exposed to someone in Pakistan who might do God-knows-what with it, or are they all using fake and throwaway e-mail addresses, so they don&#8217;t care? <img src='http://www.mtexchange.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' />  Does anyone ever wonder if their company website is programmed overseas? Maybe ATA should add a membership restriction that includes using offshore programmers, since they&#8217;re concerned for the security and privacy of American&#8217;s data.</p>
<p>There are healthcare providers who don&#8217;t have a problem with the privacy and security issues of sending transcription overseas. There are medical transcription companies that feel the privacy and security measures they have in place meet the requirements, even for overseas employees and/or contractors. The fact that there has been no large breaches involving overseas contractors supports the confidence these companies have in their policies and procedures for dealing with offshore workers. Where I <strong>do</strong> feel problems may arise are in situations where a small MTSO or an independent MT may not have adequate measures in place when transmitting PHI to small MTSOs or independent contractors offshore. Ultimately, however, the US entity will be the one on the hook &#8211; and the US entity will have to decide whether or not the risks are worth the benefits.</p>
<p>When I look at the <em>So What Can We Do?</em> recommendations in the ATA&#8217;s <a href="http://www.mtexchange.com/jut" target="_blank">open letter on offshoring</a>, I see an effort that is well-intentioned, but rather naïve. In reality, what Americans (in fact, most people worldwide) are willing to give up in terms of privacy is changing at an incredible rate of speed. You could close your social network and e-mail and all other online accounts and log off the internet permanently &#8211; and there would still be a huge volume of information about you available on the internet. It might even all be contained on servers within the borders of the United States of America. The fact is, you can&#8217;t control what others do and how they conduct their business. Your information is being tracked in hundreds, if not thousands, of different ways. If we limit the conversation to <em>only</em> your medical information, your doctor, the hospital, the laboratory, the pharmacy and your healthcare insurance carrier are only the starting point. The largest reported HIPAA breach so far this year is being reported by <em>HealthNet</em> &#8211; a large insurance carrier.</p>
<p>When we bank online, watch the pharmacist verify our insurance information and medication record on the computer and watch the doctor send our records to the hospital with a push of the button, pay a credit card online, hand a discount card to the cashier at the grocery store &#8211; and a host of other electronic events that have become ubiquitous in our day-to-day lives &#8211; we are relying on the company we&#8217;re entrusting with our personal and financial information and that it has made every effort, even extraordinary efforts, to safeguard that information. Not just because they can be sued, but because their interests in safeguarding that information align with our own. Even though we are aware that there is a possibility that our information could be stolen, we have consciously or unconsciously weighed the risks and decided the benefits are greater than the risk.</p>
<p>Which brings me back to that sticky wicket. It&#8217;s pretty obvious to me  that at some point we have to accept that in the medical transcription  industry, we can&#8217;t possibly boycott everything that touches the offshore  transcription industry. And we can&#8217;t prove a negative. At whatever point a person or organization  comes to that realization, they have to either set limits they can live  with &#8211; or start rationalizing  and defending the  inconsistency between their actions and their stated principles.</p>
<div id="_mcePaste" class="mcePaste" style="position: absolute; left: -10000px; top: 427px; width: 1px; height: 1px; overflow: hidden;">If one has the time to hunt down this type of information, just imagine  what you could do if you focused on a positive issue for the  transcription industry.  Our industry is being battered from all sides.  We need to support each other and keep moving forward. It’s too easy to  sit back and whine and complain about every little thing, because you  will always have people who will commisurate with you – misery loves  company. That’s a reason I do not follow the transcription boards (this  one included). I only found out about this issue because I received an  email. There’s enough negativity in this world. Our energy would be  better spent if we put our heads together and combined our efforts so  the future of our industry, as changing as it is, will be something we  can all live with.<span class="Apple-style-span" style="border-collapse: separate; color: #000000; font-family: 'Times New Roman'; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; font-size: medium;"><span class="Apple-style-span" style="color: #111111; font-family: Arial,'Helvetica Neue',Helvetica,sans-serif; font-size: 13px; line-height: 20px;">&nbsp;</p>
