Compliance, Durability Concerns Holding Back the iPad in Healthcare

February 14, 2012
| Reprints
A recent research report indicates government regulations and durability are the chief reasons why HIT leaders are hesitating on the iPad and other tablets
Compliance, Durability Concerns Holding Back the iPad in Healthcare

The study and whitepaper mention the iPad a lot, why does it seem the iPad is singled out?

It’s synonymous; it’s a function of their being first to market, and by a long-shot, being the primary platform in which the IT community is being exposed to the consumerzation of IT. It’s because they were so good at what they did.

In what other ways are tablets not equipped yet for a medical environment?

The whole issue revolves around the term, “consumerization.” It’s a consumer technology that’s trying to be applied in not only an industrial environment, but one that is very regulated…And it goes beyond the security issues we’ve talked about. There are things like, can you wipe it clean? As you go from patient room to another, can the physical structure of that device, which is not an industrial device, be wiped and kept clean so you’re passing along something bad. In a hospital environment, you’re not working at a table top; you’re in a very fluid environment, where a lot of the solid surfaces are on wheels. So it’s easy for things to fall off and break. From an IT perspective, with these devices $500-600 a piece, are they worth replacing five-to-six times because you’ve dropped it or damaged it?

[In the study] No one was saying that the iPad or any other mobile device is bad, the question is: Are they appropriate, and have they been designed to address the risks and environment in which they are being brought?

PreviousPage
of 2

Comments

iPad meeting HIPAA compliance

I have done a lot of research and implementation of iPads/iPhones in the clinical space. Everything is about risk especially when it comes to portable devices. Whether it is a tablet or laptop, they are equally unsecure out of the box. However, an iPad can meet HIPAA compliancy much faster then a laptop. All data on the iOS device is 256 bit encryption, not on a laptop. Can't auto wipe a laptop after 10 failed attempts at a password, at least out of the box. I am not sure where the line is between a consumer product and commercial product. Is a Panasonic tablet more secure than an iPad?

I think the main issue is how do these device meet the corporate governances? I think the iPad does a better job at compliance then the PC sitting on your desktop. So what is the issue administrators have? I think the main issue is Apple itself. Apple has not made it easy for corporate purchasing. Also, how much Apple hardware is in IT, no very much and that unfamiliarity causes concerns. It is not about money, it is about control. IT departments would rather purchase a Toshiba PC based tablet, that is bulky and costs 4 times as much as an iPad. Where is the stat on how long iPads last in the hospital space. Buy an Otterbox if that is your chief concern.

I build custom HIPAA compliant solutions on the iOS platform, a big part of that process is working with the IT security team. These solutions don't need to store any PHI data on the device. They access data directly from a SQL source through the hospitals VPN. We also do disconnected data with PHI data. Both require 10 point security checklist.

Overall, I think the iPad is appropriate and can address the risks and environment in which they are brought into, probably more so than any PC, they are designed around security.

My 2 cents.