Minimum of 2 factor authentication to view MEDEO

Minimum of 2 factor authentication to view MEDEO message content eg: email address + patient provincial health number (+date of birth)

Potential patient confidentiality and privacy breach with current single factor (email) authentication of patient identity with MEDEO messaging.

It is possible that an email address could be entered incorrectly or belonging to another patient and there is no additional check to verify that the patient receiving communication of personal health information is the correct person. There is a possibility of a patient confidentiality breach with the current messaging system. Consider adding a mandatory field(s) that ensures an identifier like the PHN and date of birth in Accuro/MEDEO match the account information the patient provides to sign up for this service. And having a way for incorrect emails or a detected mismatch in patient identifiers to be sent back to the sender.

Guest
May 28 2020
Needs Review

Medeo Provider / Messaging

Comments (0)
Votes (4)

Attach files

Enter a subject

QHR Product Ideas

Minimum of 2 factor authentication to view MEDEO message content eg: email address + patient provincial health number (+date of birth)

Related ideas

Minimum of 2 factor authentication to view MEDEO message content eg: email address + patient provincial health number (+date of birth)

Identify yourself with your email address

Related ideas