Differences

This shows you the differences between two versions of the page.

--- dido:public:s_cli:05_contents:02_prt:medical:start [2021/05/08 21:04]
nick [Issues]
+++ dido:public:s_cli:05_contents:02_prt:medical:start [2021/08/06 14:20] (current)
nick
@@ Line 1: / Line 1: @@
-CO====== Medical Scenarios ======
+====== User Scenario: Medical ======
-[[dido:public:s_cli:05_contents:02_prt | Return to Part II: User Scenarios]]
+[[dido:public:s_cli:05_contents:02_prt:start| Return to Part II: User Scenarios]]
 ===== Overview =====
-[[dido:public:s_cli:05_contents:02_prt:medical | Return to Top]]
+[[dido:public:s_cli:05_contents:02_prt:medical:start | Return to Top]]
 There are conflicting interests at work in the Medical area. The need for information about a patient in order to care for the patient versus [[dido:public:ra:xapend:xapend.a_glossary:d:data_protection]] and the privacy concerns for patient's privacy. The following are some of the restrictions apply in California:
@@ Line 12: / Line 12: @@
   * [[dido:public:ra:xapend:xapend.a_glossary:c:ccpa]]
-===== Problem Statement =====
+In addition, most organizations have a [[dido:public:ra:xapend:xapend.a_glossary:d:dataretentionpolicy]].
-[[dido:public:s_cli:05_contents:02_prt:medical | Return to Top]]
-Lilly is a 90 year old woman living in a Memory Care Facility (MCF) in San Diego, California, USA. She routinely sees her medical doctors for routine healthcare and specialists that see her for an existing heart problem, dementia, dentalcare, etc.
+===== The Medical Supply Chain =====
-Lilly is a resident of the MCF because she has debilitating dementia and is in **moderate**((
+<nspages -tree -r -exclude -subns -pagesInNs -h1 -textNs="">
-**Moderately Severe decline** They may not remember their phone number or their grandchildren's names. They may be confused about the time of day or day of the week. At this point, they’ll need assistance with some basic day-to-day functions, such as picking out clothes to wear.
+[[dido:public:s_cli:05_contents:02_prt:medical:start | Return to Top]]
-[[https://www.webmd.com/alzheimers/types-dementia#2-6]]
-))  to **serious decline** ((
-**Severe Decline** They'll begin to forget the name of their spouse. They’ll need help going to the restroom and eating. You may also see changes in their personality and emotions.
-[[https://www.webmd.com/alzheimers/types-dementia#2-6]]
-)) and can no longer be taken care of by family and friends. She is not capable of communicating serious health issues to those around her nor remember what the medical team has told her even a few minutes before. She can not remember her insurance numbers, where she lives, her family or her current set of diagnosis.
-Lilly does have a **Durable Power of Attorney** ((
-**Durable Powers of Attorney** helps you plan for medical emergencies and declines in mental functioning and can ensure that your finances are taken care of. Having these documents in place helps eliminate confusion and uncertainty when family members have to make tough medical decisions.
-[[https://www.legalzoom.com/articles/what-is-a-durable-power-of-attorney]]
-)) who does not live in the immediate area and can not be available to provide the answers required by the medical team to provide the best healthcare for Lilly.
-Lilly falls down in the MCF and hits her head. She appears confused but that is "normal" for her in her current state, however, it is also a sign of a concussion ((
-A **Concussion** is a traumatic brain injury that affects your brain function. Effects are usually temporary but can include headaches and problems with concentration, memory, balance and coordination.
-[[https://www.mayoclinic.org/diseases-conditions/concussion/symptoms-causes/syc-20355594]]
-)). MCF policy is that when a resident hits their head, they need to be seen by a doctor. Figure {{ref>LillyStory}} outlines at a simplified, high level the course of events for Lilly and the role of medical records during the process which includes a ride in an ambulance to the emergency room, the required medical assessment of her condition. a short stay in a hospital and rehabilitation hospital. When she is able, Lilly returns to the MCF.
-===== Existing Simplified System without DIDO =====
-[[dido:public:s_cli:05_contents:02_prt:medical | Return to Top]]
-The following is an extremely simplified system that is meant to provide a overarching framework for using DIDOs to solve medical problems. It is not meant to be completely accurate but is provided for illustrative purposes. Others are encouraged to use this as a starting point for more complicated reality based scenarios.
