Healthcare Providers Voice Gripes At EHR Usability Hearing

Apr 26, 2011 | Healthcare Tech

SOURCE:  InformationWeek

Clinicians want electronic health records (EHRs) of the future to be more user friendly than those of today when trying to enter orders and grasp subtle changes in a patient’s condition, according to experts testifying on a care provider perspective panel at the Health IT Policy Committee’s Adoption/Certification Workgroup hearing on EHR usability.

“All too often, we hear from providers that they look forward to the day when the technology works for them, instead of them feeling like they work for the technology,” said newly minted national coordinator for health IT Farzad Mostashari, MD, in his opening remarks at the April 21 meeting. “We hear from providers that they didn’t know what they were buying until they bought it, what it would be like to use, that there was not the transparency they hoped for. We hear about potential safety issues and about errors that can be attributed to the human-computer interface.”

Mostashari said he hoped the meeting would generate guidance around metrics and measures that could be used to define usability, but that there was potential to go too far.

“There’s a real risk that if this is done in a poorly thought-through way, if we take a too proscriptive approach, if the science isn’t there for how usability is to be measured or if we are too subjective, we could end up causing well-intentioned but severe unintended consequences,” he cautioned. “We could end up, in the extreme, mandating or regulating the design of software, and freeze in place the technology approaches of today. We could hinder the innovation that is so desperately needed–the disruptive and constructive innovation we need for tomorrow’s technology. That’s our critical challenge.”

Mostashari further cautioned that he did not intend for the government to create a pass/fail testing system, whereby poorly scoring EHRs couldn’t be marketed. “That’s not the purpose of what we’re trying to do,” he added.

Christine Sinsky, MD, a board-certified internist who practices at Medical Associates Clinic and Health Plans in Dubuque, Iowa, testified she has seen deep discouragement among physicians with their EHRs because of usability issues. Improvements were “urgently needed,” she said.

Sinsky, who speaks on practice redesign and the medical home, said EHR-associated administrative work had added two hours to the clinician workday. In addition, she said, many of the systems presented data in a “cluttered” way, leaving physicians struggling to identify meaningful information. This causes a “needle in a haystack” dynamic, she said, with “complex navigational pathways resulting in hard to see patterns.” Sinsky noted that just because a 15-page document has been imported into the electronic record, “doesn’t mean it’s easily available.”

Read More

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more