RelayHealth Frequently Asked Questions
Is the RelayHealth service secure?
What is a webVisit®?
Does California permit the electronic transmission of prescriptions?
Does California permit the electronic transmission of prescriptions for Schedule III-V drugs?
Can I prescribe Schedule II controlled substances by electronic transmission?
Is the prescribing practitioner’s signature required?
How does RelayHealth comply with the signature requirement?
How can a pharmacy ensure the authenticity, integrity, non-repudiation and confidentiality of the electronically transmitted prescription?
Does RelayHealth’s transmission of prescriptions by facsimile comply with the HIPAA Privacy Rule?
Does RelayHealth protect against the disclosure of PHI of faxes left sitting on a fax machine at a pharmacy?
[back to Getting Started page]
Return to RelayHealth Main page
Is the RelayHealth service secure?
Embedded secure sockets layer (SSL) technology – a protocol that delivers server authentication, data encryption and message integrity – ensures RelayHealth messages can only be read by the registered physician, the physician’s authorized staff and the patient. Information transmitted via RelayHealth can be trusted to arrive privately and unaltered to the server specified. The RelayHealth service requires all users to have a unique sign-in name and password and can only be accessed by registered users. Patients using the service can view an audit trail detailing who has accessed their Health Record and can terminate their online relationship with a doctor at any time – preventing access to any medical information communicated via RelayHealth in the future.
What is a webVisit®?
Combining the advantages of an office visit with the convenience of online communication, the RelayHealth webVisit® is a reimbursable, non-urgent consultation between a physician and an established patient. This structured consultation employs clinical guidelines and algorithms to support the interaction—guiding patients through an interactive interview and then formulating a succinct message to the physician based on the answers provided. A physician can rapidly respond to a patient by referencing the patient's online health record and, if they choose, a database of customizable treatment options. A physician can also attach a prescription or tailored medical information to the response. In addition, a nurse or other clinical team member can triage and prepare responses to webVisit® communications just as they would for office visits or telephone calls.
Does California permit the electronic transmission of prescriptions?
Yes. Per the California Code of Regulations, Division 17, Title 16, Sec. 1717.4, California permits electronic transmission of prescriptions.
Does California permit the electronic transmission of prescriptions for Schedule III-V drugs?
Yes. Per the California Health and Safety Code Sec. 11164(c), California permits the electronic transmission of prescriptions for Schedule III-V drugs. However, under federal law, the electronic transmission of Schedule III-V drugs is viewed as an oral prescription, which requires the pharmacist to (i) reduce the prescription; (ii) retain the writing for at least 3 years and (iii) ensure the validity of the prescription. The fax provided to the pharmacist by the RelayHealth eScript service constitutes a reduction of the prescription to writing and so the only step for the pharmacist is to ensure the validity of the prescription.
Can I prescribe Schedule II controlled substances by electronic transmission?
No. Neither California nor federal laws permit the electronic transmission of Schedule II controlled substances (see California Health and Safety Code Section 1164(a)). Accordingly, RelayHealth does not permit the electronic transmission of Schedule II controlled substances.
Is the prescribing practitioner’s signature required?
Yes. The California State Board of Pharmacy requires that electronically transmitted prescriptions have the electronic signature of the prescriber and that the pharmacy ensure the authenticity, integrity, non-repudiation and confidentiality of the prescription. (See Electronic Signatures Compliance Guideline.) The electronic signature capabilities of the RelayHealth eScript service are in compliance with the Electronic Signatures Compliance Guideline.
How does RelayHealth comply with the signature requirement?
Prescribers using the RelayHealth eScript electronic prescription writing service utilize a process of signing on to their account with a unique username and passcode, writing a prescription and electronically transmitting the prescription to the patient’s pharmacy of choice. This serves an electronic signature and is sufficient to verify the sender's identity and the authenticity of the prescription.
How can a pharmacy ensure the authenticity, integrity, non-repudiation and confidentiality of the electronically transmitted prescription?
The RelayHealth eScript service employs a high degree of security consciousness to protect the integrity, privacy and confidentiality of prescriptions transmitted, including:
-
Prescriber authentication during registration process
-
Single, centrally managed database
-
Firewall isolation of RelayHealth servers
-
Embedded SSL technology — a protocol that delivers server authentication, data encryption and data integrity
-
Role-based usage
-
Unique username and passcode
-
Automatic sign off after period of inactivity
-
Audit trail of user activity
Further, to ensure the highest standards of confidentiality and privacy are maintained, RelayHealth:
-
Established and continues to enforce a rigorous privacy policy governing the collection and use of data
-
Implemented a patient privacy issues reporting mechanism
-
Employs a team of privacy personnel to address and monitor privacy issues
Does RelayHealth’s transmission of prescriptions by facsimile comply with the HIPAA Privacy Rule?
Yes. While RelayHealth is not a covered entity under the HIPAA Privacy Rule, it is a business associate of the prescribing practitioner and has entered into a business associate agreement with that practitioner. Pursuant to that agreement, RelayHealth has agreed to comply with the privacy rule with respect to protected health information (PHI) received from the practitioner. RelayHealth has developed and implemented policies and procedures to help ensure compliance with the HIPAA Privacy Rule.
Does RelayHealth protect against the disclosure of PHI of faxes left sitting on a fax machine at a pharmacy?
No, this is the obligation of the pharmacy. The pharmacy is a covered entity under the Privacy Rule and accordingly must take steps to protect against the disclosure of PHI. This should include policies and procedures to protect against the unauthorized disclosure of PHI from faxes.