State of the Internet 2012

I love it when Mary Meeker, the former Morgan Stanley analyst turned Kleiner Perkins Caulfield & Byers venture capitalist, releases her annual report on the Internet Trends. The video below is from her fantastic presentation at D: All Things Digital. Then below that is the presentation she posted on Slideshare. Enjoy...

KPCB Internet Trends 2012

KPCB’s Mary Meeker & Liang Wu:

1. review Internet stats and notes that Internet growth remains robust and rapid mobile adoption is still in early stages; 
2. run through a number of examples of business models that are being re-imagined and re-invented thanks to mobile and social; 
3. highlight mixed economic trends and 
4. observe that while there’s a lot to excited about in technology, there are things to be worried about regarding America’s financial situation.

Examining Healthcare Costs

Last year the non-profit Health Care Cost Institute (HCCI) was formed and started with some Medicare data as well as billions of claims from Aetna, Humana and UnitedHealthcare. HCCI doesn't expect to publicly separate out claims by insurer, and it will not name individual hospitals or other providers, in part to avoid antitrust concerns and to ensure patients can't be identified. The claims data includes price, volume and intensity of care being delivered to people with private coverage from one of the four insurers. Future reports will include data from Kaiser Permanente. Medicare data will also eventually be used to compare cost information with private health plans.

According to the new report from HCCI the main driver behind increasing healthcare costs for the privately insured in 2010 was rising prices of care. The report, “Health Care Cost and Utilization Report: 2010,” is the first of an ongoing series of reports from HCCI. Using de-identified, HIPAA-compliant data sets from three billion health insurance claims the researchers studied what influences the use and cost of healthcare services. Findings from the report reflect the national healthcare spending of more than 33 million privately insured people with employer-sponsored group health insurance.

The report examines trends in inpatient and outpatient care, professional services, and prescription drugs by the privately insured. HCCI looked at per capita spending, prices paid per service, out-of-pocket spending, utilization, and the mix or intensity of services used. Higher spending was mostly due to price increases, rather than change in the use of healthcare services, the report found. HCCI data show that this 3.3 percent increase follows spending increases in 2008 (6 percent) and 2009 (5.8 percent).

Based on three billion health insurance claims provided by three of the nation’s largest health plans, the data represent the health care spending of 33 million Americans across the country.

Other key findings of the report:

• Prescription Drugs. Prescription drug prices grew 3 percent to $82, on average in 2010, from $80 per prescription in 2009. But the price increase was driven by brand name drugs whose prices increased 13 percent in 2010. Generic drug prices decreased by 6.3 percent in the same period.
• Professional Services. The overall price of professional procedures that include doctor visits, lab tests, and diagnostic imaging, increased 2.6 percent. Payments for office visits - to both primary care and specialist providers - grew by more than 5 percent.
• Utilization Trends. Overall use of healthcare services declined in 2010, dropping by more than 5 percent for medical inpatient admissions, emergency room visits, primary care provider office visits and radiology procedures.

Martin Gaynor, Chair of Governing Board of the Health Care Cost Institute and E.J. Barone Professor of Economics and Health Policy at the Carnegie Mellon University, talks about the report.

The research will add to a debate over whether the recent slowdown in medical spending is the temporary result of a bad economy or a more lasting shift due to higher deductibles and other changes, Gaynor said. While insurer costs climbed 2.6 percent in 2010, employees’ share rose by 7.1 percent. In the period studied, insurance company and individual policyholder spending rose at almost twice the rate of growth for the Consumer Price Index. This is a rich data source that will continue to provide a treasure trove of analysis.

Nationwide Health Information Network: Conditions for Trusted Exchange

First, I want to point out that the Nationwide Health Information Network Exchange (upper case) is a specific organization that is being turned into a private, nonprofit entity this fall with the idea that it would be weaned off government funding by October 2013. The nationwide health information network (lower case) is defined as the set of standards, services, and policies that enable secure health information exchange over the Internet. The Exchange is a group of health care stakeholders that have put the standards, services and policies which have been developed into production. So really the ONC has released an RFI for comment on the governance mechanism for the nationwide health information network, and I don't know what will happen the commonly used NwHIN acronym (which used to be NHIN) except used as part of the NwHIN Exchange.

