healthy4u: health IT failure

Patient Safety & Quality Healthcare: "Malpractice Claims Analysis Confirms Risks in EHRs"

Two "EHR beneficence is not exactly as advertised" stories in one day.  It's hard to keep up: After my earlier post today <a href="http://hcrenewal.blogspot.com/2014/02/ehrs-real-story-sobering-assessment.html">"EHRs: The Real Story" - Sobering assessment from Medical Economics</a>, now there's this. From the journal "Patient Safety & Quality Healthcare" (<a href="http://www.psqh.com/%E2%80%8E">PSQH</a>): Malpractice Claims Analysis Confirms Risks in EHRs Jan/Feb 2014 Article available at <a href="http://www.cci.drexel.edu/faculty/ssilverstein/PSQH_MalpractClaimsAnalyConfirRisksEHR.pdf">this link</a>. <blockquote class="tr_bq">[Short header on several EHR-related care foul ups] ... Distressing situations like those described above are happening around the country as healthcare organizations adopt electronic health records (EHRs) in growing numbers. Although these systems promise to reduce costs and improve quality and safety, they’ve also ushered in unintended consequences as a result of human error, design flaws, and technology glitches. Recognizing these emerging risks, CRICO—the patient safety and medical malpractice insurer for the Harvard medical community— is taking action. The Massachusetts-based company has expanded its proprietary coding system to capture EHR-related problems that have contributed to patient harm, and to guide the hospitals, physicians, and other providers it serves toward addressing vulnerabilities in their systems. </blockquote> I had previously written about another Med Mal insurer who had noted these problems at <a href="http://cci.drexel.edu/faculty/ssilverstein/cases/?loc=cases&sloc=norcal">http://cci.drexel.edu/faculty/ssilverstein/cases/?loc=cases&sloc=norcal</a>. <blockquote class="tr_bq">... CRICO recently analyzed a year’s worth of medical malpractice claims in its comparative database and found 147 cases in which EHRs were a contributing factor. Computer systems that don’t “talk” to each other, test results that aren’t routed properly, and mistakes caused by faulty data entry or copying and pasting were among the EHR-related problems found in the claims, which represented $61 million in direct payments and legal expenses.</blockquote> The article notes this: <blockquote class="tr_bq"> ... Half of the 147 cases resulted in severe injury.</blockquote> Patient deaths were a likely result, too, I note. Note that this is just one insurer's data and assuming a good number of them were local to Massachusetts, could represent a significant percentage of the annual medical malpractice lawsuits in the state (Pennsylvania, a much larger state, has about 1500 med mal lawsuits filed annually).  Note also that most cases of harm never make it to litigation due to the harsh economics of medical malpractice. Numbers such as this will be going up as implementation, driven by HITECH incentives and penalties, accelerates in coming years.  This is especially true as medical centers and physician practices with far less clinical IT expertise and savvy than Harvard's become HIT users, and as the ability to capture such events increases. The ECRI Institute "Deep Dive" study of health IT risk also speaks to a rise in numbers, with its finding of 171 health IT "events" in just 36 hospitals over 9 weeks voluntarily reported (i.e., just a fraction of the total), with 8 injuries and 3 possible deaths as a result (<a href="http://hcrenewal.blogspot.com/2013/02/peering-underneath-icebergs-water-level.html">http://hcrenewal.blogspot.com/2013/02/peering-underneath-icebergs-water-level.html</a>). <blockquote class="tr_bq">... The team asked its CRICO and Strategies members, “What vulnerabilities are you seeing? What are your risk managers worried about? What are your doctors complaining about?” It used that feedback to draft a set of EHR-specific codes and then tested them in three datasets: CRICO (Harvard users) and two of Strategies’ larger clients, !e Doctors Company and Princeton Insurance. Based on those results, CRICO revised and approved 15 new EHR codes that went “live” in January 2013. That means CRICO’s cadre of nurse coders can now identify EHR as a contributing factor to a malpractice claim, instead of using one of the less specific factors available in the past. [It's about time for a dose of transparency in the health IT sector - ed.]  And they can flag whether the problem involved user issues, system/technology issues, or both. “In some cases,” Sato points out, “the system design sets up humans to make errors.” </blockquote> This should all be no surprise to any reader of this blog.  Read the whole article. A more comprehensive list of "EHR harm modes" are at my posts "Internal FDA memorandum of Feb. 23, 2010 to Jeffrey Shuren on HIT risks. Smoking gun? I report, you decide" (<a href="http://hcrenewal.blogspot.com/2010/08/smoking-gun-internal-fda-memorandum-of.html">http://hcrenewal.blogspot.com/2010/08/smoking-gun-internal-fda-memorandum-of.html</a>) and "Cart Before the Horse, Part 3: AHRQ's Health IT Hazard Manager" (<a href="http://hcrenewal.blogspot.com/2012/06/cart-before-horse-part-3-ahrqs-health.html">http://hcrenewal.blogspot.com/2012/06/cart-before-horse-part-3-ahrqs-health.html</a>). The actual Hazards Manager report is at <a href="https://www.blogger.com/null"></a><a href="http://healthit.ahrq.gov/sites/default/files/docs/citation/HealthITHazardManagerFinalReport.pdf">http://healthit.ahrq.gov/sites/default/files/docs/citation/HealthITHazardManagerFinalReport.pdf</a>. It contains this summary of known hazards: <table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBfqMe89ZhrHPmZk_4tCcymGkvz0t0XEm8VSOMumbHa-U2WrdKJeZaZDUb8iQMEr5Y2ZwleIsSrYDanYk9nGbP9UOERnVYtIDNu0dhTodoua_1sfR6nHyVk_98F0eyq2xOjnBa_bjUejjX/s1600/hazman.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" height="247" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBfqMe89ZhrHPmZk_4tCcymGkvz0t0XEm8VSOMumbHa-U2WrdKJeZaZDUb8iQMEr5Y2ZwleIsSrYDanYk9nGbP9UOERnVYtIDNu0dhTodoua_1sfR6nHyVk_98F0eyq2xOjnBa_bjUejjX/s1600/hazman.jpg" width="400" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;">AHRQ's taxonomy of health IT hazards.  Click to enlarge.</td></tr></tbody></table> ------------------- Having written on these issues since 1998 as a "health IT iconoclast" (<a href="http://rtg.cis.upenn.edu/MDCPS/Posters/IT%20Iconoclasts.pdf">http://rtg.cis.upenn.edu/MDCPS/Posters/IT%20Iconoclasts.pdf</a>) and having been largely ignored by the cognoscenti, can I now say "I told you so?" -- SS

