Disclaimer
This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
§ 170.315 (d)(13) Multi-factor authentication
eMedicalPractice can be configured to use multi-factor authentication. The direct SMS text authentication method is used for authenticating the users. In this scenario, the end user can register by phone or/and email to receive the authentication token to verify the authenticity while logging in.
Use cases: 1.End user will be asked for username and password first. 2. Once the user is successfully authenticated in the first step, the user will receive a security token to their registered phone or email. Once the security token is validated successfully within the given time frame, user will be given access to the application.
Certified EHR Name
eMedicalPractice
Vendor
eMedPractice LLC
Versions
2.0
CMS Certification ID
0015CN9U9PQ9WBB
Certification Date
Jan 12, 2022
ONC-ACB Certification ID (CHPL Product #)
15.02.05.2898.EMED.01.01.1.220112
Certifying Body
SLI Compliance
Classification
Health IT Module
Practice Type
Ambulatory
Certification Criteria (42)
Clinical Quality Measures (33)
Certification Criteria (42)
- 170.315(a)(1)  Computerized provider order entry (CPOE) – medications
- 170.315(a)(2)  Computerized provider order entry – laboratory
- 170.315(a)(3)  Computerized provider order entry – diagnostic imaging
- 170.315(a)(4)Â Â Drug-drug, drug-allergy interaction checks for CPOE
- 170.315(a)(5)Â Â Demographics
- 170.315(a)(9)Â Â Clinical decision support (CDS)
- 170.315(a)(12)Â Â Family health history
- 170.315(a)(14)Â Â Implantable device list
- 170.315(a)(15) Social, Psychological, and Behavioral Determinants Data
- 170.315(b)(1) Transitions of Care
- 170.315(b)(2)Â Â Clinical information reconciliation and incorporation
- 170.315(b)(3)Â Â Electronic prescribing
- 170.315(b)(10) Electronic Health Information export
- 170.315(c)(1)  Clinical quality measures – record and export
- 170.315(c)(2)  Clinical quality measures – import and calculate
- 170.315(c)(3)  Clinical quality measures – report
- 170.315(c)(4)  Clinical quality measures – filter
- 170.315(d)(1)Â Â Authentication, access control, and authorization
- 170.315(d)(2)Â Â Auditable events and tamper-resistance
- 170.315(d)(3)Â Â Audit report(s)
- 170.315(d)(4)Â Â Amendments
- 170.315(d)(5)Â Â Automatic access time-out
- 170.315(d)(6)Â Â Emergency access
- 170.315(d)(7)Â Â End-user device encryption
- 170.315(d)(8)Â Â Integrity
- 170.315(d)(9)Â Â Trusted connection
- 170.315(d)(12)Â Â Encrypt authentication credentials
- 170.315(d)(13)Â Â Multi-factor authentication
- 170.315(e)(1)Â Â View, download, and transmit to 3rd party
- 170.315(e)(3)Â Â Patient health information capture
- 170.315(f)(1)Â Â Transmission to immunization registries
- 170.315(f)(2)  Transmission to public health agencies – syndromic surveillance
- 170.315(f)(4)Â Â Transmission to cancer registries
- 170.315(g)(2)Â Â Automated measure calculation
- 170.315(g)(3)Â Â Safety-enhanced design
- 170.315(g)(4)Â Â Quality management system
- 170.315(g)(5)Â Â Accessibility-centered design
- 170.315(g)(6)Â Â Consolidated CDA creation performance
- 170.315(g)(7)  Application access – patient selection
- 170.315(g)(9)  Application access – all data request
- 170.315(g)(10)Â Â Standardized API for patient and population services
- 170.315(h)(1)Â Â Direct Project
Clinical Quality Measures (33)
- CMS2 Preventive Care and Screening: Screening for Depression and Follow-Up Plan
- CMS22Â Â Preventive Care and Screening: Screening for High Blood Pressure and Follow-Up Documented
- CMS50Â Â Closing the Referral Loop: Receipt of Specialist Report
- CMS68Â Â Documentation of Current Medications in the Medical Record
- CMS69Â Â Preventive Care and Screening: Body Mass Index (BMI) Screening and Follow-Up Plan
- CMS122Â Diabetes: Hemoglobin A1c (HbA1c) Poor Control (> 9%)
- CMS123Â Â Diabetes: Foot Exam
- CMS124Â Â Cervical Cancer Screening
- CMS125Â Â Breast Cancer Screening
- CMS127 Pneumococcal Vaccination Status for Older Adults
- CMS128Â Â Anti-depressant Medication Management
- CMS130Â Â Colorectal Cancer Screening
- CMS131Â Â Diabetes: Eye Exam
- CMS134Â Â Diabetes: Medical Attention for Nephropathy