-==== Activities ====
-[[dido:public:s_cli:05_contents:02_prt:medical | Return to Top]]
-The following is only a simplified list of the steps involved in providing Lilly's healthcare needs that stem from a fall.
-  - Lilly is a resident of the Memory Care Facility (MCF)
-  - She routinely see's her doctors and the write simple diagnostic reports and prescription for her. Each doctor keeps their own records and provides a diagnostic summary and prescriptions which are recorded at MCF in Lilly's Medical Records
-  - Lilly has a fall and hits her head and it is bleeding.
-  - An MCF staff member helps her to the bed and looks at the wound. Determines the would is not serious but follows MCF protocols and calls for an ambulance to take Lilly to the Emergency Room. She files a incident report and sees Lilly safely to the Ambulance where she provides some information about Lilly to the paramedics and EMT in the ambulance
-  - Lilly's vital signs are checked in the ambulance and initial first aid is given with the IV and a sedative.
-  - The ambulance arrives t the Emergency Room (ER) where Lilly's is transferred along with original medical records from MCF and vitals obtained while Lilly was in Ambulance
-  - Medical tests and procedures are conducted to determine the severity of Lilly's injuries. She is asked some basic memory questions where Lilly appears confused. It is determined that Lilly will be placed in the Hospital for observation and to assess the severity of her fractured pelvis.
-  - Lilly is discharged from the hospital and transferred to a rehabilitation hospital where she receives physical and occupational therapy
-  - Lilly is finally released from the Rehab hospital and returned to the MCF.
-<figure LillyStory>
-{{  :dido:public:s_cli:05_contents:02_prt:screen_shot_2021-05-04_at_12.27.56_pm.png?800  |}}
-<caption>A simple, idealized traditional record flow for a Memory Care Resident patient incident.</caption>
-</figure>
-==== Issues ====
-[[dido:public:s_cli:05_contents:02_prt:medical | Return to Top]]
-  - Lilly's medical records are dispersed across multiple organizations and doctors offices.
-  - Lilly is unable to provide a coherent personal history, allergies, medications, the list of her doctors, personal record of what happened to her, when it occurred, and what was done for her treatment.
-  - This scenario does not cover all the disclosure agreements that Lilly or  others have signed on her behalf.
-  - This scenario is complicated by insurance, in Lilly's case social security and Medicare Part B as well as any other insurance that may cover her
-  - This scenario does not cover the dissemination of medical records back to the Lilly's other doctors
-  - This scenario does not include all the insurance and disclosure statements that were either signed by Lilly or by others on her behalf.
-===== Theoretical Simplified System using DIDO =====
-[[dido:public:s_cli:05_contents:02_prt:medical | Return to Top]]
-==== Activities =====
-[[dido:public:s_cli:05_contents:02_prt:medical | Return to Top]]
-The following activities are bases on the assumption that a medical records system is implemented using a DIDO. The other assumption is that the medical records belong to the patient and not the MCF, doctors, or other institutions involved in the care of the patient.
-It is only a simplified list of the steps involved in providing Lilly's healthcare needs that stem from a fall.
-  - Lilly is a resident of the Memory Care Facility (MCF)
-  - She routinely see's her doctors who write simple diagnostic reports and prescription for her. Each doctor keeps their own records and provides a diagnostic summary and prescriptions to a DIDO with Lilly's Medical Records.
-  - Lilly has a fall and hits her head and it is bleeding.
-  - An MCF staff member helps her to the bed and looks at the wound. Determines the would is not serious but follows MCF protocols and calls for an ambulance to take Lilly to the Emergency Room. She files a incident report and sees Lilly safely to the Ambulance where she provides some information about Lilly to the paramedics and EMT in the ambulance as both a report a link to a DIDO archive containing Lilly's medical records
-  - Lilly's vital signs are checked in the ambulance and initial first aid is given with the IV and a sedative. The vitals are recorded into a DIDO which does not have to be connected to the internet to record the dataa
-  - The ambulance arrives at the Emergency Room (ER) where Lilly's is transferred along with original medical records from MCF and vitals obtained while Lilly was in Ambulance. The information required to access Lilly's sidechain (stream) of records.
-  - Medical tests and procedures are conducted to determine the severity of Lilly's injuries. She is asked some basic memory questions where Lilly appears confused. It is determined that Lilly will be placed in the Hospital for observation and to assess the severity of her fractured pelvis. The records are added to the Lilly's DIDO sidechain (stream).
