1 The John Hampden Practice, 97 High Street, Prestwood HP16 9EU
Department of Surgery, Charing Cross Hospital, Fulham Palace Road, London
W6 8RF
2 Department of Surgery, St Richard's Hospital, Spitalfield Lane, Chichester
PO19 4SE, UK
Correspondence to: Mr Jason Smith, The John Hampden Practice, 97 High Street, Prestwood HP16 9EU, UK E-mail: jj.smith{at}imperial.ac.uk
| SUMMARY |
|---|
|
|
|---|
| INTRODUCTION |
|---|
|
|
|---|
However, the information even on credible websites is not always accurate or current.1 When patients consult a general practitioner (GP), they not infrequently bring a printout from a website. Most practices in the UK now have internet access via an NHS Net connection. Yet, despite the obvious potential for improvements in practicefor instance, direct and rapid consultation with hospital specialists,2 ordering of investigations and receipt of results, access to evidence-based databases,3 communication with patients and continuing medical educationtake-up of the service was initially slow. Some GPs have set up their own practice websites, but others will have asked, Why invest time and money when so many information sites exist already?
In view of the vast potential of the internet for use in general practice, a questionnaire survey to assess the ways it and the NHS Net are used, and the information and services offered to patients, with particular emphasis on practice-based websites, was performed in southern England.
| METHODS |
|---|
|
|
|---|
| RESULTS |
|---|
|
|
|---|
|
21 practices had a website, in 3 cases only just made available; the mean time for which websites had been accessible was 12 months. Practice staff had designed 2 of the sites; the others had been commercially designed. 1 in 4 of these practices were unhappy with the site itselffor example, because of expectations unfulfilled or perceived high maintenance costs.
Of the 50 practices connected to the internet but without a website, 35 were planning to develop one in the future. When asked the likely cost, most respondents thought it would be £250-500 and less than £100 a year for maintenance.
For those practices with websites, the information and services available are shown in Table 2. In most cases, the information mirrored that in their practice leaflet. Some offered electronic self-help leaflets and advice on what to do in an emergency. A few sites offered dynamic content based on user input or an end product after completion of an online form, repeat prescriptions being the most common such application. On examination of the practice websites engaging in data transfer, we found that in no case was the data transfer being made over a secure server/connection.
|
| DISCUSSION |
|---|
|
|
|---|
One curious feature of the data is that more practices declared themselves connected to the NHS Net than to the internet: this reflects a misunderstanding since the NHS Net allows full access to the internet as well. The reverse does not apply as commercial internet service providers (used by 5 practices) cannot offer access to the NHS Net. The survey also revealed some unrealistic notions of cost. Of those practices contemplating establishing a website, most thought that the initial expenditure, including design, should be less than £500. In the commercial sector, this sort of financial commitment would provide a basic site of just 3-5 pages, with two or three images and no dynamic content (i.e. no capability for interactive service provision). The £50 a year that most thought an acceptable price for maintenance was similarly unrealistic: once a website is online, the files have to be held on a server. In effect, this means renting space on a web-host's hard drive (which the host has to purchase and maintain), renting bandwidth (which relates to site activity) and the continued upkeep of the domain name. Some of the dissatisfaction expressed with websites in this survey may be traceable to lack of expenditure on design and maintenance.
Clearly, the establishment of a general practice website demands much thought. Disadvantages are the expense of the site and associated experience, the need for special training, and the hazard that third parties may gain access to confidential information via electronic transfers. So, why make the effort? The main reason is to provide local information that is not available on the larger sites. Links to the general sites can be provided if the content is judged accurate; in this way, the GP extends his or her role as trusted adviser. The website can provide local information about the practice and other health facilities, and can offer services to patients. From our survey, it seems that the specific facilities of the NHS Net, such as access to patient results and direct hospital outpatient bookings, are at present little used. The questionnaire did not ask why these facilities are not used and one can only speculate about the reasons, such as unfamiliarity with the system and lack of facilities in the provider units. Time constraints appear to be an important factor in failure to use information technology: in one of the practices questioned, this was the reason why e-mail was the only NHS Net service used.
According to one recent study, just 26% of practices have a computer in the consulting room,4 but other experience indicates that practitioners, once committed, quickly learn how to navigate to the best sites.
The single most concerning aspect of this study was that of security of data. None of the practices using online forms for the transmission of patient information did so over a secure connection. Protection of such information is a fundamental reason for the inception of the NHS Net. The NHS Net is the largest virtual private network in the world; it offers security that no standard website or internet connection can provide, access being controlled by routing traffic through specific servers with strict controls on the IP (internet protocol) addresses of the computers attached to it. Security of patient data is a serious matter: in UK law the penalties for disclosure of confidential data are severe. Special security measures are required since, according to a UK Government report, 60% of organizations experienced a security breach in the past two years
[http://www.dti.gov.uk/cii/datasecurity/infosecuritybreachessurvey2000/index.shtml].
Computer hackers (correctly termed crackers) attack websites by intercepting data transmission or exploiting loopholes in security of networks or programs. The potential to do this to patient information is obvious. The following link from the NHS Information Authority summarizes the important aspects of security for anyone considering establishing a medically related website:
[http://web.archive.org/web/20001218045900/www.standards.nhsia.nhs.uk/sdp/resource/index.htm]
For online forms such as repeat prescriptions, the server should be equipped with a minimum of 128-bit secure socket layer (SSL) encryption, recognizable by https rather than http at the start of the address. Information from these forms is to be sent via NHS Executive approved encryption. In addition, a firewall must be established between the practice network, the NHS Net, and any other external network, to prevent unauthorized access to confidential data. All incoming files and e-mails, especially from the internet, should be scanned by an antivirus package. For repeat prescriptions, special measures are needed to check that drug information entered by the patient is correct and that non-patients are not misusing the system. Official advice on what should and should not be included, for patient purposes, on a medically related website is obtainable from the following:
[http://www.doh.gov.uk/nhsidentity/websites.htm]
[http://www.e-envoy.gov.uk/publications/webqualitybrief/design-framework/].
The internet is here to stay in one form or another and all general practitioners should embrace the technology and make it work efficiently and securely for themselves and their patients.
| REFERENCES |
|---|
|
|
|---|
This article has been cited by other articles:
![]() |
Minerva BMJ, August 16, 2003; 327(7411): 402 - 402. [Full Text] [PDF] |
||||
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||