POSP

The Physician Office System Program (POSP) is an initiative of Alberta Health and Wellness (AHW), Alberta Health Services (AHS) and the Alberta Medical Association (AMA) that has been designed to facilitate the uptake and use of electronic medical records (EMR) by physicians in Alberta.

EMRs are specialized software used to manage patient information in a physician’s office.  Some EMRs are rudimentary databases that are simply an electronic copy of a physician’s paper chart.  Other EMRs offer enhanced functionality like decision support tools, automated care pathway planning and interoperability with other health information systems (such as electronic delivery of lab results).  Physicians must choose the level of automation that is appropriate for their practice.

The Health Information Act (HIA) requires custodians contemplating changes to practices or information systems that could impact patient privacy to conduct a privacy impact assessment and submit it to the Information and Privacy Commissioner for his review and comment.  EMR implementation is such a change; custodians who wish to adopt an EMR must complete a PIA prior to system implementation.

Since its inception in 2001, POSP has assisted physicians participating in the program to meet their obligations to assess risks to privacy and security and develop safeguards to mitigate against those risks when implementing EMRs.

In 2001, POSP proposed that a physician’s PIA obligations could best be met through a combination of activities undertaken by POSP, EMR system vendors and participating custodians.  The Commissioner agreed and adopted a streamlined PIA process for POSP participants.  This streamlined process sees POSP and the EMR system vendor complete some pieces of the PIA on behalf of the physician.  The physician is also an active participant in this process and completes a PIA on his clinic environment, and develops policies and procedures to support the private and secure use of EMR technology. 

In the current phase of the POSP program, a PIA submission from a participating physician has the following components:

• An Organizational PIA from the physician
• A Project Specific PIA from POSP for the EMR solutions
• A Project Specific PIA from POSP for the Data Migration Project
• An Organizational and Project Specific PIA from each of the EMR system vendors

The listed physicians have met their obligation under the HIA to submit a PIA to the Information and Privacy Commissioner as it relates to their adoption of an Electronic Medical Record.

Physician Office System Program 

Individuals wishing to obtain additional information on POSP, or the assistance it has provided to physicians in relation to privacy impact assessments should contact POSP directly at 780 452 1616.