-  - Lilly is discharged from the hospital and transferred to a rehabilitation hospital where she receives physical and occupational therapy. The new data is added to Lilly's sidechain (stream)
-  - Lilly is finally released from the Rehab hospital and returned to the MCF where here sidechain (stream) is merged back into the main medical DIDO that contains Lilly's records
-<figure>
-{{  :dido:public:s_cli:05_contents:02_prt:screen_shot_2021-05-05_at_1.24.38_pm.png?700  |}}
-<caption>A simple, idealized theoretical record flow for a Memory Care Resident patient incident.</caption>
-</figure>
-==== Issues ====
-[[dido:public:s_cli:05_contents:02_prt:medical | Return to Top]]
-  - The concept of medical data ownership. Does the data belong to the patient, the medical provider or both? This is a controversial subject in the USA and every state seems to have different rules((
-George Washington University,
-Health Information and the Law,
-August 2015,
-Accessed: 6 May 2021,
-[[http://www.healthinfolaw.org/comparative-analysis/who-owns-medical-records-50-state-comparison]]
-))<WRAP>
-<figure>
-{{  :dido:public:s_cli:05_contents:02_prt:screen_shot_2021-05-06_at_9.57.50_am.png?500  |}}
-<caption>Map of Patients rights in the USA</caption>
-</figure>
-Europe on the other hand has a single unified approach to patient data under the [[dido:public:ra:xapend:xapend.a_glossary:g:dgpr]] ((
-European Patients Forum,
-__The new EU Regulation on the protection of personal data: what does it mean for patients?__
-Accessed: 6 May 2021,
-[[https://www.eu-patient.eu/globalassets/policy/data-protection/data-protection-guide-for-patients-organisations.pdf]]
-))
-<table EuRights>
-<caption>Summary of patient rights within the EU.</caption>
-^  What RIght?  ^  What does it mean for Patients?  ^
-^ To access one’s own personal data | <html><ul>
-<li>The right to access your own personal data is part of your fundamental right to data protection</li>
-<li>The right to access your medical record is explicitly mentioned in the new Regulation</li>
-<li>If you request a copy of the personal data being processed by a data controller about you, they have to provide it to you</li>
-<li>The Regulation encourages the establishment of remote ways to provide you with access, such as electronic health records</li>
-<li>The controller has the right to check your identity before providing you with the data </li></ul></html>|
-^ Right to data portability/to transfer your data from one data controller to another | <html><ul>
-<li>When you have consented to provide your health data, and that it is in a machine readable format (e.g. in electronic form), you can request to receive a copy in order to transfer it to another entity or person, and you can also demand that it is transferred directly for you</li>
-<li>It could be positive and encourage controllers
-(hospitals, doctors) to ensure that data is in a
-format that can easily be transferredIt could be positive and encourage controllers
-(hospitals, doctors) to ensure that data is in a
-format that can easily be transferred
-</li></ul></html> |
-^ Right to object to the processing of your data | <html>Under the new regulation you can object to the
-processing of your data by a controller under these
-circumstances:<ul>
-<li>If the processing happens for a task performed in the public interest </li>
-<li>If the processing happens for the legitimate purpose of the controller </li>
-<li>If it happens in the context of direct marketing </li></ul></html> |
-^ Right to rectification or erasure of data | <html>You can ask for the rectification of inaccurate personal
-data (e.g. in your medical record) and incomplete data
-completed</html> |
-^ Right to erasure (so called “right to be forgotten”)| <html>
-You can have your data erased. This is the so-called
-“right to be forgotten”. This is especially the case if:<ul>
-<li>you have withdrawn consent and the data
-controller has no other grounds for processing
-your data</li>
-<li>if there is no longer a purpose for processing it,
-in accordance with the principle of limited
-storage and data minimisation.</li>
-<li>if the processing is unlawful in the first place</li></ul>
-When the controller has made the information public,
-e.g. online, he has to take reasonable step to ensure
-other controllers also remove links etc. in order to
-implement your rights.</html> |
-</table>
-</WRAP>
-  - While the patient remains constant, the providers might change. For example, a patient moves and can no longer use the same doctor or the patient changes insurance companies requiring a change in provider of the medical provider. This implies an [[dido:public:ra:xapend:xapend.a_glossary:a:acl]] arrangement where the patient can authorize others to add new content, make updates, mark for deletion.<html>
-<br/><p><b>Note:</b> The contents of a DIDO are immutable, therefore, traditional ACL permissions such as Write and Delete have no meaning. However, it is possible for older content to be replaced by newer content requiring the new content to point to the previous content. It is also possible to mark content as deleted.</p></html><WRAP>
-<table  OpsTable>
-<caption>Potential DIDO Commands for Medical Records.</caption>
-^  Operation  ^  Description  ^
-^ CREATE NEW  | <WRAP>This creates a new person in the Medical DIDO. For example, a new patient is added to the Medical DIDO. The CREATE NEW command adds the new patient and returns a patient specific couple of AsymmetricKeys (i.e., publicKey and privateKey). The public key is used to uniquely identify the patient within the medical DIDO and can be used to encrypt any information for that particular patient. The privateKey is used to decrypt the information in the Medical DIDO for that specific patient. The privateKey NEEDS TO BE KEPT PRIVATE! The ECHO command is used to place information onto the console log.