Patient Safety & Quality Healthcare: "Malpractice Claims Analysis Confirms Risks in EHRs"

Two " EHR beneficence is not exactly as advertised " stories in one day. It's hard to keep up: After my earlier post today &q...

Đọc thêm »

"24", This Computer Project Was Not

A fascinating case study of IT failure in another life-critical domain has come to my attention. I think if the words "FBI" were replaced with "hospitals" and "healthcare IT", this could be a study of IT failure in the latter organizations. Many of the <a href="http://www.ischool.drexel.edu/faculty/ssilverstein/cases/">familiar issues</a> are there: <blockquote> <a href="http://pminit.blogspot.com/2009/11/failure-of-virtual-case-file-and-fbi.html">The Failure of Virtual Case File and the FBI</a> Background The FBI first sought to embrace technology in the 1980s during the onset of computer availability and hoped to have a paperless office where agents could quickly pull up case files, information, and photographs at the comfort of their desks without having to sift and sort through numerous paper files. The infrastructure in that time was limited to text based search engines and there were no provisions for photo storage or the ability to scan written reports. As a result, the FBI found its agents decided not to rely on the existing technology and were reverting back to paper. After the attacks on September 11, 2001, the FBI was placed under scrutiny for being ineffective and inefficient in its operations due to the time it would take to share information with other law enforcement agencies, locate reports, and transmit them from one location to another (usually done via fax or by mailed CDs). To combat this, the FBI developed a plan known as Trilogy, which aimed for three primary goals: A new computer network, personal computers for most agents, and an online criminal database that would be titled Virtual Case File (VCF). An external contractor by the name of Science Applications International Corp. (SAIC) was contracted in June 2001 to begin the project with an estimated schedule of three years for completion and a first year budget of $14 million. The project continued until early 2005 (7 months over schedule), at which time the project scope had expanded by 80% with costs of $170 million and was riddled with issues. Ultimately, in early 2005, the project was cancelled but not after escalation and persistence on the part of the FBI.<div class="post-body entry-content" id="post-body-7895894529226453236"> The Problems and Failure of VCF The FBI wanted SAIC to create the database from scratch instead of using off-the shelf Oracle programs that could have been customized. A study by the National Research Council (NRC) after the planned 3-year period in late 2004 was conducted to gauge the success of the program, and while the first two goals had been achieved (personal computers for most agents and the creation of a new network), VCF was found to be problematic and incomplete. The project plan was incomplete and there were no monitoring controls regarding finances or the schedule. The FBI threw quality out the window by wanting to bypass testing and release the product upon its ready date. However, VCF failed the most basic functionality tests under the NRC and had not included network management, security, and storage systems, or basic sorting capabilities. The study also found that most of the FBI's skilled managers had left for the private sector and there were little to no individuals who had the IT experience or knowledge to interact effectively with contractors to achieve what was needed. The definition and scope of operations and processes were ultimately entrusted to SAIC who were outsiders. In an attempt to salvage the project, the FBI immediately hired a federally funded R&D firm (Aerospace Corp.) costing $2 million to conduct an assessment of the project who concluded that the project needed to be scrapped and shut down due to the severity of the software issues. Upon investigation by Congress, there was a lack of financial controls and safeguards on the part of the FBI, enabling SAIC to continue to develop a program which was lacklustre and failed to meet objectives. 