Potential impact of HITECH security regulations on medical imaging.

Title XIII of Division A and Title IV of Division B of the American Recovery and Reinvestment Act (ARRA) of 2009 [1] include a provision commonly referred to as the "Health Information Technology for Economic and Clinical Health Act" or "HITECH Act" that is intended to promote the electronic exchange of health information to improve the quality of health care. Subtitle D of the HITECH Act includes key amendments to strengthen the privacy and security regulations issued under the Health Insurance Portability and Accountability Act (HIPAA). The HITECH act also states that "the National Coordinator" must consult with the National Institute of Standards and Technology (NIST) in determining what standards are to be applied and enforced for compliance with HIPAA. This has led to speculation that NIST will recommend that the government impose the Federal Information Security Management Act (FISMA) [2], which was created by NIST for application within the federal government, as requirements to the public Electronic Health Records (EHR) community in the USA. In this paper we will describe potential impacts of FISMA on medical image sharing strategies such as teleradiology and outline how a strict application of FISMA or FISMA-based regulations could have significant negative impacts on information sharing between care providers.

Conversion to use of digital chest images for surveillance of coal workers' pneumoconiosis (black lung).

To protect the health of active U.S. underground coal miners, the National Institute for Occupational Safety and Health (NIOSH) has a mandate to carry out surveillance for coal workers' pneumoconiosis, commonly known as Black Lung (PHS 2001). This is accomplished by reviewing chest x-ray films obtained from miners at approximately 5-year intervals in approved x-ray acquisition facilities around the country. Currently, digital chest images are not accepted. Because most chest x-rays are now obtained in digital format, NIOSH is redesigning the surveillance program to accept and manage digital x-rays. This paper highlights the functional and security requirements for a digital image management system for a surveillance program. It also identifies the operational differences between a digital imaging surveillance network and a clinical Picture Archiving Communication Systems (PACS) or teleradiology system.

A pragmatic discussion on establishing a multicenter digital imaging network.

Multicenter clinical trials for therapy evaluation of rare diseases are necessary. A digital imaging network improves the ability to share information between collaborating institutions for adrenoleukodystrophy. The DICOM 3.0 standard is used to move images over the Internet from contributing sites to the central clinical database and on to the reviewing physicians' workstations. Patient confidentiality and data integrity are ensured during transmission using virtual private network technology. Fifteen sites are participating in the network. Of these sites, 6 use the proposed protocol. The other 9 sites have either security policy issues or technical considerations that dictate alternative protocols. Network infrastructure, Internet access, image management practices, and security policies vary significantly between sites. Successful implementation of a multicenter digital imaging network requires flexibility in the implementation of network connectivity. Flexibility increases participation as well as complexity of the network.