-Some of the fields used to describe a patient might be ''name'', ''birthday'', ''gender'', ''marital status'', ''address''. There are other fields that are probably not required such as ''insurance id'', ''group id'', ''medicare number'', etc. All of these fields are probably classified as [[dido:public:ra:xapend:xapend.a_glossary:p:pii]].
-The following is a proof of concept for creating a new patient in the Medical DIDO.
-</WRAP><code>
-patientKeys AsymmetricKeys
-  = CREATE NEW
-    { "patient" :
-       { "name": "Lilly McSmythe",
-         "birthdate": "11/25/1931",
-         "gender" : "F",
-         "maritalSatus" : "married"
-         "address": "123 Avocado Way, San Diego, CA, USA, 92101"
-       }
-     };
-ECHO patientKeys.publicKey;
-"0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E"
-</code>|
-^ MANAGE ACCESS  | Updates or modify the Access Control List data. <WRAP>
-The Patient Data Object (sometimes referred to as a Smart Contract) maintains its own internal [[dido:public:ra:xapend:xapend.a_glossary:a:acl]] that contains users, medical roles and access roles (i.e., READ, WRITE, etc). In this example, we add two doctrs to the list: ''primaryPhysician'', and 'cardioVascularMd''.
-We also grant them access roles that are traditional such as ''READ'', ''UPDATE'' but also roles like ''UPLOAD'' and ''SEARCH''. At this point, these roles are just conceptual in nature and need to be refined in the future. All the fields within the Patient Data Object (Smart Contract) are considered private and can only be accessed using ''getters'' and ''setters''. The ''by'' field will be filled in by the infrastructure.
-^  Privilege Type  ^  Description  ^
-| READ   | Granting READ privilege allows the access to all the Read attributes or operations associated with the patient |
-| UPDATE | Granting UPDATE privilege allows the access to all the writable attributes or operations associated with the patient |
-| UPLOAD | Granting UPLOAD privilege allows for new content to be added to the patient record (i.e., images, lab results, vitals, etc. |
-| SEARCH | Granting SEARCH privilege allows for the Read attributes or operations to be searched for particular strings. It only returns a TRUE or FALS. All [[dido:public:ra:xapend:xapend.a_glossary:p:pii]] cane be hidden from the search. |
-| DELETE | Granting DELETE privilege allows for the content of the patient record to be marked as deleted OR optionally for the content to be burned by destroying the private key |
-</WRAP>For example:<code>
-primaryPhysician MedicalDoctor
-  { "id" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D55555",
-    "name" : "Dr. Jane Lee Gupta",
-    "phone" : "1-619-555-1212",
-    "email" : "[email protected]"
-  }
-MANAGE ADD
-  { patient :
-    { "id" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-      "by" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D55555"
-      "primaryPhysician" : primaryPhysician.id
-    }
-  }
-MANAGE REPLACE
-  { patient :
-    { "id" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-      "by" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-      "cardioVascularMd" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2DDDDD"
-    }
-  }
-MANAGE GRANT
-  { patient :
-    { "id" : ""0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-      "by" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-      "cardioVascularMd" : "READ, UPDATE, UPLOAD"
-    }
-  }
-MANAGE GRANT
-  { patient :
-    { "id" : ""0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-      "by" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-      "primaryPhysician" : "SEARCH"
-    }
-  }
-</code>|
-^ MARK AS DELETED  | Mark a person as deleted in the Medical DIDO. For Example: <code>
-DELETE
-  { "patient" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-    "by" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D55555"
-  }
-</code>|
