|
Health Information Security and Privacy Collaborative Project
Background
Taken from executive summary
In the first phase of the project, the 34 teams followed a defined process: (1) assess variations in organization-level business policies and state laws that affect health information exchange; (2) identify and propose practical solutions, while preserving the privacy and security requirements in applicable federal and state laws; and (3) develop detailed plans to implement solutions.
In the second phase of the project, the 34 teams selected a foundational component of their larger implementation plan to be completed in a 6-month time frame. During this time, additional participation was sought for the HISPC's third phase, and new states and territories joined the original HISPC teams to review high-priority areas where multistate collaboration could foster the development of common, replicable solutions.
The third phase, which begins in 2008. comprises 7 multistate collaborative privacy and security projects focused on analyzing consent data elements in state law; studying intrastate and interstate consent policies; developing tools to help harmonize state privacylaws; developing tools and strategies to educate and engage consumers; developing a toolkit to educate providers; recommending basic security policy requirements; and developing interorganizational agreements. Each project is designed to develop common, replicable multistate solutions that have the potential to reduce variation in and harmonize privacy and security practices, policies,and laws. A crosscollaborative steering committee has been established for phase 3 to facilitate knowledge transfer among collaboratives and identify points of intersection. Participating states and territories are summarized in the table below.
| Collaborative | Participating States and Territories | |
| N | Abbreviations | |
| Consent 1 -Data Elements | 11 | IN, ME, MA, MN, NH, NY, OK, RI, UT, VT, WI |
| Consent 2 - Policy Options | 4 | CA, IL, NC, OH |
| Harmonizing Privacy Law | 7 | FL, KY, KS, MI, MO, NM, TX |
| Consumer Education and Engagement | 8 | CO, GA, KS, MA, NY, OR, WA, WV |
| Provider Education | 8 | FL, KY, LA, MI, MO, MS, TN, WY |
| Adoption of Standard Policies | 10 | AZ, CO, CT, MD, NE, OH, OK, UT, VA, WA |
| Interorganizational Agreements | 7 | AK, GU, IA, NJ, NC, PR, SD |