An important aspect of this governance mechanism is the establishment of a framework for entities that facilitate electronic exchange to be validated. The creation of this voluntary program under which entities that enable electronic health information exchange could be validated based on meeting ONC established "Conditions for Trusted Exchange" (CTE). Upon successful validation to adopted CTEs an entity would be recognized as a "Nationwide Health Information Network Validated Entity" (NVE) and thus become responsible for performing electronic exchange services in accordance with the adopted CTEs. To drive value of validation as a NVE public and private organizations could specify NVE recognition as a condition in awarding contracts, procurements and/or in other situations where validation would be beneficial.

The ONC seeks comment on 5 areas:

1. The establishment of a set of conditions for trusted exchange (CTEs) – “rules of the road”
2. A validation process for entities to demonstrate conformance to the CTEs (and subsequently become an NVE)
3. Processes to update and retire CTEs
4. Establishment of a process to classify the readiness of technical standards and implementation specifications to support interoperability related CTEs
5. Approaches for monitoring and transparent oversight

It is anticipated that eligible entities for validation as a NVE may include (but not limited to):

• EHR developers;
• Integrated delivery networks;
• Regional, state, local or specialty-based health information exchanges;
• Health information service providers;
• State and Federal agencies.

In a very similar way that the roles and responsibilities were established under the permanent certification program for the EHR Incentive Program, ONC would select a single Accreditation Body to accredit Validation Bodies, who would be authorized to validate an entities CTE compliance. If an entity successfully completes the validation process they would become an NVE. Validation could consist of testing/certification of products or technology (interoperability CTEs); and the accreditation of services (safeguard and business practice CTEs). This process would differ from the EHR certification programs in that validation would evaluate an entity’s conformance to adopted CTEs as opposed to a particular product’s certification to certification criteria.

Below is a rough framework of the proposed CTEs and the questions ONC is seeking comment on in this RFI. I will be working on some comments on many of these questions to submit prior to the June 15, 2012 deadline.

A. Establishing a Governance Mechanism

CTEs are being grouped into three categories: safeguards, interoperability, and business practices.

• Safeguards CTEs would focus on the protection of IIHI to promote its confidentiality, integrity, and availability and to prevent unauthorized or inappropriate access, use, or disclosure
• Interoperability CTEs would focus on the technical standards for the exchange and integration of electronic health information so that it is useful for the recipient
• Business Practices CTEs would focus on the operational and financial practices or standards to which NVEs would need to adhere in support of trusted electronic exchange

Question 1: Would these categories comprehensively reflect the types of CTEs needed to govern the nationwide health information network? If not, what other categories should we consider?

Question 2: What kind of governance approach would best produce a trusted, secure, and interoperable electronic exchange nationwide?

Question 3: How urgent is the need for a nationwide governance approach for electronic health information exchange? Conversely, please indicate if you believe that it is untimely for a nationwide approach to be developed and why.

Question 4: Would a voluntary validation approach as described above sufficiently achieve this goal? If not, why?

Question 5: Would establishing a national validation process as described above effectively relieve any burden on the States to regulate local and regional health information exchange markets? Question 6: How could we ensure alignment between the governance mechanism and existing State governance approaches?

Question 7: What other approaches to exercising our authority to establish a governance mechanism for the nationwide health information network should we consider?

B. Actors and Associated Responsibilities

Question 8: We solicit feedback on the appropriateness of ONC’s role in coordinating the governance mechanism and whether certain responsibilities might be better delegated to, and/or fulfilled by, the private sector.

Question 9: Would a voluntary validation process be effective for ensuring that entities engaged in facilitating electronic exchange continue to comply with adopted CTEs? If not, what other validation processes could be leveraged for validating conformance with adopted CTEs? If you identify existing processes, please explain the focus of each and its scope.

Question 10: Should the validation method vary by CTE? Which methods would be most effective for ensuring compliance with the CTEs? (Before answering this question it may be useful to first review the CTEs we are considering to adopt, see section “VI. Conditions for Trusted Exchange.”)

