> Patient R was in a hurry. I signed into my computer—or tried to. Recently, IT had us update to a new 14-digit password. Once in, I signed (different password) into the electronic medical record That's IT infrastructure incompetence, not an EMR issue. At the two healthcare systems I go to, both utilize RFID badge readers plus PIN. In the ER and urgent care, nurses need only tap their badge and enter a quick pin and…
The two cannot be unlinked so easily when I have never met someone so doesn't have the same story of hospital IT. Even the IT workers hate hospital IT. The deployment of an EMR has to take into account the regulatory and security requirements imposed on all digital systems.
> I get emails notifying me I have a "message", instead of even offering me the option of receiving an email with the actual message.
You need to bash the right heads together and get your email provider and sender in DirectTrust https://directtrust.org/what-we-do/direct-secure-messaging
Not gonna say it's not a bitch and a half to implement but you can send sensitive data directly via email. And if you're the SaaS provider you're part of DT that's a huge value add for your offerings.