[{"innerBlocks":[],"name":"core\/freeform","postId":127488,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"

6 steps to ensure CMS-compliant text messaging<\/h2>
Texting and secure messaging have become ubiquitous in the healthcare industry, transforming healthcare delivery while improving quality and access and cutting costs. But the Centers for Medicare and Medicaid Services has sent mixed messages on the propriety of texting. Amid protests, CMS in December 2017 clarified\u2014to a degree\u2014that text messages are allowed as long as they are transmitted using a secure platform. Consulting firm Hayes Management offers the following tips for complying with CMS texting policy.<\/p>

Perform a risk assessment<\/h2>
Organizations must first determine how mobile devices are being used in the organization and what risk they pose to protected health information. Review compliance policies to make sure they include provisions for secure communication. Determine where PHI is being created, received, maintained and transmitted. Remember that texting isn\u2019t just done on phones but also via desktops, workstations and in the cloud. Train staff on the new policies.<\/p>

Limit the scope of messaging, exclude orders<\/h2>
In its guidance, CMS clarified that texting of orders by providers is still prohibited regardless of the platform used. However, texting patient information among members of the care team is permitted if transmitted through a secure platform.<\/p>

Adhere to specifications for order entry<\/h2>
With texting of orders prohibited, computerized provider order entry (CPOE) is the approach preferred by CMS. Clinicians should enter orders into the medical record manually or through CPOE; information must immediately be entered into the provider\u2019s electronic health record to ensure that the order is dated, timed, authenticated and promptly placed in the record.<\/p>

Enable patient access to text messages<\/h2>
Providers also must verify that text communications are integrated with the EHR and available if a patient requests a copy of their record. Any applicable disclosure of PHI during a text communication should be listed in the patient\u2019s Accounting of Disclosures.<\/p>

Secure the platform<\/h2>
Use products that ensure that messaging occurs in a secure environment, encrypting messages and transmitting them through a secure server. Use a third-party texting solution developed for healthcare use\u2014some solutions store encrypted messages in the cloud or on an encrypted server rather than on individual devices.<\/p>

Track devices used for texting<\/h2>
Track and monitor all mobile devices in the organization that transmit PHI. Prohibit personal use of the devices or require each device to be securely encrypted prior to being used for text messaging.<\/p>

","saveContent":"

6 steps to ensure CMS-compliant text messaging<\/h2>
Texting and secure messaging have become ubiquitous in the healthcare industry, transforming healthcare delivery while improving quality and access and cutting costs. But the Centers for Medicare and Medicaid Services has sent mixed messages on the propriety of texting. Amid protests, CMS in December 2017 clarified\u2014to a degree\u2014that text messages are allowed as long as they are transmitted using a secure platform. Consulting firm Hayes Management offers the following tips for complying with CMS texting policy.<\/p>

Perform a risk assessment<\/h2>
Organizations must first determine how mobile devices are being used in the organization and what risk they pose to protected health information. Review compliance policies to make sure they include provisions for secure communication. Determine where PHI is being created, received, maintained and transmitted. Remember that texting isn\u2019t just done on phones but also via desktops, workstations and in the cloud. Train staff on the new policies.<\/p>

Limit the scope of messaging, exclude orders<\/h2>
In its guidance, CMS clarified that texting of orders by providers is still prohibited regardless of the platform used. However, texting patient information among members of the care team is permitted if transmitted through a secure platform.<\/p>

Adhere to specifications for order entry<\/h2>
With texting of orders prohibited, computerized provider order entry (CPOE) is the approach preferred by CMS. Clinicians should enter orders into the medical record manually or through CPOE; information must immediately be entered into the provider\u2019s electronic health record to ensure that the order is dated, timed, authenticated and promptly placed in the record.<\/p>

Enable patient access to text messages<\/h2>
Providers also must verify that text communications are integrated with the EHR and available if a patient requests a copy of their record. Any applicable disclosure of PHI during a text communication should be listed in the patient\u2019s Accounting of Disclosures.<\/p>

Secure the platform<\/h2>
Use products that ensure that messaging occurs in a secure environment, encrypting messages and transmitting them through a secure server. Use a third-party texting solution developed for healthcare use\u2014some solutions store encrypted messages in the cloud or on an encrypted server rather than on individual devices.<\/p>

Track devices used for texting<\/h2>
Track and monitor all mobile devices in the organization that transmit PHI. Prohibit personal use of the devices or require each device to be securely encrypted prior to being used for text messaging.<\/p>

","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Limit the scope of messaging, exclude orders<\/h2>In its guidance, CMS clarified that texting of orders by providers is still prohibited regardless of the platform used. However, texting patient information among members of the care team is permitted if transmitted through a secure platform.<\/p>

Track devices used for texting<\/h2>Track and monitor all mobile devices in the organization that transmit PHI. Prohibit personal use of the devices or require each device to be securely encrypted prior to being used for text messaging.<\/p>","saveContent":"

Limit the scope of messaging, exclude orders<\/h2>In its guidance, CMS clarified that texting of orders by providers is still prohibited regardless of the platform used. However, texting patient information among members of the care team is permitted if transmitted through a secure platform.<\/p>

Limit the scope of messaging, exclude orders<\/h2>
In its guidance, CMS clarified that texting of orders by providers is still prohibited regardless of the platform used. However, texting patient information among members of the care team is permitted if transmitted through a secure platform.<\/p>

Track devices used for texting<\/h2>
Track and monitor all mobile devices in the organization that transmit PHI. Prohibit personal use of the devices or require each device to be securely encrypted prior to being used for text messaging.<\/p>

","saveContent":"

Limit the scope of messaging, exclude orders<\/h2>
In its guidance, CMS clarified that texting of orders by providers is still prohibited regardless of the platform used. However, texting patient information among members of the care team is permitted if transmitted through a secure platform.<\/p>

6 steps to ensure CMS-compliant text messaging

More for you