- CMS135Â Â Heart Failure (HF): Angiotensin-Converting Enzyme (ACE) Inhibitor or Angiotensin Receptor Blocker (ARB) Therapy for Left Ventricular Systolic Dysfunction (LVSD)
- CMS138Â Â Preventive Care and Screening: Tobacco Use: Screening and Cessation Intervention
- CMS139Â Â Falls: Screening for Future Fall Risk
- CMS144Â Â Heart Failure (HF): Beta-Blocker Therapy for Left Ventricular Systolic Dysfunction (LVSD)
- CMS145Â Â Coronary Artery Disease (CAD): Beta-Blocker Therapy-Prior Myocardial Infarction (MI) or Left Ventricular Systolic Dysfunction (LVEF <40%)
- CMS146Â Â Appropriate Testing for Children with Pharyngitis
- CMS147Â Â Preventive Care and Screening: Influenza Immunization
- CMS153Â Â Chlamydia Screening for Women
- CMS154Â Â Appropriate Treatment for Children with Upper Respiratory Infection (URI)
- CMS155Â Â Weight Assessment and Counseling for Nutrition and Physical Activity for Children and Adolescents
- CMS156 Use of High-Risk Medications in the Elderly
- CMS159Â Â Depression Remission at Twelve Months
- CMS160Â Â Depression Utilization of the PHQ-9 Tool
- CMS161Â Â Adult Major Depressive Disorder (MDD): Suicide Risk Assessment
- CMS164Â Ischemic Vascular Disease (IVD): Use of Aspirin or Another Antiplatelet
- CMS165Â Â Controlling High Blood Pressure
- CMS166Â Â Use of Imaging Studies for Low Back Pain
- CMS182Â Ischemic Vascular Disease (IVD): Complete Lipid Panel and LDL-C Control (<100 mg/dL)
- CMS347Â Â Statin Therapy for the Prevention and Treatment of Cardiovascular Disease
| Additional Requirements | |
|---|---|
| Additional SW Required: | WinRAR (Version 5); Any latest browsers; i.e. GoogleChrome, Firefox or Internet Explorer |
| Mandatory Disclosures | |||||
|---|---|---|---|---|---|
| Capability | Direct messaging functionality (including transitions of care, discharge summaries, and clinical messaging functionality). [Relevant certification criteria: 170.315(b)(1) and (2), h(1).] |
||||
| Description of capability | This functionality allows users to send and receive direct-based messages to/from other users of certified health IT systems. Direct messages may include clinical data, notes, and other information. Our Direct offerings support related Meaningful Use and ONC requirements for sending and receiving transitions of care summary documents. We also support a range of other messaging options. Our Direct capabilities include bundled Health Internet Service Provider (HISP) services for facilitating message exchange. However, additional types of costs may apply. |
||||
| Types of Costs or Fees to be paid by a provider for the capability | Third party HISPs are not covered under the subscription fee. | ||||
| Additional Types of Costs or Fees | Additional types of costs or fees that a user may be required to pay to purchase, license, implement, maintain, upgrade, use, or otherwise enable and support the use of: | > the capability. | Base licensing and subscription fee includes up to 4 seats (1 seat per registered clinician or user). Additional seats can be licensed under an additional subscription fee. A connection fee will be charged when establishing a connection to each third-party HISP with whom eMed currently has no current relationship with. The cost of establishing connections may exceed the annual/monthly licensing and subscription fee in some cases. All costs are passed on to the customer(s) who requests the connection. |
||
| > any data generated in the course of using the capability. | Direct messages hosted on eMedical's HIPAA-compliant servers will be deleted permanently after 4 business days. | ||||
| Capability | Patient Portal (including lab notifications and initial patient registration). [Relevant certification criteria: 170.315(e)(1),170.315(e)(3)],170.315(g)(7)],170.315(g)(9)] |
||||
| Description of capability | This functionality allows users to send and receive secure communication to and from the patients. Patients or patient's agent can view their lab results, visit and clinical summaries. Patients can view, download and transmit the clinical summaries to 3rd parties. Our Patient portal offers support related to Meaningful Use and ONC requirements for sending and receiving communication between patients and providers office. We also support a range of other communication options. Our Patient portal capabilities include initial patient online registration, lab results notifications, outstanding balance payments, and download and view of visit summary notes. |
