Balancing Privacy, Knowledge and Innovation @Omadahealth
Lucia C. Savage, JD
July 15, 2019, Washington DC
—
—
INTRODUCTION
—
2
Lucia Savage Chief Privacy and Regulatory Officer Omada Health |
|
|
|
OMADA HEALTH •
3
Omada Health: Bringing Human Connection to Digital Care
We connect people to health care professionals using secure digital systems and data science that engages individuals and delivers personalized healthcare
OMADA HEALTH •
The Patients have left the building, and Omada goes with them
—
4
Mental
Health
Continued
Expansion...
Hypertension
Type 2 �Diabetes
Cardiovascular Risk
Prediabetes
Peer Influence
Connected Smart Devices
Dynamic Lessons
Action List �& Skills
Professional Health Coach
Coaching
Platform
Coach Tools
Participant Experience
OMADA HEALTH •
Data @Omadahealth
—
5
01 | Omada IS a covered entity under HIPAA--we provide health care services and bill w/an NPI, per regulations |
02 | HITRUT and SOC2 Certified |
03 | More than 250,000 individuals served |
04 | |
05 | Data Science makes our healthcare professionals smarter. |
July 4, 2016 1:15 pm pdt
OMADA HEALTH •
Digital Data Omada Health Collects
—
6
01
Name, DoB, Weight, Food, Health History
02
Private Messages, group message board posts
03
Activity trackers and HealthKit (through permission and APIs)
04
Coming soon: Mental Health Assessments
05
Medical device data connected with a unique IP address and other identifiers (again, using APIs)
06
Narrative survey responses and interviews
OMADA HEALTH
HOW DO WE DO IT?
—
7
TRUST |
Data Collection is for improving the individualized care we supply, just like at your doctor’s office You can always, and easily, get your own data. Privacy, Security, Transparency, Engagement #ParticipantsFirst. |
OMADA HEALTH •
Recommendations
—
8
01 | Pay digital health as a healthcare service under HIPAA Privacy and Security automatically apply--45 CFR 160.103 Includes all the vendors for a digital health co. if they handle PHI. This raises all boats |
02 | If digital health is not reimbursed as healthcare, no incentive to improve privacy and security |
03 | If HIPAA does not apply (that is, digital health is not reimbursed as healthcare) then only FTC rules apply, says HHS to Congress. https://www.healthit.gov/sites/default/files/non-covered_entities_report_june_17_2016.pdf |
04 | Patients deserve the same set of privacy and security standards wherever, and however, they get healthcare. Id. |
05 | Hold digital health to same standards as all other providers Address program integrity concerns, if any, directly with industry |
06 | Don’t wait to develop a digital health strategy For the digitally adept and digital natives, digital healthcare is just healthcare |
OMADA HEALTH •