Question: How have hospitals worked around possible HIPAA violation issues when using the Patient ID function on smart pumps?
Background: We recently pursued a path to require RNs to enter the MR# in the Patient ID on our smart pumps (Alaris), but were stopped due to a concern over a possible HIPAA violation should a smart pump "go missing" (leave the hospital).
Other facilities who have interoperability (bidirectional communication between eMAR and the smart pump) would theoretically have the same issue.
Anyone out there have any experience with getting this feature through the gauntlet of IT security approvals and Risk Management/Legal Dept. ?
We truly believe this data helps us look retrospectively at alerts and improve patient care/safety, our inability to use this function built in to the pumps is devastating.