Health Information Exchange (HIE)

As part of our ongoing commitment to improving the quality of patient care, Crystal Run Healthcare is participating in a secure Health Information Exchange (HIE) managed by HealtheConnections, which is governed by regulations and policies established by the New York State Department of Health for the Statewide Health Information Network of New York (SHIN-NY). Patients have the right to either allow or deny access to their medical records in the HIE via a consent process by participating organizations of HealtheConnections.
 

What is a Health Information Exchange (HIE)?

Electronic health information exchange (HIE) allows doctors, nurses, pharmacists, other healthcare providers, and patients to appropriately access and securely share a patient’s vital medical information electronically—improving the speed, quality, safety, and cost of patient care.
 

How is CRHC part of the HIE?

Crystal Run Healthcare is a member of HealtheConnections, which means we can access your health information electronically with your consent. Hospitals, laboratories, radiology centers, doctors’ offices, pharmacies, and other healthcare organizations all participate in HealtheConnections. If you give consent, your medical records from different places where you receive health care can be accessed using a statewide computer network or Health Information Exchange (HIE).

How can you participate?

Patients have the right to either allow or deny access to their medical records in the HIE via a consent process by Crystal Run Healthcare as a participating organization of HealtheConnections. We will provide you with a consent form that would allow the providers associated with your care at Crystal Run Healthcare to access your medical records electronically through HealtheConnections. If you choose to provide consent, it will help us to get information from other labs, hospitals, or doctors you see as part of your treatment. Only our practice will be able to see your information with this consent.

1. Consent forms to participate in the HIE will be sent out to patients electronically along with our pre-visit communications prior to a scheduled appointment. If you have any questions about the consent form, please speak to a Patient Services Representative.

Patient Education from HealtheConnections:  

We know you have questions and it’s important to understand what you are consenting to, how your information will be used, and how your information is being protected. We encourage you to review the following patient education information to help you make an informed decision. You can also visit HealtheConnections to review information For Patients and Commonly Asked Questions.

Why do I need to consent to HealtheConnections?

HealtheConnections manages a health information exchange (HIE), governed by regulations and policies established by the New York State Department of Health for the Statewide Health Information Network of New York (SHIN-NY). The statute requires that a patient has the right to allow or deny access to their medical records in the HIE via a consent process for each participating organization of HealtheConnections. By allowing access, the patient authorizes the participating organization to view the patient’s personal health information (PHI) contributed to HealtheConnections.

What happens when I sign the consent form?

A patient has the option to select a consent for each of their provider organizations that participate with HealtheConnections.

• I give consent is an affirmative consent that allows that provider organization’s authorized users to access and view your personal health information (PHI) that has been contributed to HealtheConnections.
• I deny consent does not allow that provider organization to access and view your personal health information (PHI) that has been contributed to HealtheConnections.
• I deny consent except in a medical emergency allows a hospital or other critical health care providers to only access and view your personal health information (PHI) that has been contributed to HealtheConnections when you are facing a life-threatening event.

What does it mean to me?

By consenting to allow your healthcare professionals to access your medical information, you are giving them the ability to view your medical information quickly and efficiently which could improve the quality of your care. Access to your information can save you time and money by eliminating duplicate testing, not having to remember dates and details of previous medical tests, and helping to verify medications that you are currently taking or had previously taken.

How is my personal health information protected?

Personal Health Information, known as PHI, requires enhanced security to ensure the confidentiality and integrity of patient medical records. HealtheConnections (HeC) is governed by regulations and policies set forth by the New York State Department of Health (NYSDOH) for the Statewide Health Information Network of New York (SHIN-NY). As a Qualified Entity (QE) of the SHIN-NY, HeC must comply with all security certification requirements. These certifications include requirements such as password protection, encryption of data, virtual private networks, data transmission standards, auditing, physical premises security, training for staff and authorized users at participating organizations, and more. The policies, procedures, and implementations of all security controls by HealtheConnections have created an environment based on best-practice security measures to protect patient data.

Can I change my consent status?

Yes, you can change your consent to HealtheConnections at any time for any of your participating providers. Simply request and fill out a new consent form with your updated consent option at your participating provider.

What information is available through HealtheConnections?

Per New York State regulation, healthcare providers are allowed to share their patients’ medical records with HealtheConnections health information exchange (HIE). A patient does not need to consent or give permission to their healthcare providers to do this; however, a patient does control which of their healthcare providers they want to allow access to view their medical records.

Here are the types of data that may be available through HealtheConnections:

• Demographics / Profile – name, address, phone numbers, email, marital status, next of kin, insurance, advance directives, ethnicity, race, language preferences
• Lab and Radiology reports and Images
• Encounters – hospital, doctor's office, emergency room, and other healthcare facility visits
• Procedures / Surgeries
• Medications / Immunizations
• Conditions / Allergies
• Family and Social History
• Vital signs – height, weight, blood pressure readings