| CPC G16H 10/60 (2018.01) [G06Q 10/105 (2013.01); H04L 63/10 (2013.01); H04L 63/1433 (2013.01); H04L 63/20 (2013.01)] | 20 Claims |
|
1. A computer-implemented method for detecting a non-compliant access of electronic patient data, the computer-implemented method comprising:
receiving, by one or more processors of a patient privacy monitoring server, access data from a plurality of electronic patient data access devices situated at various locations, the access data comprising a plurality of electronic patient data access events by one or more employees;
determining, by the one or more processors and based on the access data, that at least one electronic patient data access event of the plurality of electronic patient data access events constitutes a possible non-compliant access of electronic patient data, the determining including:
detecting, by a data patterning component and based on the access data, at least one data pattern of electronic patient data access events by a clinical care group; and
determining, by the data patterning component, the at least one electronic patient data access event by a subset of the clinical care group that is inconsistent to the at least one data pattern of electronic patient data access events;
in response to the determining that at least one electronic patient data access event of the plurality of access events constitutes a possible non-compliant access of electronic patient data, causing to present on a display of a user interface, by the one or more processors, an alert indicating the at least one electronic patient data access event, and a feedback indicator configured to allow a user to provide feedback indicating whether the at least one electronic patient data access event associated with the alert presented on the display of the user interface is a valid non-compliant access of electronic patient data or a false positive non-compliant access of electronic patient data;
receiving, by the one or more processors, feedback via the feedback indicator, the feedback indicating whether the at least one electronic patient data access event is a valid non-compliant access of electronic patient data or a false positive non-compliant access of electronic patient data; and
in response to receiving the feedback, modifying or maintaining, by the one or more processors, at least one of the plurality of rules for detecting possible subsequent non-compliant access of electronic patient data.
|