Telemedicine Privacy and Security

The COVID-19 pandemic prompted health care providers and systems to rapidly adopt and expand telemedicine services. Telemedicine provides a safer alternative to in-person visits during the pandemic, but simultaneously introduces multiple decision points for implementation.

While many providers already have telemedicine in place, emerging evidence, policies, and guidance on implementation and maintenance indicate that answers to the question, “how do we implement telehealth equitably, safely, and sustainably?” are very much still evolving. Here, we summarize one of the many of the components of telemedicine implementation for health care system leaders. This is particularly important in safety-net settings that already face challenges related to limited resources and fragmented health information technology.

Regulations. The U.S. Department of Health and Human Services eased enforcement of telehealth regulations in March 2020 as a result of the COVID-19 pandemic. This discretion allows providers to use any nonpublic audio or video communication tool to connect with their patients remotely. More details about these changes in telehealth regulations can be found in the resources provided below.

Health Information Evaluation and Quality Center

Cybersecurity. In implementing telemedicine, cybersecurity is a critical consideration for health systems. Main recommendations for improving cybersecurity include using encrypted devices and technology, utilizing a Virtual Private Network (VPN), and employing strong authentication parameters.

PCMag: How to Prevent Zoom-Bombing — This article includes concrete tips on how to keep Zoom video calls secure and prevent them from being hijacked by hackers. It goes through settings like waiting rooms, making sure only the host can share their screen, and removing someone from a call.

PCMag: How to Prevent Zoom-Bombing