||||
| Types of Costs or Fees to be paid by a provider for the capability | Subscription fee is included in the base service agreement. | ||||
| Additional Types of Costs or Fees | Email & SMS: 3 cents Telehealth: 3 cents per minute Automated calls: 5 cents per minute Faxes (fair usage policy): $39.99/month |
> the capability. | Licensing and subscription fees do not include sending emails to patients and for any notifications. | ||
| > any data generated in the course of using the capability. | Email messages sent to patients on eMedicals' hosted HIPAA-compliant servers will NOT be stored and are sent instantly. | ||||
| Capability | Reporting to Registries [Relevant certification criteria: 170.315(f)(1),170.315(f)(2),170.315(f)(4)] |
||||
| Description of capability | This functionality allows users to send EHR information to public registries. Meaningful Use and ONC requirements for reporting to the immunizations registries and public health registries. |
||||
| Types of Costs or Fees to be paid by a provider for the capability | Reporting to the immunizations registries are covered under subscription fee. | ||||
| Additional Types of Costs or Fees | Additional types of costs or fees that a user may be required to pay to purchase, license, implement, maintain, upgrade, use, or otherwise enable and support the use of: | > the capability. | eMedical is connected to the DARTNet public registry. A connection fee will be charged to establish a connection to DARTNet or any third party registry. Base licensing and subscription fee does NOT include any connection fee to the registries. Registries will charge the end user directly. A connection fee will be charged to establish a connection to each third-party Registries with whom eMed currently has no relationship. The cost of establishing connections can be substantial and may exceed the annual licensing and subscription fee in some cases. All costs are passed on to the customer(s) who requested the connection. |
||
| > any data generated in the course of using the capability. | a secure sFTP connection will be established to transfer the data to the Registries. | ||||
| Contractual / Business Practices | Contractual nature including developer policies and other business practices that a user may encounter: | > in the implementation or use of the capability. | Pursuant to eMedical's security policy, the data transfer capability is restricted and users will be unable to exchange data with any other Registries with whom the developer does not have an agreement. Should a provider wish to establish a new connection with any other third-party registries, the provider must lodge a service request identifying the third-party party Registry along with contact information for the Registry eMedical will establish, maintain and support technology to manage the connection. eMedical will make every effort in good faith to establish connectivity within a reasonable time frame (no longer than 3 months). However, we do not warrant that eMedical will be able to establish agreements and required connections with all third-party Registries. |
||
| > in connection with the data generated in the course of using the capability. | None | ||||
| Capability | EHR Data Dump & Portability |
||||
| Description of capability |
Full Data Extract - Decrypted CCDA Export, CSV, PDF (Including Patient Demos, Appointments, and Scanned Documents, Progress Notes*): eMedical will provide the data dump in a hard disk in standard CCDA format. Each patient's folder will consist of complete clinical information in CCDA format and all documents dumped in a separate folder by category. All patient demographic and insurance information is stored in CSV/Excel file. EHI Export Format Details |
||||
| Types of Costs or Fees to be paid by a provider for the capability |
Data Export Cost and Transfer to Encrypted Hard Disk: Data Dump $4500.00 up to 1-4 Providers, $5,500 up to 5-10 providers, $1000.00 additional per each 5 providers. Cost of Encrypted Hard Disk: $500 includes the delivery charges. |
||||