Question 11: What successful validation models or approaches exist in other industries that could be used as a model for our purposes in this context?

Question 12: What would be the potential impact of this accreditation/validation body model on electronic health information exchange, in particular, on the volume and efficiency of exchange in local health care markets and provider confidence? What is the best way to maximize the benefit while minimizing the burden on providers or other actors in the market?

Question 13: Should there be an eligibility criterion that requires an entity to have a valid purpose (e.g., treatment) for exchanging health information? If so, what would constitute a “valid” purpose for exchange?

Question 14: Should there be an eligibility criterion that requires an entity to have prior electronic exchange experience or a certain number of participants it serves? Question 15: Are there other eligibility criteria that we should also consider?

Question 16: Should eligibility be limited to entities that are tax-exempt under section 501(c)(3) of the IRC? If yes, please explain why.

Question 17: What is the optimum role for stakeholders, including consumers, in governance of the nationwide health information network? What mechanisms would most effectively implement that role?

C. Monitoring and Transparent Oversight

Question 18: What are the most appropriate monitoring and oversight methods to include as part of the governance mechanism for the nationwide health information network? Why?

Question 19: What other approaches might ONC consider for addressing violations of compliance with CTEs?

Question 20: What limits, if any, would need to be in place in order to ensure that services and/or activities performed by NVEs for which no validation is available are not misrepresented as being part of an NVE’s validation? Should NVEs be required to make some type of public disclosure or associate some type of labeling with the validated services or activities they support?

Question 21: How long should validation status be effective?

D. Conditions for Trusted Exchange (CTEs)

1. Safeguards CTEs

[S-1]: An NVE must comply with sections 164.308, 164.310, 164.312, and 164.316 of title 45 of the Code of Federal Regulations as if it were a covered entity, and must treat all implementation specifications included within sections 164.308, 164.310, and 164.312 as "required."

Question 22: Are there HIPAA Security Rule implementation specifications that should not be required of entities that facilitate electronic exchange? If so, which ones and why?

Question 23: Are there other security frameworks or guidance that we should consider for this CTE? Should we look to leverage NISTIR 7497 Security Architecture Design Process for Health Information Exchanges32? If so, please also include information on how this framework would be validated.

[S-2]: An NVE must only facilitate electronic health information exchange for parties it has authenticated and authorized, either directly or indirectly.

Question 24: What is the most appropriate level of assurance that an NVE should look to achieve in directly authenticating and authorizing a party for which it facilitates electronic exchange?

Question 25: Would an indirect approach to satisfy this CTE reduce the potential trust that an NVE could provide? More specifically, should we consider proposing specific requirements that would need to be met in order for indirect authentication and authorization processes to be implemented consistently across NVEs?

Question 26: With respect to this CTE as well as others (particularly the Safeguards CTEs), should we consider applying the “flow down” concept in more cases? That is, should we impose requirements on NVEs to enforce upon the parties for which they facilitate electronic exchange, to ensure greater consistency and/or compliance with the requirements specified in some CTEs?

[S-3]: An NVE must ensure that individuals are provided with a meaningful choice regarding whether their Individually Identifiable Health Information (IIHI) may be exchanged by the NVE.

Question 27: In accommodating various meaningful choice approaches (e.g., opt-in, opt-out, or some combination of the two), what would be the operational challenges for each approach? What types of criteria could we use for validating meaningful choice under each approach? Considering some States have already established certain “choice” policies, how could we ensure consistency in implementing this CTE?

Question 28: Under what circumstances and in what manner should individual choice be required for other electronic exchange purposes?

Question 29: Should an additional “meaningful choice” Safeguards CTE be considered to address electronic exchange scenarios (e.g., distributed query) that do not take place following Interoperability CTE I-1?

Question 30: The process of giving patients a meaningful choice may be delegated to providers or other users of NVE services (as opposed to the patient receiving the choice from the NVE directly). In such instances, how would the provision of meaningful choice be validated?

[S-4]: An NVE must only exchange encrypted IIHI.

Question 31: Should there be exceptions to this CTE? If so, please describe these exceptions.