200 programmers from SAIC were used on the project when only a dozen were required and SAIC was not being properly monitored by the FBI. They felt as long as money was being funnelled to them by the government on the project, they did not need to be responsible for the effectiveness or viability of the program [was there a "hold harmless" clause as in health IT? - ed.] they were building and fired staff who expressed concerns over the direction of the program. [They must have been Luddites and IT skeptics who just refused to change the way they do things - ed.] Further, the FBI took a trial by error approach to the project without truly understanding their end goal and without setting benchmarks for evaluating the progress of the project and took a nearly hands off approach by entrusting SAIC entirely. SAIC claimed the FBI were indecisive in what they wanted and there had been 19 government personnel changes over the project tenure which brought on scope creep and the focus of the project in a state of flux, in addition to a clear lack of leadership. A further $17 million was then spent by the FBI to perform more rigorous testing to try to salvage the project once more, which was another missed opportunity to cancel the project. It was only in early 2005 that the decision was made by Congress to terminate the project. Source: Eggen, Dan; Witte, Griff. 'The FBI Upgrade that wasn't'. August 8, 2006. Website: http://www.washingtonpost.com/wp-dyn/content/article/2006/08/17/AR2006081701485.html (accessed on November 7, 2009).</div></blockquote> "<a href="http://en.wikipedia.org/wiki/24_%28TV_series%29">24</a>" this was not. <div style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1y2WJpcRz-UF-syhZUPwyArrMHDGGoWmK7Ao4D-_rHYC0vWVfczNjoNBdK56HfyJ4PH6f6OnJvKYrmI8-fiyKlomJ8Q19JQeJDZDLw6-qPqDHuHp7MxHpYsbs4y8InkCqbRrk-DGUJ9nA/s1600/Chloe.jpg"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5662968216287927170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1y2WJpcRz-UF-syhZUPwyArrMHDGGoWmK7Ao4D-_rHYC0vWVfczNjoNBdK56HfyJ4PH6f6OnJvKYrmI8-fiyKlomJ8Q19JQeJDZDLw6-qPqDHuHp7MxHpYsbs4y8InkCqbRrk-DGUJ9nA/s320/Chloe.jpg" style="display: block; margin: 0px auto 10px; text-align: center; cursor: pointer; width: 246px; height: 178px;" /></a>Chloe O'Brian, where were you? </div> In the FBI's case, the failure exposes us to potential crime. In a hospital's case, the stakes are even more personal. Even worse, at least here Congress intervened; health IT is a virtually unregulated industry and nobody is minding the store. The UK's National Programme for IT (NPfIT) in the NHS <a href="http://hcrenewal.blogspot.com/2011/09/npfit-programme-going-pffft.html">paid the price of failure</a> through problems such as above. Will the "NPfIT in the HHS" meet a similar fate? -- SS Oct. 13, 2011 Addendum: where have we seen SAIC before? How about <a href="http://hcrenewal.blogspot.com/2011/10/still-more-ehr-chaos-pandemonium-bedlam.html">here</a>? <blockquote> Case 3: Bedlam Meanwhile, Science Applications International Corporation disclosed that computer backup tapes containing medical data for 4.9 million military patients [that number also amounts to almost 2% of the total U.S. population - ed.] had been stolen from an employee’s car in San Antonio. The data included Social Security numbers, clinical notes, laboratory test results and prescriptions. </blockquote> -- SS

"24", This Computer Project Was Not

A fascinating case study of IT failure in another life-critical domain has come to my attention. I think if the words "FBI" were r...

