Introduction
In modern healthcare settings, the adoption of digital tools such as electronic patient journey boards (EPJBs) aims to enhance efficiency and patient care coordination. This essay examines a scenario where an EPJB has been trialled in the medical ward of University Hospital, positioned at the back of the nurses’ station for easy access by clinical and administrative staff. The board displays key patient information, including bed number, names, date of birth, diagnosis, admitting doctor, admission date, expected discharge date, outstanding referrals, and pertinent clinical details. However, complaints from nurses, surgeons, patients, physiotherapists, and directors have highlighted potential breaches of patient privacy and confidentiality due to its visibility. Drawing from a nursing perspective, this essay explores these issues, relating them to privacy regulations for various stakeholders. It evaluates the implications, challenges, and relevant frameworks, including Australian legislation, and provides recommendations for suitable EPJB locations. The analysis is informed by the virtual hospital scenario and Module 1.1.1, emphasising the importance of balancing technological benefits with ethical and legal obligations in healthcare.
Types of Information Displayed on Electronic Patient Journey Boards and Their Privacy Implications
Electronic patient journey boards typically display a combination of general and personal identifiable information to facilitate quick access for clinicians. In this scenario, the EPJB includes bed numbers, first and last names, dates of birth, diagnoses, admitting doctors, admission dates, expected discharge dates, outstanding referrals (e.g., to physiotherapists, occupational therapists, social workers, or mental health services), and personal clinical information relevant to the current stay. While some elements, such as bed numbers or referral statuses, might seem administrative, others like names, dates of birth, and diagnoses constitute personal and health information under privacy laws.
This information is often more personal and identifiable than general data, as it can reveal sensitive details about an individual’s health condition. For instance, a diagnosis listed on the board could disclose conditions like mental health issues or chronic illnesses, which are considered ‘health information’ under Section 6FA of the Privacy Act 1988 (Cth) in Australia. This act defines health information as personal information about an individual’s physical or mental health, including details of services provided (Office of the Australian Information Commissioner, 2023). The visibility of such data raises concerns, as noted in complaints where Patient A reported seeing a neighbour’s information, potentially leading to unintended disclosures. From a nursing viewpoint, while EPJBs streamline workflows—allowing quick updates via electronic medical records—they risk exposing identifiable information to unauthorised viewers, such as passing patients or visitors, thus interfering with privacy as per Section 13 of the Privacy Act 1988 (Cth), which addresses privacy breaches through unauthorised access.
Relevance of Concerns Raised Regarding EPJB Location
The concerns voiced by stakeholders are highly relevant, particularly given the EPJB’s placement at the back of the nurses’ station, which is accessible and visible to anyone nearby. Nurse A’s complaint highlights the convenience of centralised information but questions visibility to other patients, while Patient A’s experience of spotting a neighbour’s details underscores the risk of accidental exposure. Similarly, Physio A and the Director express worries about privacy breaches and the need for relocation, with the Surgeon noting the board’s location despite appreciating its utility.
These issues relate to privacy and regulation differently for stakeholders. For clinicians, such as nurses and surgeons, the board aids in efficient patient management but could lead to professional ethical dilemmas if it results in breaches, potentially violating codes like those in the Nursing and Midwifery Board of Australia’s standards (Nursing and Midwifery Board of Australia, 2020). Patients and families, however, prioritise confidentiality to protect dignity and prevent stigma; seeing others’ information erodes trust in the healthcare system. The location exacerbates this, as the nurses’ station is a high-traffic area, making unauthorised access likely—an eligible data breach under Section 26WA of the Privacy Act 1988 (Cth), involving unauthorised disclosure of personal information. In the RMIT University Hospital context, assuming the board is openly accessible, this constitutes a privacy breach, as complaints indicate actual unauthorised viewings.