[S-5]: An NVE must make publicly available a notice of its data practices describing why IIHI is collected, how it is used, and to whom and for what reason it is disclosed.

Question 32: Are there specific uses or actions about which we should consider explicitly requiring an NVE to be transparent? Question 33: Would an NVE be able to accurately disclose all of the activities it may need to include in its notice? Should some type of summarization be permitted?

Question 34: What is the anticipated cost and administrative burden for providing such notice?

Question 35: Should this CTE require that an NVE disclose its activities related to de-identified and aggregated data?

Question 36: Should this CTE require that an NVE just post its notice on a website or should it be required to broadly disseminate the notice to the health care providers and others to which it provides electronic exchange services?

[S-6]: An NVE must not use or disclose de-identified health information to which it has access for any commercial purpose.

Question 37: What impact, if any, would this CTE have on various evolving business models? Would the additional trust gained from this CTE outweigh the potential impact on these models?

Question 38: On what other entities would this have an effect?

[S-7]: An NVE must operate its services with high availability.

Question 39: What standard of availability, if any, is appropriate?

[S-8]: If an NVE assembles or aggregates health information that results in a unique set of IIHI, then it must provide individuals with electronic access to their unique set of IIHI.

Question 40: What further parameters, if any, should be placed on what constitutes a "unique set of IIHI"?

[S-9]: If an NVE assembles or aggregates health information which results in a unique set of IIHI, then it must provide individuals with the right to request a correction and/or annotation to this unique set of IIHI.

Question 41: If an NVE were to honor an individual’s request for a correction to the unique set of IIHI that it maintains, what impact could such a correction have if the corrected information was accessible by health care providers and not used solely for the NVE’s own business processes?

Question 42: Are there any circumstances where an NVE should not be required to provide individuals with the ability to correct their IIHI?

[S-10]: An NVE must have the means to verify that a provider requesting an individual’s health information through a query and response model has or is in the process of establishing a treatment relationship with that individual.

Question 43: What method or methods would be least burdensome but still appropriate for verifying a treatment relationship?

Question 44: Are there circumstances where a provider should be allowed access through the NVE to the health information of one or more individuals with whom it does not have a treatment relationship for the purpose of treating one of its patients?

2. Interoperability CTEs

[I-1]: An NVE must be able to facilitate secure electronic health information exchange in two circumstances: 1) when the sender and receiver are known; and 2) when the exchange occurs at the patient’s direction.

Question 45: What types of transport methods/standards should NVEs be able to support? Should they support both types of transport methods/standards (i.e., SMTP and SOAP), or should they only have to meet one of the two as well as have a way to translate (e.g., XDR/XDM)?

Question 46: If a secure “RESTful” transport specification is developed during the course of this rulemaking, should we also propose it as a way of demonstrating compliance with this CTE?


[I-2]: An NVE must follow required standards for establishing and discovering digital certificates.


Question 47: Are the technical specifications (i.e., Domain Name System (DNS) and the Lightweight Directory Access Protocol (LDAP)) appropriate and sufficient for enabling easy location of organizational certificates? Are there other specifications that we should also consider?

Question 48: Should this CTE require all participants engaged in planned electronic exchange to obtain an organizational (or group) digital certificate consistent with the policies of the Federal Bridge?

[I-3]: An NVE must have the ability to verify and match the subject of a message, including the ability to locate a potential source of available information for a specific subject.

Question 49: Should we adopt a CTE that requires NVEs to employ matching algorithms that meet a specific accuracy level or a CTE that limits false positives to certain minimum ratio? What should the required levels be?

Question 50: What core data elements should be included for patient matching queries? Question 51: What standards should we consider for patient matching queries?

Question 51: What standards should we consider for patient matching queries?

3. Business Practice CTEs


[BP-1]: An NVE must send and receive any planned electronic exchange message from another NVE without imposing financial preconditions on any other NVE.


Question 52: Should this CTE be limited to only preventing one NVE from imposing a financial precondition on another NVE (such as fees), or should it be broader to cover other instances in which an NVE could create an inequitable electronic exchange environment?

