Interpretation and integration of the federal substance use privacy protection rule in integrated health systems

A qualitative analysis

Aimee N.C. Campbell, Dennis McCarty, Traci Rieckmann, Jennifer McNeely, John Rotrosen, Li tzy Wu, Gavin Bart

Research output: Contribution to journalArticle

Abstract

Background: Federal regulations (42 CFR Part 2) provide special privacy protections for persons seeking treatment for substance use disorders. Primary care providers, hospitals, and health care organizations have struggled to balance best practices for medical care with adherence to 42 CFR Part 2, but little formal research has examined this issue. The aim of this study was to explore institutional variability in the interpretation and implementation of 42 CFR Part 2 regulations related to health systems data privacy practices, policies, and information technology architecture. Methods: This was a cross-sectional qualitative study using purposive sampling to conduct interviews with privacy/legal officers (n = 17) and information technology specialists (n = 10) from 15 integrated healthcare organizations affiliated with three research nodes of the National Institute on Drug Abuse (NIDA) National Drug Abuse Treatment Clinical Trials Network (CTN). Trained staff completed a short survey and digitally recorded semi-structured qualitative interview with each participant. Interviews were transcribed and coded within Atlas.ti. Framework analysis was used to identify and organize key themes across selected codes. Results: Participants voiced concern over balancing patient safety with 42 CFR Part 2 privacy protections. Although similar standards of protection regarding release of information outside of the health system was described, numerous workarounds were used to manage intra-institutional communication and care coordination. To align 42 CFR Part 2 restrictions with electronic health records, health systems used sensitive note designation, “break the glass” technology, limited role-based access for providers, and ad hoc solutions (e.g., provider messaging). Conclusions: In contemporary integrated care systems, substance-related EHR records (e.g., patient visit history, medication logs) are often accessible internally without specific consent for sharing despite the intent of 42 CFR Part 2. Recent amendments to 42 CFR Part 2 have not addressed information sharing needs within integrated care settings.

Original languageEnglish (US)
Pages (from-to)41-46
Number of pages6
JournalJournal of Substance Abuse Treatment
Volume97
DOIs
StatePublished - Feb 1 2019

Fingerprint

Privacy
Health
Interviews
Technology
Substance-Related Disorders
National Institute on Drug Abuse (U.S.)
Organizations
Health Information Systems
Information Services
Information Dissemination
Atlases
Electronic Health Records
Patient Safety
Practice Guidelines
Research
Information Systems
Health Personnel
Glass
Primary Health Care
Cross-Sectional Studies

Keywords

  • Addiction
  • Health information technology
  • Integrated care
  • Privacy
  • Qualitative research

ASJC Scopus subject areas

  • Phychiatric Mental Health
  • Medicine (miscellaneous)
  • Clinical Psychology
  • Psychiatry and Mental health

Cite this

Interpretation and integration of the federal substance use privacy protection rule in integrated health systems : A qualitative analysis. / Campbell, Aimee N.C.; McCarty, Dennis; Rieckmann, Traci; McNeely, Jennifer; Rotrosen, John; Wu, Li tzy; Bart, Gavin.

In: Journal of Substance Abuse Treatment, Vol. 97, 01.02.2019, p. 41-46.

Research output: Contribution to journalArticle

Campbell, Aimee N.C. ; McCarty, Dennis ; Rieckmann, Traci ; McNeely, Jennifer ; Rotrosen, John ; Wu, Li tzy ; Bart, Gavin. / Interpretation and integration of the federal substance use privacy protection rule in integrated health systems : A qualitative analysis. In: Journal of Substance Abuse Treatment. 2019 ; Vol. 97. pp. 41-46.
@article{0c0e0d9c88cd492ca0e37bd062475e3b,
title = "Interpretation and integration of the federal substance use privacy protection rule in integrated health systems: A qualitative analysis",
abstract = "Background: Federal regulations (42 CFR Part 2) provide special privacy protections for persons seeking treatment for substance use disorders. Primary care providers, hospitals, and health care organizations have struggled to balance best practices for medical care with adherence to 42 CFR Part 2, but little formal research has examined this issue. The aim of this study was to explore institutional variability in the interpretation and implementation of 42 CFR Part 2 regulations related to health systems data privacy practices, policies, and information technology architecture. Methods: This was a cross-sectional qualitative study using purposive sampling to conduct interviews with privacy/legal officers (n = 17) and information technology specialists (n = 10) from 15 integrated healthcare organizations affiliated with three research nodes of the National Institute on Drug Abuse (NIDA) National Drug Abuse Treatment Clinical Trials Network (CTN). Trained staff completed a short survey and digitally recorded semi-structured qualitative interview with each participant. Interviews were transcribed and coded within Atlas.ti. Framework analysis was used to identify and organize key themes across selected codes. Results: Participants voiced concern over balancing patient safety with 42 CFR Part 2 privacy protections. Although similar standards of protection regarding release of information outside of the health system was described, numerous workarounds were used to manage intra-institutional communication and care coordination. To align 42 CFR Part 2 restrictions with electronic health records, health systems used sensitive note designation, “break the glass” technology, limited role-based access for providers, and ad hoc solutions (e.g., provider messaging). Conclusions: In contemporary integrated care systems, substance-related EHR records (e.g., patient visit history, medication logs) are often accessible internally without specific consent for sharing despite the intent of 42 CFR Part 2. Recent amendments to 42 CFR Part 2 have not addressed information sharing needs within integrated care settings.",
keywords = "Addiction, Health information technology, Integrated care, Privacy, Qualitative research",
author = "Campbell, {Aimee N.C.} and Dennis McCarty and Traci Rieckmann and Jennifer McNeely and John Rotrosen and Wu, {Li tzy} and Gavin Bart",
year = "2019",
month = "2",
day = "1",
doi = "10.1016/j.jsat.2018.11.005",
language = "English (US)",
volume = "97",
pages = "41--46",
journal = "Journal of Substance Abuse Treatment",
issn = "0740-5472",
publisher = "Elsevier Inc.",

