What policies shouldn’t be lacking for managing health data?
While chief information officers, IT directors, and their staff are increasing the priority of their organizations’ information management strategies, many still report a lack of key data policies and...
View ArticleHIE organizations discuss non-targeted query practices
Monday’s Privacy & Security Tiger Team virtual hearing on non-targeted query among healthcare information exchanges (HIEs) showcased the various ways in which these organizations use non-targeted...
View ArticlePrivacy and security considerations for the new NV DIRECT
The Nevada Department of Health and Human Services (DHHS) announced last week that NV DIRECT, a secure, encrypted web-based communication system for clinical staff, was now available for health care...
View ArticleTiger Team analyzes HIE participation agreements
Following last week’s non-targeted query/response virtual hearing, the Privacy & Security Tiger Team began discussion of potential policy recommendations yesterday and raised some key themes for...
View ArticleONC, HIEs work on secure messaging during disasters
The Office of the National Coordinator for Health IT (ONC) has been working with 10 state health information exchanges (HIEs) to ensure they have established infrastructure for secure health...
View ArticlePrivacy & Security Tiger Team preps for HITPC meeting
The Privacy & Security Tiger Team met yesterday to continue its work toward finalizing recommendations on health information exchange (HIE) queries for its August presentation to the health IT...
View ArticleOIG concerned with CMS data hub security testing delays
The Office of Inspector General (OIG) recently reviewed the Centers for Medicare & Medicaid Services’ (CMS) implementation of the Data Services Hub (Hub) and found that missed security testing...
View ArticleTiger Team reviews accounting of patient data disclosures
Yesterday’s HIT Policy Committee Privacy & Security Tiger Team meeting discussed the background of accounting of disclosures for patient data and brought forward prevalent topics for its Sept. 6...
View ArticleetHIN bolsters communication with direct secure messaging
With a significant volume of patients and providers in its network to consider, the East Tennessee Health Information Network (etHIN) recently agreed to use DataMotion’s Direct secure messaging...
View ArticleHow staff training can enable HIE despite tough privacy laws
Depending on the state, getting patients to allow their health information to be part of health information exchange can be a straightforward or circuitous process. Minnesota serves as an example of a...
View ArticleEHNAC, Kantara collaborate on data exchange accreditation
The Electronic Healthcare Network Accreditation Commission (EHNAC) and Kantara Initiative (Kantara) recently agreed to partner up and collaborate on user-level registration authorities, organizational...
View ArticleHISP to HISP: Building trust by joining Mass. state pipeline
If you want entrance into the health information service provider (HISP) communication exchange world in the Bay State, you must be trusted. And by trust, we mean ensuring authorization among...
View ArticleHow an ACO should maintain health data privacy and security
Whether it’s a Medicare Pioneer Program or a commercial payer, an Accountable Care Organization (ACO) that contains healthcare providers, plans and clearinghouses must comply with HIPAA standards and...
View ArticleTexas Health Services Authority, HITRUST form CSF pact
The Texas Health Services Authority (THSA) has announced it will employ the Health Information Trust Alliance (HITRUST) Common Security Framework (CSF) to standardize its approach to certification that...
View ArticlePatient identity matching: Addressing privacy questions
As healthcare technology innovation and interoperability needs continue to grow in areas such as healthcare information exchange (HIE) or accountable care organizations (ACOs), ensuring that patient...
View ArticleONC’s “Data Segmentation for Privacy” completes pilot phase
The next phase of the Office of the National Coordinator for Health Information Technology (ONC) Data Segmentation for Privacy (DS4P) initiative was completed this week when the project’s pilots...
View ArticleTiger Teams seeks to conclude accounting of disclosures talks
The HIT Policy Committee Privacy & Security Tiger Team is working toward final recommendations for updating requirements related to accounting of disclosures of protected health information (PHI)....
View ArticlePrivacy and Security Tiger Team preps for HIT Policy meeting
A step closer toward finalizing recommendations for presentation to the December 4 HIT Policy Committee meeting, the Privacy & Security Tiger Team again discussed accounting of disclosures and...
View ArticleONC outreach will help shape HIE security in 2014
Generally, the Department of Health and Human Services (HHS) and Office for Civil Rights (OCR) govern healthcare organizations from a federal regulatory perspective, but the Office of the National...
View ArticleMass. HIE Phase 2 development: Privacy deliberations
Massachusetts moved forward with Phase 2 of its state health information exchange (HIE) project yesterday, called “Query and Retrieve”. Massachusetts healthcare providers are now able to pull patient...
View Article