DS4P+Jericho-UT+Austin+Pilot

include component="page" wikiName="siframework" page="Data Segmentation HeaderPilots2" =Overview= toc The Pilot involves the exchange of simulated Electronic Health Records (EHR) between large healthcare providers using Nationwide Health Information Network (NwHIN) Information Technology (IT) standards. Each access request over the simulated NwHIN Exchange (also called eHealth Exchange) will be decided in real time based on computable policy that includes privacy metadata. Patient consent directives (PCD) will be included in the evaluation of the access request. The Pilot will explore three aspects of this exchange: • How is the PCD correlated with the patient identity; • How is the PCD retrieved for use in the access control decision; and • How is the consumer informed of the request and access control decision.

Healthcare consumers currently do not have the ability to review remote electronic requests on the NwHIN Exchange for their Protected Health Information (PHI) or learn the outcome of those requests. The Pilot will add transparency to the exchange of PHI released by the consumer's provider organization to requesting organizations. Further, the Pilot will explore how subsequent requests made to requesting organizations (3rd party requests) can be reported to consumers. Currently there is no standardized way consumers can review the effect of their PCD on requests for their EHR. The goal of the pilot is to present a secure, scalable solution that allows consumers to evaluate if their PCD is operating as they planned.

In addition, transparency in access requests may allow consumers to identify possible medical identity theft or cases of mistaken identity that could impact their subsequent treatment. The outcome of the Pilot process will provide a much-needed solution that will protect consumers from possible financial loss and improve patient safety. The Pilot will also provide technical solutions that could be used to meet increasing privacy demands by patients and applicable laws.

Technical approach
We propose development of a data model and workflow that supports centralized storage and retrieval of PCD from a repository consistent with the Data Segmentation for Privacy Use Case document and current health IT standards. Pilot members will select a mechanism that reports access requests to consumer accounts at the repository. The mechanism will also allow reporting of third party requests for consumer PHI to the repository and reduce consumer to PCD correlation errors.

The work will expose gaps in extant standards and provide a foundation for proposing additional standards required for widespread NwHIN adoption. Particular emphasis will be given to exchanged privacy metadata and any requirement for additional privacy metadata identified in the pilot. The outcome of the Pilot will be a Reference Implementation (RI) that will provide evidence-based artifacts for evaluating the work and relevance to current exchange systems. =Objectives= This pilot will address: • Reduced patient correlation errors • Exchange of metadata identifying repository location and credentials • Patient identity and medical fraud • Secondary use of PHI • Greater patient awareness of access to their PHI

Goals are to:

• Exchange and enforce privacy metadata to ensure proper policy-based disclosure and redisclosure of PHI • Allow patients to authenticate to their provider through their PCD repository, establishing the EHR access request reporting path and reducing patient collation errors • Accept and display reports from information owners on access control decisions for requests for the patient’s PHI • Create a token passing scheme that facilitates secondary use reporting • Demonstrate dynamic reporting of access to a patient’s PHI and their ability to change their PCD using their PCD central repository

=Stakeholders & Points of Contact= =Demonstrated Standards= This pilot will demonstrate: =Ecosystem Diagram= =Pilot Project Timeline= =Anticipated Resources=
 * **Name** || **Role** || **Email** ||
 * Jericho Systems || Participant || david.staggs@jerichosystems.com ||
 * HIT Program at UT Austin || Participant || field@austin.utexas.edu ||
 * IHE XDS.b
 * HL7 Consent Directive DSTU
 * **Milestone ** || **<span style="font-family: Arial,Helvetica,sans-serif;">Target Date ** || **<span style="font-family: Arial,Helvetica,sans-serif;">Respon sible Party** ||
 * <span style="font-family: Arial,Helvetica,sans-serif;">Kick off and Logistics || <span style="font-family: Arial,Helvetica,sans-serif;">February 18, 2013 || <span style="font-family: Arial,Helvetica,sans-serif;">Jericho Systems ||
 * <span style="font-family: Arial,Helvetica,sans-serif;">Basic Infrastructure || <span style="font-family: Arial,Helvetica,sans-serif;">March 25, 2013 || <span style="font-family: Arial,Helvetica,sans-serif;">Members ||
 * <span style="font-family: Arial,Helvetica,sans-serif;">AuthN via Repository || <span style="font-family: Arial,Helvetica,sans-serif;">May 25, 2013 || <span style="font-family: Arial,Helvetica,sans-serif;">Members ||
 * <span style="font-family: Arial,Helvetica,sans-serif;">Reporting Capability || <span style="font-family: Arial,Helvetica,sans-serif;">July 25, 2013 || <span style="font-family: Arial,Helvetica,sans-serif;">Members ||
 * <span style="font-family: Arial,Helvetica,sans-serif;">Complete || <span style="font-family: Arial,Helvetica,sans-serif;">September 25, 2013 || <span style="font-family: Arial,Helvetica,sans-serif;">Members ||

=Success Metrics= <span style="font-family: Georgia,serif;">• Exchange and enforcement of privacy metadata (e.g. refrain, POU, sensitivity, confidentiality) <span style="font-family: Georgia,serif;">• Exchange of PCD location and credential metadata <span style="font-family: Georgia,serif;">• Exchange of access reporting information to patient <span style="font-family: Georgia,serif;">• Exchange and enforcement of updated PCD =Reference Materials= include component="page" wikiName="siframework" page="Data Segmentation for Privacy Initiative Contacts" include component="page" wikiName="siframework" page="space.template.inc_contentleft_end"
 * __**Document**__ || __**Description**__ ||
 * [[file:SIFramework_DS4P_UC_Jericho_12NOV2013_approved_guidance.pdf|Jericho/UT-Austin Pilot IG 2013-11-12 (pdf)]] ||Implementation Guidance for Jericho/UT-Austin Pilot (Approved) ||
 * [[file:SIFramework_DS4P_UC_Jericho_4NOV2013.docx|Jericho/UT-Austin Pilot IG 2013-11-04 (docx)]] ||Implementation Guidance for Jericho/UT-Austin Pilot  ||