Question 53: Should this CTE (or another CTE) address the fees an NVE could charge its customers to facilitate electronic exchange or should this be left to the market to determine?

Question 54: Under what circumstances, if any, should an NVE be permitted to impose requirements on other NVEs?


[BP-2]: An NVE must provide open access to the directory services it provides to enable planned electronic exchange.


[BP-3]: An NVE must report on users and transaction volume for validated services.


Question 55: What data would be most useful to be collected? How should it be made available to the public? Should NVEs be required to report on the transaction volume by end user type (e.g., provider, lab, public health, patient, etc)?

E. Request for Additional CTEs

Question 56: Which CTEs would you revise or delete and why? Are there other CTEs not listed here that we should also consider?

Question 57: Should one or more of the performance and service specifications implemented by the participants in the Exchange be included in our proposed set of CTEs? If so, please indicate which one(s) and provide your reasons for including them in one or more CTEs. If not, please indicate which one(s) and your reasons (including any technical or policy challenges you believe exist) for not including them in one or more CTEs.

Question 58: In the notice of proposed rulemaking (NPRM) we intend to subsequently issue, should the above CTEs as well as any others we consider for the NPRM be packaged together for the purposes of validation? In other words, would it make sense to allow for validation to different bundles of safeguard, interoperability, and business practice CTEs for different electronic exchange circumstances?

Question 59: Should we consider including safe harbors for certain CTEs? If so, which CTEs and what should the safe harbor(s) be?

F. CTE Processes and Standards and Implementation Specification Classifications

1. CTE Life Cycle

Question 60: What process should we use to update CTEs?

Question 61: Should we expressly permit validation bodies to provide for validation to pilot CTEs?

Question 62: Should we consider a process outside of our advisory committees through which the identification and development to frame new CTEs could be done?

2. Interoperability Conditions for Trusted Exchange – Technical Standards andImplementation Specifications Classification Process.

Technical standards and implementation specifications could beassigned to one of three classifications:

1. “Emerging” – This classification would refer to the technical standards and implementation specifications that still require additional specification and vetting by the standards development community, have not been broadly tested, have no or low adoption, and have only been implemented within a local or controlled setting.
2. “Pilot” – This classification would refer to the technical standards and implementation specifications that have reached a level of specification maturity and adoption by different entities such that some entities are using them to exchange health information either in a test mode or in a limited production mode.
3. “National” – This classification would refer to the technical standards and implementation that have reached a high-level of specification maturity and adoption by different entities such that most entities are using or are readily able to adopt and use them to exchange healthinformation to conduct business.

Question 63: What would be the best way(s) ONC could help facilitate the pilot testing and learning necessary for implementing technical standards and implementation specifications categorized as Emerging or Pilot?

Question 64: Would this approach for classifying technical standards and implementation specification be effective for updating and refreshing Interoperability CTEs?

Question 65: What types of criteria could be used for categorizing standards and implementation specifications for Interoperability CTEs? We would prefer criteria that are objective and quantifiable and include some type of metric.

G. Economic Impact

Question 66: We encourage comment and citations to publicly available data regarding the following:

1. The potential costs of validation;
2. The potential savings to States or other organizations that could be realized with the establishment of a validation process to CTEs;
3. The potential increase in the secure exchange of health information that might result from the establishment of CTEs;
4. The potential number of entities that would seek to become NVEs; and
5. The NVE application and reporting burden associated with the conceptual proposals we discuss.

Governance for a Nationwide Health Information Network

The National Coordinator for Health Information Technology (the National Coordinator) is required by section 3001(c)(8) of the Public Health Service Act to establish a governance mechanism for the Nationwide Health Information Network (NwHIN). Through the newly published Request for Information (RFI), public comment will be sought on proposals and options relevant to the governance mechanism currently under consideration. Based on the public comments received, the National Coordinator will issue a subsequent notice of proposed rulemaking (NPRM) to formally propose a governance mechanism for the NwHIN.

