Saturday, February 11, 2012

"The Banks Can Do It, Why Can't Hospitals?"

I have often heard the refrain that while away from one's home in Terre Haute, one can withdraw money from an ATM machine in Timbuktu. So, why can't my medical records from birth be called up instantly from the Timbuktu Regional Hospital if I fall unconscious at the Festival au Désert and forgot my wallet?

In other words, computing in the banking industry is perfected, so why can't healthcare get its act together? (Irrespective of the sea change of difference between simple financial data and incredibly complex medical data.)

Not so fast, health IT Ddulites:

New York Times
February 9, 2012
Users of Citibank Bill-Pay App Charged Twice

A program error at Citibank was not detected for months.

Citigroup’s effort to become “the world’s digital bank” has encountered a snag. ["Glitch" is the health IT-specific term - ed.]

A technical bug caused Citi, the nation’s fourth largest bank by deposits, to double the charge for customer payments in recent months. Some customers using their iPads to settle their cable bill or mortgage payment, for example, actually paid twice, according to customers and a bank official.

The problem, which began in July but went undetected by the bank until December, prompted bogus payments big and small. Some customers quickly spotted the redundant transaction and complained to Citi, while other consumers were caught off guard when the bank recently notified them of the discrepancy. The snag even led some unsuspecting customers to overdraw their accounts, though a bank spokesman said that was rare.

Citi has traced the error to its nascent iPad application. Other mobile applications and the bank’s broader online bill payment system were immune from the problem, the bank said.

But a few clients who were charged twice said they had not used an iPad to pay bills. And the Citi spokesman declined to disclose the number of customers caught up in the mishap, saying only that it amounted to “a limited number of clients.”

[It would appear that Citi was not in complete control of its systems; the systems were in control of Citi - ed.]

Instead, the spokesman said that fewer than 2 percent of Citibank transactions executed through an iPad were counted twice. The spokesman would not elaborate on the number of iPad transactions at Citi, citing concerns about releasing proprietary data.

[2% of a very large number is still a large number - ed.]

... While Citi may be the first company to stumble with the iPad, it is far from the only bank to encounter electronic hiccups. Customers have long been befuddled by accidental A.T.M. withdrawals and so-called transaction gaps, where a customer pays online but the transaction fails to process. A number of regional banks have also double-dipped with customer payments and even JPMorgan Chase, the nation’s biggest bank, recently had a minor brush with duplicate online withdrawals.

The mishaps, while minor, underscore the risks that customers face when banks wade into the fledgling world of online banking.

[That's peanuts compared to the risks they face when hospitals wade into the fledgling world of electronic medical records and CPOE - ed.]

While banks are scrambling to please customers who prefer clicking a mouse to dealing with tellers, the industry is learning that new technologies come with some growing pains.

“It’s a challenge for banks to keep up with the device proliferation — everything is moving very fast,” said David Albertazzi, a senior analyst with Aite Group, which advises financial institutions on technology and regulatory issues. “It is very important that financial institutions balance speed-to-market versus safety and soundness.”

[Healthcare seems immune from that wise caveat. 'Full steam ahead, icebergs be damned' seems the siren call for IT in that domain - ed.]

... Last year, JPMorgan Chase owned up to its gaffe, a technical hitch with an online cash transfer system, within a day. “People make mistakes. Unfortunately, we made one twice,” Ryan McInerney, Chase’s chief executive of consumer banking, told customers, who received a $25 cash bonus for their troubles.

[Every excuse term in the book's been used here - growing pain, hiccup, snag, bug, hitch, flaw - except one - 'incompetence' - ed.]

Citi’s response, however, appears to have been not nearly as prompt. The error began in July, within days of the bank introducing its gleaming new iPad application. The coming-out for the application included a press release announcing the “new standard for digital banking” with a “one-of-a-kind app.”

... “EBusiness professionals at retail banks — and other financial institutions — should pay close attention to what Citibank has done, particularly its willingness to experiment and try out new ideas in a brand-new channel,” Forrester Research, a technology research company, said in a report.

[Healthcare IT is a big experiment, except it's not just dollars and cents that can get farkled - ed.]

But almost immediately, a smattering of anonymous customers began posting concerned comments online, wondering whether it was their own fault — the product of double-clicking. Then fingers began to be pointed at the bank. One online commenter posting on the company’s Apple store Web site called the application “very unreliable.”

In late December, the bank tracked the error to an internal flaw. A technical command on the bank’s iPad application, it turned out, was wrongly set to redo transactions that had initially failed.

The bank began alerting customers to the snag in mid-January, and made another round of calls this week, including to clients who say they had not paid their bills through the iPad.

... Citi has had other technology problems in the last year. Last summer, the bank disclosed that hackers had stolen the names and addresses of hundreds of thousands of North American credit card customers. A week later, the bank revised its estimates, saying that about 80 percent more customers had been ensnared than previously thought.

The breach, which did not include Social Security numbers or security codes, was a lesson for Wall Street firms. Big banks, experts say, are now more reluctant to estimate the scope of a problem in case the numbers grow.

“It’s very challenging to really pinpoint the number of customers affected,” Mr. Albertazzi said. “It’s the nature of the beast.”

If these growing pains, hiccups, snags, bugs, hitches, and flaws are the "nature of the beast" in electronic banking systems, one can only wonder why banking is held up to be the "gold standard" that healthcare has to equal.

Healthcare has a long tradition and obligations to implement new technologies with the greatest of caution and care, using clinical trials based on the scientific method, and with informed consent. Banking lacks such traditions. The healthcare IT industry has largely abandoned them.

While a bank's computing may make a mistake with a decimal point, a hospital's computer errors can injure or kill people.

The current rush to universal health IT needs to slow down. Further, HIT industry pundits need to stop making comparisons to other industries that are both irrelevant and unwarranted.

-- SS


Anonymous said...

The consultant talks about banking IT safety, but, did anyone ever die from a banking IT flaw? Just wondering.

InformaticsMD said...

Anonymous February 11, 2012 9:13:00 PM EST wrote:

The consultant talks about banking IT safety, but, did anyone ever die from a banking IT flaw? Just wondering.

Perhaps if they had a myocardial infarction carrying the very heavy bags of money they received due to a banking IT error.

-- SS