}

TY - JOUR

T1 - Interpretation and integration of the federal substance use privacy protection rule in integrated health systems

T2 - A qualitative analysis

AU - Campbell, Aimee N.C.

AU - McCarty, Dennis

AU - Rieckmann, Traci

AU - McNeely, Jennifer

AU - Rotrosen, John

AU - Wu, Li tzy

AU - Bart, Gavin

PY - 2019/2/1

Y1 - 2019/2/1

N2 - Background: Federal regulations (42 CFR Part 2) provide special privacy protections for persons seeking treatment for substance use disorders. Primary care providers, hospitals, and health care organizations have struggled to balance best practices for medical care with adherence to 42 CFR Part 2, but little formal research has examined this issue. The aim of this study was to explore institutional variability in the interpretation and implementation of 42 CFR Part 2 regulations related to health systems data privacy practices, policies, and information technology architecture. Methods: This was a cross-sectional qualitative study using purposive sampling to conduct interviews with privacy/legal officers (n = 17) and information technology specialists (n = 10) from 15 integrated healthcare organizations affiliated with three research nodes of the National Institute on Drug Abuse (NIDA) National Drug Abuse Treatment Clinical Trials Network (CTN). Trained staff completed a short survey and digitally recorded semi-structured qualitative interview with each participant. Interviews were transcribed and coded within Atlas.ti. Framework analysis was used to identify and organize key themes across selected codes. Results: Participants voiced concern over balancing patient safety with 42 CFR Part 2 privacy protections. Although similar standards of protection regarding release of information outside of the health system was described, numerous workarounds were used to manage intra-institutional communication and care coordination. To align 42 CFR Part 2 restrictions with electronic health records, health systems used sensitive note designation, “break the glass” technology, limited role-based access for providers, and ad hoc solutions (e.g., provider messaging). Conclusions: In contemporary integrated care systems, substance-related EHR records (e.g., patient visit history, medication logs) are often accessible internally without specific consent for sharing despite the intent of 42 CFR Part 2. Recent amendments to 42 CFR Part 2 have not addressed information sharing needs within integrated care settings.

AB - Background: Federal regulations (42 CFR Part 2) provide special privacy protections for persons seeking treatment for substance use disorders. Primary care providers, hospitals, and health care organizations have struggled to balance best practices for medical care with adherence to 42 CFR Part 2, but little formal research has examined this issue. The aim of this study was to explore institutional variability in the interpretation and implementation of 42 CFR Part 2 regulations related to health systems data privacy practices, policies, and information technology architecture. Methods: This was a cross-sectional qualitative study using purposive sampling to conduct interviews with privacy/legal officers (n = 17) and information technology specialists (n = 10) from 15 integrated healthcare organizations affiliated with three research nodes of the National Institute on Drug Abuse (NIDA) National Drug Abuse Treatment Clinical Trials Network (CTN). Trained staff completed a short survey and digitally recorded semi-structured qualitative interview with each participant. Interviews were transcribed and coded within Atlas.ti. Framework analysis was used to identify and organize key themes across selected codes. Results: Participants voiced concern over balancing patient safety with 42 CFR Part 2 privacy protections. Although similar standards of protection regarding release of information outside of the health system was described, numerous workarounds were used to manage intra-institutional communication and care coordination. To align 42 CFR Part 2 restrictions with electronic health records, health systems used sensitive note designation, “break the glass” technology, limited role-based access for providers, and ad hoc solutions (e.g., provider messaging). Conclusions: In contemporary integrated care systems, substance-related EHR records (e.g., patient visit history, medication logs) are often accessible internally without specific consent for sharing despite the intent of 42 CFR Part 2. Recent amendments to 42 CFR Part 2 have not addressed information sharing needs within integrated care settings.

KW - Addiction

KW - Health information technology

KW - Integrated care

KW - Privacy

KW - Qualitative research

UR - http://www.scopus.com/inward/record.url?scp=85057183286&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85057183286&partnerID=8YFLogxK

U2 - 10.1016/j.jsat.2018.11.005

DO - 10.1016/j.jsat.2018.11.005

M3 - Article

VL - 97

SP - 41

EP - 46

JO - Journal of Substance Abuse Treatment

JF - Journal of Substance Abuse Treatment

SN - 0740-5472

ER -