Steven Posnack, Director of the Federal Policy Division, ONC gives an excellent overview during the National eHealth Collaborative’s NeHC University on May 11, 2012 of the rule, his slides are available HERE,  and I encourage you to watch the video below:



Governance for a Nationwide Health Information Network

Health Care Innovation Awards

The CMS Innovation Center has announced the first batch of preliminary awardees for the Health Care Innovation Awards.

The Health Care Innovation Awards are funding up to $1 billion in grants to applicants who will implement the most compelling new ideas to deliver better health, improved care and lower costs to people enrolled in Medicare, Medicaid and Children's Health Insurance Program (CHIP), particularly those with the highest health care needs.

Secretary of HHS Kathleen Sebelius announced the first awardees on May 8, 2012:

From the electric light bulb to the Internet, American innovations have made lives better for people in this country and all over the world. 

The kind of work we’ve done to advance technology, communication and so many other aspects of people’s lives is about to get a jump start in health care, thanks to today’s announcement of 26 Health Care Innovation Awards. The awards are part of our We Can’t Wait initiative. 

“What America does better than anyone else is spark the creativity and imagination of our people," said President Obama during his 2011 State of the Union address, and that’s exactly what the Health Care Innovation Awards aim to do. These awards provide our most creative minds—whether they’re health care professionals, technology innovators, community-based organizations, patients’ advocacy groups, or others—with the backing they need to build the strong, effective, affordable health care system of the future. These are 26 unique projects, tailored to the needs of patients by local doctors, hospitals, and other leaders in their communities. 

These awards will save $254 million over the next three years by testing innovative approaches to improve the quality of health care and prevent disease and illness. And we’re just getting started. We’ll announce another round of innovation awards in June. 

Awardees are chosen not only because they had innovative strategies to get health care to some of our hardest to reach populations, but also because their programs are expected to help expand the well-trained health workforce we need for a strong and resilient economy, which is essential for quality care. 

One of these projects is Emory University’s example of ingenuity—a collaboration that trains health professionals and uses tele-health technology to link critical care units in rural Georgia to critical care doctors in Atlanta hospitals. The project aims to save money and improve the quality of care by reducing the need to transfer patients from rural hospitals to critical care units in Atlanta. 

The Health Care Innovation Awards are investments in American innovation. These new awardees represent America at its best. We’re proud of the organizations that are part of this group, and—given the thousands of proposals that poured in when we first announced this program—we’re sure we’ve only scratched the surface of our ability to transform health care with this first set of awards.

via White House Blog

Powered by Socrata

The new projects include collaborations of leading hospitals, doctors, nurses, pharmacists, technology innovators, community-based organizations, and patients’ advocacy groups, among others, located in urban and rural areas that will begin work this year to address health care issues in local communities. This initiative allows applicants to come up with their best ideas to test how we can quickly and efficiently improve the quality and affordability of health care.

Projects include:

• Emory University’s collaboration with area health systems to train health professionals and use tele-health technologies to link critical care units in rural Georgia to critical care doctors in Atlanta hospitals. This project aims to save money and improve the quality of care by reducing the need to transfer patients from rural hospitals to critical care units in Atlanta;
• Camp Courage, which is a program in Minneapolis-St. Paul serving adults with disabilities and complex medical conditions. The grant will enable Camp Courage to save money and improve the quality of care by creating a patient-centered medical home focused on highest-cost Medicaid patients;
• A University Hospitals of Cleveland initiative to increase access and care coordination for children beyond the walls of the doctor’s office. This initiative aims to save money and improve the quality of care by extending the expertise of an elite children’s hospital to local pediatric practices treating children with complex chronic conditions and behavioral health problems with physician extension teams and telehealth.

Preliminary awardees were chosen for their innovative solutions to the health care challenges facing their communities and for their focus on creating a well-trained health care workforce that is equipped to meet the need for new jobs in the 21st century health system. The Bureau of Labor Statistics projects the health care and social assistance sector will gain the most jobs between now and 2020.

These first awards total $122.6 million. The Center for Medicare and Medicaid Innovation within the Centers for Medicare & Medicaid Services at HHS administers the awards through cooperative agreements over 3 years.

For more information on the awards, go to: innovation.cms.gov/initiatives/innovation-awards/project-profiles.html