Negotiating contracts for vendor-financed purchases of EHR systems. Providers face extraordinary challenges securing financing for HIT projects, especially ones required to capitalize on ARRA incentives.

In this economic climate, healthcare providers may face extraordinary challenges securing financing for health IT projects, especially ones required to capitalize on the incentives in ARRA. Vendor financing may be the best option for many such providers. While such arrangements may often seem a win-win for both parties, providers should be aware of the many potential pitfalls inherent in vendorfinanced deals, including: 1.) additional pressure from vendors to accept their standard contractual terms and conditions because vendors have much more leverage if they are also the creditor in the transaction; 2.) failing to obtain necessary warranties and representations from vendors that their systems will comply with all relevant requirements under ARRA and will permit the provider to achieve meaningful use; and 3.) dealing with problems arising if the vendors' product fails to achieve certification, or the provider fails to achieve "meaningful use" in a timely manner.

Privacy and security in Pennsylvania: ensuring privacy and security of health information exchange in Pennsylvania.

Though HIPAA addresses privacy and security on a nationwide basis, state laws and regulations vary. This paper describes the landscape for privacy and security in Pennsylvania and its key elements. It addresses common myths and misunderstandings and provides an overview of what is actually required to provide needed protections privacy policies from government and the stakeholders; risk analysis and management; and technical and non-technical means to enforce policies and mitigate risks. Also covered are the enablers, barriers and key recommendations for the future.