| This qualitative study, using a five-round Delphi method, collected 12 health information experts' opinions about managing the access and release of health information within a health information exchange (HIE) environment. The purpose of the qualitative study was to develop a best practice to assist Health Information Management professionals manage strategically, through security and privacy initiatives, personal health information (PHI) as health information exchanges evolve. The experts, using the semi-structured iterative open-ended survey process of the Delphi methodology, provided suggestions for the establishment of a best practice for managing PHI. Rounds two and three provided opportunities to reiterate, change, and delete, as well as substantiate the feedback, through ranking and prioritizing the feedback. Through similar keywords and phrases obtained from the responses to the research question, themes evolved for the major focus areas. These focus areas contained specific key elements that the participants in the study agreed were essential in the development of a best practice consisting of guidelines for HIM professionals to apply to ensure the confidentiality of PHI. The approach for this study was to close the gap in the literature addressing the concerns about the security and privacy of PHI and the lack of health information professionals' input into the concerns, as increased access to health information occurred. |
