EHR Data Management Policy

Description of the healthcare setting
The data management policy will be developed for a general hospital which provides different kinds of services for patients of varying age groups having varied disease conditions. The general healthcare setting incorporates all the three types of healthcare provision which are primary, secondary and tertiary healthcare services.
Scope, purpose, and stakeholders who are impacted by the policy 100
The scope of this policy for managing data will cover how electronic health records within the healthcare organization are going to be implemented.  Therefore, the policy will entail how data is going to be collected efficiently; stored and utilized when the need arises. Therefore, the purpose of the data management policy will be ensuring that health records are available instantly and securely whenever they are needed by the respective users. The stakeholders for this particular data management policy will be the patients, healthcare providers staff and volunteers and the healthcare management committee members.
Summary of the process for creating the policy
Steps and process for producing the policy
In the course of developing this policy, nine steps will be put into consideration. The first step is identifying the need for managing EHR, data within the healthcare. The second step is identifying the responsible stakeholders to take responsibility for the management of data. The third step is gathering information regarding legal and ethical obligations, understanding of the EHR system and how other policies that are used by other healthcare organizations. The fourth step entails drafting the policy which is followed by consulting with the appropriate stakeholders. The sixth step is finalizing and then approving the policy. The seventh phase is considering whether there are necessary procedures that ought to be put in place in order to support internal policies. The eighth step is the implementation of the policy while the ninth phase is monitoring and revising were there are loopholes.
Resources that would be consulted
Some of the resources that would be consulted will comprise of other policy guidelines that have been developed in other healthcare institutions, past record keeping materials and guidelines, specialists in the sector and stakeholders from within and outside the organization.
Roles of stakeholders that will be involved in creating the policy
The role of the patients also referred to within the policy as service users or beneficiaries will be to take part in testing the system and ascertaining its effectiveness. The staff and volunteers role will be to collect data and facilitate with any necessity that might arise in the course of formulating the policy. Lastly, the management committee will facilitate in providing funds for the entire process and approving the policy once formulated.
The EHR policy for managing data
Data controller
The data controller will be responsible for ensuring that the policies set are properly implemented
Data owner
 Every set of data will have a data owner. The responsibility of a data owner is ensuring quality and integrity of data is upheld.
Data Custodian
This is the individual or department in which the data which the data will be entrusted. Their role is process data and appropriately storing collected data from electronic health records. Therefore, the data custodian is also expected to uphold integrity and confidentiality.
Data Users
Data users are the healthcare providers using or processing EHR data. They are mandated to conduct the activities in a manner that ensures that the data is properly protected by ensuring that there are integrity, confidentiality, and more importantly availability.