Remote patient monitoring and telemedicine in general requires considerable organizational agility and integration between departments and external organizations. It is complex. In addition, all of this needs to be carried out within the boundaries of HIPAA and its requirements for patient data security.

UTM Healthcare offers consulting services to support implementation of RPM and meeting HIPAA requirements.


One-stop implementation consulting for any UTM Healthcare product

UTM:RPM INTEGRATED is a  comprehensive package of consulting services that provide hospitals and other medical providers with everything required to launch remote patient monitoring. This integration simplifies the organizational complexities of implementing RPM using internal resources. Depending on the healthcare provider’s requirements, UTM:RPM,  UTM:RPM CONNECT, UTM:RPM MULTI-PATIENT or UTM:FLEX can be combined with smartphones, biometric devices, and case management follow-up services to provide a one-stop solution that connects patients and medical staff in a variety of healthcare settings.

RPM Implementation Check List

Implementing remote patient monitoring is a demanding organizational process. Here are some key elements of every successful implementation project:

Steering Committee

  • Overall, telemedicine is primarily a change management project. Therefore, form a steering committee from the beginning where each stakeholder is represented, e.g., clinical, administration, service/ logistics provider, IT. A senior manager must be the chair of the committee and actively involved.

Patient Recruitment Process

  • Thoroughly design patient recruitment process and ensure that key clinical stakeholders are motivated. Patient recruitment is the ultimate bottleneck.

Design Device Logistics

  • Design specific processes for device logistics, incl. help desk/ support. and management, citizen training programs, and training for nurses and doctors as well. The overall purpose is to lower visits/ manual maintenance remotely/ at patient’s homes.

Define and Standardize Disease Protocols

  • Make all disease monitoring protocols standardized and shareable, since several stakeholders need to share data and knowledge, i.e. clinics, logistics and call centers. Choose highest impact disease first. Involve medical specialists in questionnaire design.

Super Users

  • Assign super users (nurses) to each RPM program. They will provide your best and most responsive program support.

Patient Compliance and Protocol changes

  • Monitor patient compliance continuously and maintain flexible protocol change options with purpose of maintaining high compliance.

Measure Success

  • Measure success factors based on milestones, clinical outcomes, user satisfaction, improved quality of life and economics/ savings per patient/ population.


UTM:Healthcare provides consulting support to the health industry

The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) provides a federal floor of safeguards to protect the privacy and security of protected health information (PHI). While the Security and Privacy Rules both share a common goal of safeguarding PHI, the Security Rule, later expanded upon with the Health Information Technology for Economic and Clinical Health Act (“HITECH” Act) and the 2013 HIPAA Omnibus “Final” Rule requires covered entities and their business associates to implement appropriate administrative, physical and technical safeguards to protect electronic protected health information (“ePHI”).

Risk Analysis and Management Plan

To achieve HIPAA compliance, the Security Rule requires covered entities and their business associates to implement a Risk Analysis and Risk Management Plan. Risk analysis and risk management are standard information security processes and are critical to a covered entity’s Security Rule compliance efforts.

Periodic Risk Analysis and Management Review

The United States Department of Health and Human Services recommends organizations conduct a risk analysis periodically, particularly whenever technology or business operation changes are planned or implemented. A properly-conducted HIPAA risk analysis enables an organization’s management to understand potential threats and determine the necessary actions needed to reduce risk. Contact us if you would like to learn more about how YouThisMe can help your organization achieve HIPAA compliance with an information security risk analysis and risk management plan.