Importance of Privacy and Confidentiality in Healthcare and Differences Between Stakeholders
Privacy and confidentiality are cornerstone issues in healthcare, safeguarding patient autonomy, trust, and safety. Privacy protects individuals from unwarranted intrusion, while confidentiality ensures information shared in therapeutic relationships remains secure. Breaches can lead to harm, such as discrimination or emotional distress, and undermine care quality. For example, patients may withhold information if they fear exposure, complicating diagnoses and treatments (Australian Commission on Safety and Quality in Health Care, 2021).
These concepts differ between clinicians and patients. Clinicians view privacy through a professional lens, balancing information sharing for care coordination with legal duties, as per the National Safety and Quality Health Service (NSQHS) Standards, which require policies for secure healthcare records (Action 1.16). Patients, conversely, see it as a personal right, expecting absolute protection unless consented. In this scenario, clinicians like the Surgeon appreciate the EPJB’s efficiency, but patients feel violated by visible data, highlighting a tension where operational benefits for staff may infringe on patient rights. Generally, this disparity underscores the need for patient-centred approaches in nursing practice, where empathy for patient concerns is paramount.
Underlying Frameworks and Legislation for Privacy and Confidentiality
Healthcare organisations must adhere to frameworks like the Privacy Act 1988 (Cth), which promotes and protects individual privacy by regulating how entities handle personal information. Key developments include the Office of the Privacy Commissioner (2000), extension to the private sector (2001), the Office of the Australian Information Commissioner (2010), Australian Privacy Principles (APPs) (2014), and the Notifiable Data Breaches scheme (2018). Relevant APPs include APP 1 (open and transparent management of personal information, requiring transparency in data use), APP 3 (collection of solicited personal information, limiting unnecessary data gathering), APP 5 (notification of collection), APP 6 (use or disclosure, restricting sharing without consent), and APP 11 (security of personal information, mandating protection against misuse).
In this case, the EPJB’s display potentially violates these, as it allows unauthorised access, constituting an interference with privacy under Section 13. The NSQHS Standards (Second Edition, 2021) further emphasise governance, with Action 1.07 requiring policies and procedures for privacy, and Action 1.16 for secure records. Assuming University Hospital lacks specific policies for EPJB implementation, it fails to meet these standards, risking non-compliance and patient harm.
Professional ethics also play a role; nurses are bound by codes promoting confidentiality, and breaches could lead to disciplinary action (Nursing and Midwifery Board of Australia, 2020). Together, these frameworks ensure accountability, but the scenario reveals gaps in application.
Policies to Support Patient Rights and Recommendations for EPJB Placement
Healthcare organisations can implement policies like mandatory consent for data display, access controls (e.g., password-protected screens), staff training on privacy, and regular audits to support rights. Aligning with APPs, policies should outline data handling, breach reporting, and patient notification.
Recommendations for EPJB placement include relocating to a secure, staff-only area, such as behind locked doors or in enclosed offices, to minimise visibility. Alternatively, use digital features like auto-locking screens or role-based access via the electronic medical record system. Involving stakeholders in trials, as per NSQHS governance standards, could identify issues early. These steps would mitigate risks while retaining benefits.
Conclusion
This essay has explored privacy and confidentiality issues with the EPJB in University Hospital, highlighting how displayed information risks breaches under the Privacy Act 1988 (Cth) and APPs, exacerbated by its visible location. Concerns vary by stakeholder, with patients facing greater personal impacts than clinicians. Frameworks like the NSQHS Standards underscore the need for robust policies, which appear lacking here. Recommendations focus on secure placements to balance efficiency and ethics. Ultimately, addressing these challenges enhances patient trust and care quality, a key nursing imperative. Implementing such measures could prevent future complaints and ensure compliance, though further research on EPJB best practices is warranted.
References
- Australian Commission on Safety and Quality in Health Care. (2021) National Safety and Quality Health Service (NSQHS) Standards (Second edition). Australian Commission on Safety and Quality in Health Care.
- Nursing and Midwifery Board of Australia. (2020) Code of conduct for nurses. Nursing and Midwifery Board of Australia.
- Office of the Australian Information Commissioner. (2023) Privacy Act 1988. Office of the Australian Information Commissioner.
(Word count: 1,248 including references)