<p style="padding: 0px; margin: 0px 0px 1.538em;">Transcriptionists and Transcription Companies also have the following obligations:</p>
<ul style="padding: 0px; margin: 0px 0px 1.538em 1.538em; list-style-type: square;">
<li style="padding: 0px; margin: 0px;">Must be a 100% U.S. company or individual</li>
<li style="padding: 0px; margin: 0px;">Must perform all transcription work in-house OR subcontract only to U.S. employees/individuals legally working within the U.S.</li>
<li style="padding: 0px; margin: 0px;">Must not subcontract any transcription work overseas</li>
<li style="padding: 0px; margin: 0px;">Must not subcontract any transcription work to companies that subcontract transcription work overseas</li>
</ul>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p></span></span></div>
]]></content:encoded>
			<wfw:commentRss>http://www.mtexchange.com/medical-transcription-exchange/medical-transcription-offshore/feed/</wfw:commentRss>
		<slash:comments>14</slash:comments>
		</item>
		<item>
		<title>Ethical Best Practices</title>
		<link>http://www.mtexchange.com/medical-transcription-exchange/ethical-best-practices/</link>
		<comments>http://www.mtexchange.com/medical-transcription-exchange/ethical-best-practices/#comments</comments>
		<pubDate>Fri, 05 Feb 2010 14:00:58 +0000</pubDate>
		<dc:creator>JulieW8</dc:creator>
				<category><![CDATA[Medical Transcription Exchange]]></category>
		<category><![CDATA[AHDI]]></category>
		<category><![CDATA[ethics]]></category>
		<category><![CDATA[healthcare documentation]]></category>
		<category><![CDATA[HIPAA]]></category>
		<category><![CDATA[HITECH]]></category>
		<category><![CDATA[medical transcription]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.mtexchange.com/?p=1068</guid>
		<description><![CDATA[Just in case you didn&#8217;t know, we are in the &#8220;healthcare documentation sector.&#8221; We still do medical transcription and we&#8217;re still called medical transcriptionists, but only because there&#8217;s no organized group &#60;ahem&#62; that&#8217;s been able to either decide what else to call us and/or make it stick. However, medical transcriptionists everywhere can rejoice, knowing that [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.mtexchange.com/wp-content/uploads/2010/02/glass_piggybank.jpg"><img class="alignleft size-medium wp-image-1076" title="glass_piggybank" src="http://www.mtexchange.com/wp-content/uploads/2010/02/glass_piggybank-240x300.jpg" alt="" width="240" height="300" /></a>Just in case you didn&#8217;t know, we are in the &#8220;healthcare documentation sector.&#8221; We still do medical transcription and we&#8217;re still called medical transcriptionists, but only because there&#8217;s no organized group &lt;ahem&gt; that&#8217;s been able to either decide what else to call us and/or make it stick.</p>
<p>However, medical transcriptionists everywhere can rejoice, knowing that AHDI now has a manual of ethical best practices available for us healthcare documentation sector workers.</p>
<p>And signaling that yes indeed, the practitioner member is once again not as important as the practitioner MTs themselves would like to think, there is no special pricing for practitioner members. Should you decide you can&#8217;t live without knowing why there&#8217;s a section for <em>AHDI Code of Ethics</em> and another for <em>MTIA Code of Ethics</em>, this baby will cost you a whopping $4,000.</p>
<p>Which is, I&#8217;m sure, just the start of the confusion.</p>
<p>After stating (very convincingly, I might add) that this is much, much less expensive than you&#8217;d pay if you put this together yourself or pay someone to do it for you (can you put a price tag on the <em>AHDI Code of Ethics</em> or the <em>MTIA Code of Ethics</em>? I think not), then setting you back on your heels with the $4,000 price tag &#8211; they soothe your ruffled feathers by letting you know that <strong>everybody except practitioner members can get this for less than $1,000</strong>.</p>
<p>Damn &#8211; I sure hope practitioners don&#8217;t actually <strong><em>need</em></strong> this for anything because at a reported average annual income  of $30,000/year, the cost of this is just over 13% of an MT&#8217;s annual pay.</p>
<p style="text-align: left;">The pricing on this package (and possibly even the package itself) signals that not only is AHDI still floundering when it comes to offering anything of value to this membership group, they also don&#8217;t mind spitting in their faces. Because just in case you <em>missed</em> the part where you&#8217;re paying more than anyone else, there&#8217;s this friendly reminder:</p>
<p style="text-align: center;"><a href="http://www.mtexchange.com/wp-content/uploads/2010/02/AHDI_fullprice.jpg"><img class="size-full wp-image-1071 aligncenter" title="AHDI_fullprice" src="http://www.mtexchange.com/wp-content/uploads/2010/02/AHDI_fullprice.jpg" alt="" width="505" height="68" /></a></p>