Đọc thêm »

Who was at fault here? UK Woman left to die after computer decision support blunder

Who was at fault here? Those who modified the fall height parameters, those who designed the decision support system such that it could override life threatening problems based on a single parameter, endusers, their managers, or all? Or was the problem the syndrome of inappropriate confidence in computers (SICC syndrome)? I opine all of the above, in this cautionary tale: <a href="http://www.telegraph.co.uk/health/healthnews/7489669/Woman-left-to-die-after-999-ambulance-blunder.html"></a><blockquote><a href="http://www.telegraph.co.uk/health/healthnews/7489669/Woman-left-to-die-after-999-ambulance-blunder.html">Woman left to die after 999 ambulance blunder</a> By Laura Donnelly, Health Correspondent Telegraph.co.uk Published: 9:00AM GMT 21 Mar 2010 An investigation into a woman’s death has exposed a catastrophic decision by ambulance chiefs which may have cost hundreds of lives. The blunder arose when call centre staff were not warned of flaws with a computer system that prioritises emergencies before dispatching ambulances. Bonnie Mason, 58, fell down the stairs and died from a head injury after 999 controllers in Suffolk failed to identify her situation as “life-threatening”. An investigation by The Sunday Telegraph has uncovered a critical danger placed in the software used by most ambulance services. For years, 999 calls in life-threatening situations like Mrs Masons’s were accidentally “downgraded”, with call handlers told not to send the most urgent response. While some services spotted the risk, ordering operatives to override the computer’s orders manually, five of England’s 12 ambulance trusts did not allow call handlers to upgrade such calls [A belief that "the computer is omniscient" seems to be the only basis for such an exclusion of human judgment - ed.] They include the East of England ambulance service, which covers Suffolk and which only identified the risk after Mrs Mason’s death. The danger in the system was created by the country’s most senior ambulance officials as they altered the program used by most control centres in an attempt to manage demand for 999 services. Most ambulance services use an international computerised system designed in America. In the US version, a fall of more than 6ft receives the maximum priority response. However, the government committee which governs its use in this country decided that such cases should be deemed less urgent [what were they thinking? - ed], and excluded from an eight minute category A target response time. In doing so, they created a potentially lethal flaw in the system. It meant that if a call involved a fall of more than 6ft it was designated a lower priority – a category B response – despite the presence of life-threatening conditions which were supposed to receive the most urgent category A response. [NOTE: If the other life threatening conditions were ignored by the computer system after its "first-pass" look at the height of the fall, then who actually created the most severe flaw is unclear to me, those who altered the parameter or those who designed the overall decision support logic - ed.] As a result, Mrs Mason lay unconscious for more than 38 minutes. The first ambulance sent to her home in the village of Eye, Suffolk, was diverted to attend to a drunk woman who had fallen on a pavement 22 miles away in Thetford, Norfolk. Because the inebriated woman had fallen at ground level, her situation was prioritised over that of Mrs Mason [perhaps because their was no entry of a "height of fall" - ed.], who was close to death by the time paramedics arrived. The East of England ambulance service, which also covers Bedfordshire, Cambridgeshire, Essex, Hertfordshire and Norfolk, said its operatives were instructed never to “override” the advice of the automated system.</blockquote> Ambulance dispatchers instructed to "never override the advice of the automated system?" Simply stunning if true. Read the whole story at the link above. On another note: government committees have rarely worked well in domains where critical thinking is essential. (I can't wait for the comparative effectiveness committees using flawed data from flawed EMR's to start their work. I'd written about that issue <a href="http://www.thefreelibrary.com/The+syndrome+of+inappropriate+overconfidence+in+computing:+an...-a0201551413">here</a>.) Finally, "Our policy is to always trust the computer" is not a way to run life-critical healthcare services. Ever. -- SS

Who was at fault here? UK Woman left to die after computer decision support blunder

Who was at fault here? Those who modified the fall height parameters, those who designed the decision support system such that it could ove...

Đọc thêm »