MedicalResearch.com Interview with:
Celine Latulipe PhD
Associate Professor
University of Manitoba
MedicalResearch.com: What is the background for this study? What are the main findings?
Response: We wanted to find out how many hospitals offer proxy accounts for caregivers of adult patients. Most patient portal systems allow proxy accounts for parents of pediatric patients, so we know the underlying systems support the creation of proxy accounts. When we were starting this research, the two big healthcare systems where I was located did NOT offer such proxy accounts for caregivers of adult patients, and a staff person at one of those hospitals suggested adult patients share their passwords with their caregiver, if the caregiver needed access to the portal.
As a computer scientist, I am well aware of the security and privacy risks associated with password sharing, and I was appalled by this advice. So we did this survey across the US and we found that 45% of the staff contacted in our study gave similar password sharing advice. This is hugely problematic. Caregivers using a patient's password means the caregiver can see everything in the medical record, including things the patient might not want the caregiver to know, such as past diagnoses of stigmatized illnesses, substance abuse or reproductive health decisions. Also, because password re-use is common across systems, a caregiver with a patient's portal password may now have access to the patient's online banking.
(more…)