<p>It&#8217;s comforting to know that Gold Members of MTIA &#8211; which I&#8217;m sure includes companies that could actually afford to develop this information inhouse &#8211; don&#8217;t have to pay a dime. I&#8217;m sure this contributes mightily to the credibility of the claims that the relationship between AHDI and MTIA is good for both. I wonder how many Gold level members are on the MTIA Board. Just wonderin&#8217;, that&#8217;s all.</p>
<p>Isn&#8217;t it nice to know that AHDI knows which side its bread is buttered on? I&#8217;m looking on their web site and trying to find some indication as to who they think is going to pay the dues to keep the organization afloat if they piss off enough practitioner members, which still constitutes the largest membership group. Maybe AHDI has given up trying to find something of value to offer to the practitioner members.</p>
<p>Since I&#8217;m never going to pay $4,000 (or, let&#8217;s face it, $250, $750 or $950) to actually take a look at this manual of ethics and best practices, I really<span style="text-decoration: line-through;"> shouldn&#8217;t</span> can&#8217;t say much about the package itself. I am, however, going to latch onto the term <em>production location transparency</em>. It&#8217;s a whole lot catchier &#8211; and easier &#8211; than &#8220;where is this work being transcribed?&#8221; I guess I&#8217;m just going to have to wither away with curiousity as to the difference between AHDI&#8217;s code of ethics and MTIA&#8217;s code of ethics.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.mtexchange.com/medical-transcription-exchange/ethical-best-practices/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Offshore MT security issues blaze into headlines</title>
		<link>http://www.mtexchange.com/medical-transcription-exchange/offshore-mt-security-issues/</link>
		<comments>http://www.mtexchange.com/medical-transcription-exchange/offshore-mt-security-issues/#comments</comments>
		<pubDate>Mon, 19 Oct 2009 15:29:08 +0000</pubDate>
		<dc:creator>JulieW8</dc:creator>
				<category><![CDATA[Medical Transcription Exchange]]></category>
		<category><![CDATA[HIPAA]]></category>
		<category><![CDATA[HITECH]]></category>
		<category><![CDATA[medical transcription]]></category>
		<category><![CDATA[MT]]></category>
		<category><![CDATA[offshoring]]></category>
		<category><![CDATA[overseas]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.mtexchange.com/?p=978</guid>
		<description><![CDATA[In his blog at Advance, Jay Vance spotlights a story about Potential Offshore Outsourcing Catastrophe &#8211; Medical Records For Sale In India. It&#8217;s a pretty interesting read  and although the sting operation was carried out by a UK team and involved UK records, it doesn&#8217;t take much to see that the same situation could be [...]]]></description>
			<content:encoded><![CDATA[<p>In his blog at Advance, Jay Vance spotlights a story about <a href="http://www.mtexchange.com/ztl" target="_blank"><em>Potential Offshore Outsourcing Catastrophe &#8211; Medical Records For Sale In India</em></a>. It&#8217;s a pretty interesting read  and although the sting operation was carried out by a UK team and involved UK records, it doesn&#8217;t take much to see that the same situation could be happening with US medical records.</p>
<p>In short, the <a href="http://www.mtexchange.com/b92" target="_blank">Economic Times</a> article sums up the pertinent issue:</p>
<blockquote><p>&#8230;investigations conducted by a British TV channel have come up with the stunning revelation that confidential medical records sent to India for computerisation are being offered for sale, triggering heightened concerns about breach of data security here.</p></blockquote>
<p>I expect a pretty instant reaction. The BPO business in India is too lucrative to be threatened by something like this. In fact, an English-language Indian blog site posts a response from <a href="http://www.mtexchange.com/dqo" target="_blank">NAAVI</a> (a portal on Indian cyber law). Unfortunately, whatever NAAVI has to say about this is not available due to some glitch at the web site, but the blogger posts an article related to it (or it&#8217;s the NAAVI article, reposted &#8211; hard to tell when I can&#8217;t read the original): <a href="http://www.mtexchange.com/d5z" target="_blank"><em>Medical Transcription Industry in India needs to tighten its security</em></a>.</p>
<p>Ya think?</p>
<blockquote><p>However, it is possible for sections of the International Community which is opposed to outsourcing business to India to pick up the current incident and blow it out of proportion. They may actually try to get sanctions passed against outsourcing of business to India through the Data Protection Act in EU or through HIPAA/HITECH in USA. The problems will not stop at the small medical transcriptionists. It is likely to affect the image of the country as a “Security Conscious” country and would hurt even the larger companies.</p></blockquote>
<p>This should be an interesting development to keep an eye on!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.mtexchange.com/medical-transcription-exchange/offshore-mt-security-issues/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
	</channel>
</rss>