-^ UPDATE CONTENT  | Update a person's information in the Medical DIDO. For example:<code>
-UPDATE
-  { "patient" :
-      { "id" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",,
-        "by" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D5555"
-        "maritalStatus" : "Widowed",
-        "maritalStatusChangeDate" : "11/25/2021"
-      }
-   }
-UPDATE
-  { "patient" :
-      { "id" : userKeys.publicKey,
-        "by" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D5555"
-        "DateOfDeath" : "11/25/2031"
-      }
-   }
-</code>|
-^ UPLOAD ANCILLARY DATA  | This allows for Ancillary data to be uploaded to the Patients Medical DIDO. Ancillary data is data that is associated with the patient such as vitals, images, lab result, etc.<code>
-UPLOAD
-  { "patient" :
-    { "id" : patientKeys.publicKey,
-      "by" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D5555"
-      "ancillaryData" :
-        { "image":
-          { "type": "xray",
-            "view": "posteroanterior",
-            "date": "5/7/2021"
-          },
-          "image":
-          { "type": "xray",
-            "view": "Decubitus",
-            "date": "5/7/2021"
-          }
-        }
-      }
-  }
-</code>|
-^ ERASE | Removes the [[dido:public:ra:xapend:xapend.a_glossary:p:pii]] information from the patient in the Medical DIDO allowing the patient to be forgotten in compliance with [[dido:public:ra:xapend:xapend.a_glossary:g:dgpr]] <code>
-ERASE
-  { "patient" : patientKeys.publicKey
-  }
-</code>|
-</table>
-</WRAP>
-  - <WRAP>The [[dido:public:ra:xapend:xapend.a_glossary:g:dgpr]], [[dido:public:ra:xapend:xapend.a_glossary:d:dpa]] and the [[dido:public:ra:xapend:xapend.a_glossary:c:ccpa]] prohibit information from being //"kept for no longer than is necessary"//. How long should a medical record be kept by a medical provider? An insurance provider? Within the USA, its state-by-state, see: [[https://www.healthit.gov/sites/default/files/appa7-1.pdf]]
-<table>
-<caption>Example of minimum medical records retention for California and Connecticut.</caption>
-^  State  ^  Medical Doctors  ^ Hospitals  ^
-^ California | <WRAP>California: Indefinitely, if possible. See CMA ON-CALL: The California Medical Association’s Information-On-Demand Service, available at [[http://www.thedocuteam.com/docs/retention_medicalrecords.pdf | HealthIT.gov(accessed August 14, 2008)]]. </WRAP> | <WRAP><html>
-<b>Adult patients</b> 7 years following discharge of the patient.<br/>
-<b>Minor patients</b> 7 years following discharge or 1 year after the patient reaches the age of 18 (i.e., until patient turns 19) whichever is longer. Cal. Code Regs. tit. 22, § 70751(c) (2008).
-</html></WRAP>|
-^ Connecticut | <WRAP>
-years from the last date of treatment, or, upon the death of the patient, for 3 years. Conn. Agencies Regs. § 19a-14-42 (2008).
-</WRAP>| <WRAP><html>
-years after the patient has been
-discharged.<br/>
-Conn. Agencies Regs. §§ 19-13-D3(d)(6)
-(2008).
-</html></WRAP>|
-</table>
-^ EXPIRE  | The Medical Record expires after a certain amount of time, after a certain date, or when an event occursMedical DIDO. For Example:<code>
-EXPIRE
-  { "patient" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-    "onDate" : "20210508"
-  }
-EXPIRE
-  { "patient" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-    "after" : "128 hours"
-  }
-EXPIRE
-  { "patient" : "0xDC25EF3F5B8A186998338A2ADA83795FBA2D695E",
-    "when" : "DEATH_OF_PATIENT"
-  }
-</code>|
-</WRAP>
-  - A DIDO that allows hat uses an ACL to control what kinds of operations that someone else can perform ( see MANAGE ACCESS). Although the Medical DIDO only allows for a single owner, it allows for many participants.  For example, each doctor adds information to the the patients Medical DIDO (see: UPDATE CONTENT).
-  - The idea of a sidechain or specialized stream that will be joined back to the main "chain"

DIDO Wiki

User Tools

Site Tools

Differences

Page Tools