SD eHEALTH Collaborative  
eHealth CMS EHR Demo HIE/REC News Committees

Health Information Security and Privacy Collaborative Project

Background

Taken from executive summary

In the first phase of the project, the 34 teams followed a defined process: (1) assess variations in organization-level business policies and state laws that affect health information exchange; (2) identify and propose practical solutions, while preserving the privacy and security requirements in applicable federal and state laws; and (3) develop detailed plans to implement solutions.

In the second phase of the project, the 34 teams selected a foundational component of their larger implementation plan to be completed in a 6-month time frame. During this time, additional participation was sought for the HISPC's third phase, and new states and territories joined the original HISPC teams to review high-priority areas where multistate collaboration could foster the development of common, replicable solutions.

The third phase, which begins in 2008. comprises 7 multistate collaborative privacy and security projects focused on analyzing consent data elements in state law; studying intrastate and interstate consent policies; developing tools to help harmonize state privacylaws; developing tools and strategies to educate and engage consumers; developing a toolkit to educate providers; recommending basic security policy requirements; and developing interorganizational agreements. Each project is designed to develop common, replicable multistate solutions that have the potential to reduce variation in and harmonize privacy and security practices, policies,and laws. A crosscollaborative steering committee has been established for phase 3 to facilitate knowledge transfer among collaboratives and identify points of intersection. Participating states and territories are summarized in the table below.

Collaborative Participating States and Territories
N Abbreviations
Consent 1 -Data Elements 11 IN, ME, MA, MN, NH, NY, OK, RI, UT, VT, WI
Consent 2 - Policy Options 4 CA, IL, NC, OH
Harmonizing Privacy Law 7 FL, KY, KS, MI, MO, NM, TX
Consumer Education and Engagement 8 CO, GA, KS, MA, NY, OR, WA, WV
Provider Education 8 FL, KY, LA, MI, MO, MS, TN, WY
Adoption of Standard Policies 10 AZ, CO, CT, MD, NE, OH, OK, UT, VA, WA
Interorganizational Agreements 7 AK, GU, IA, NJ, NC, PR, SD