Personal data protection in Electronic Health Records and the mandatory use of HL7 standards in Mexico

Size: px
Start display at page:

Download "Personal data protection in Electronic Health Records and the mandatory use of HL7 standards in Mexico"

Transcription

1 Personal data protection in Electronic Health Records and the mandatory use of HL7 standards in Mexico Dr. Maki Esther Ortiz Domínguez Viceminister of Integration and Development of the Public Health Sector Mexican Ministry of Health May 18 th 2011 Ginebra Suiza

2 Regulatory Background Mexican legal framework regulates in detail personal data manipulation: Mexican Constitution Federal Transparency and Information Access Law Federal Personal Data Protection Law General Health Law Patients Bill of Rights Personal data protection is a fundamental right and is mandatory under federal law Personal data is confidential and as such all required measures must be taken to guarantee privacy: legal, technical Any use of personal data requires strict consent

3 Mexican Official Regulation for Electronic Health Records: NOM024-SSA Consolidates all previously mentioned legal requirements regarding personal health data protection in one single regulatory framework Establishes rules and standards that allows communication and interoperability among all health systems All requirements are mandatory for Electronic Health Records (EHR) implementations Based on a number of international standards HL7 Healthcare informatics interoperability standards ISO Quality management systems and processes ISO Information security management systems Compliance helps mitigate health data exposure and vulnerabilities

4 EHR compliance standards in Mexico IT Infrastructure requirements HL7 V3, HL7 EHR IM ICD-10, ICD-9-MC, DICOM, LOINC CURP, INEGI, CLUES HL7 EHR FM ISO 10781, ISO NOM168, NOM040, NOM017 Interoperability standards HL7 V3, EHR-S FM ISO LFPDPPP Functional requirements Security requirements Mexican Official Regulation NOM-024-SSA3-2010

5 Why HL7 in Mexico? EHR Functional Model EHR Interop. Model Tropicalization NOM024 EHR Mx Regulation -Functional Req. -Reference Model. -Security Criteria Interface Technical Specs Reference Information Model HL7 Mexico Implementation Guides

6 Implications for the Health Industry Legal certainty for those involved Patients Guarantee of privacy Right to access personal data and ask for corrections s and Medical Staff Clear game rules for data users at all management levels Augmented ease of use for interoperability and security Systems developers and providers Checklist for infrastructure and functionalities requirements that will help them become compliant Providers will adapt and evolve, becoming more competitive at an international level, due to the use of industry-wide standards

7 National Electronic Health Record System development timeline EHR funtional model National Interoperability Model NOM024-SSA Sept 2010 EHR Infrastructure - Work in progress Public Sector Institutions IMSS ISSSTE SEDENA SEMAR PEMEX 1 Entidad Federativa 1 Plataforma Estatal de Interoperabilidad 2 3 States INCMNSZ Interoperability 4 1 INER Coord. de Inst. Nacionales Plataforma de Interoperabilidad Entidad Federativa 2 Plataforma Estatal de Interoperabilidad 2 Federal s In H Juárez H GEA Coord. de Hosp. Alta Esp. Plataforma de Interoperabilidad Hn Registro Médico Voluntario Plataforma de Interoperabilidad 3 Citizens Data -All levels -All functionalities -All users -All systems -All implementations -All hospitals

8 Security criteria in NOM024-SSA Based strongly on HL7 and ISO/IEC27000 Authentication and entity authorization Access control and secure data exchange Secure routing and information ratification / verification Patient confidentiality and privacy EHR information management and analysis Auditing traceability and data synchronization Distributed EHR access and consulting

9 Long-term goals and objectives Full systems interoperability and convergence in record time Mandatory compliance of NOM024 should help save years in interoperability integration, making it a much more streamlined process because rules have been stated very early Being able to work as a more unified health sector through data integration Capability of epidemiologic contingencies response in real-time

10 Thank you!!! Dr. Maki Esther Ortiz Domínguez Viceminister of Integration and Development of the Public Health Sector

Health Informatics Standardization: Relevance and Indian Initiatives

Health Informatics Standardization: Relevance and Indian Initiatives Health Informatics Standardization: Relevance and Indian Initiatives Baljit Singh Bedi Advisor, CDAC (Sc. Society of MCIT, Govt. of India ) Past President, Telemedicine Society of India(TSI) & Member,

More information

Health Care Information System Standards

Health Care Information System Standards Health Care Information System Standards 1 Standards Development Process Four Methods (Hammond & Cimino, 2001) Ad hoc no formal adoption process De facto vendor or other has a very large segment of the

More information

HIM Master s Degree Competencies* Domains, Subdomains, and Tasks 2007 and Beyond

HIM Master s Degree Competencies* Domains, Subdomains, and Tasks 2007 and Beyond HIM Master s Degree Competencies* Domains, Subdomains, and Tasks 2007 and Beyond I. Domain: Health Data Management A. Data Structure 1. Evaluate reference terminologies to satisfy organizational information

More information

Our Commitment to Information Security

Our Commitment to Information Security Our Commitment to Information Security What is HIPPA? Health Insurance Portability and Accountability Act 1996 The HIPAA Privacy regulations require health care providers and organizations, as well as

More information

HL7 EHR-S Records Management & Evidentiary Support Functional Profile

HL7 EHR-S Records Management & Evidentiary Support Functional Profile HL7 EHR-S Records Management & Evidentiary Support Functional Profile Michelle Dougherty, RHIA, CHP HIT Standards AHIMA for the Legal EHR michelle.dougherty@ahima.org An educational update to the HIMSS

More information

Analysis of the Latin American Electronic Medical Record Market Current and Proposed Regulations will Boost the Market in Argentina, Colombia, and

Analysis of the Latin American Electronic Medical Record Market Current and Proposed Regulations will Boost the Market in Argentina, Colombia, and Analysis of the Latin American Electronic Medical Record Market Current and Proposed Regulations will Boost the Market in Argentina, Colombia, and Mexico March 2013 Contents Section Slide Numbers Executive

More information

THE EHR4CR PLATFORM AND SERVICES

THE EHR4CR PLATFORM AND SERVICES THE EHR4CR PLATFORM AND SERVICES Brecht Claerhout Custodix Electronic Health Records for Clinical Research 108 Background CV Ageing Population COPD Asthma Diabetes HIV/ AIDS Mental disorders Cancer 1993-1997

More information

Electronic Health Record. Standards, Coding Systems, Frameworks, and Infrastructures

Electronic Health Record. Standards, Coding Systems, Frameworks, and Infrastructures Brochure More information from http://www.researchandmarkets.com/reports/2178436/ Electronic Health Record. Standards, Coding Systems, Frameworks, and Infrastructures Description: Discover How Electronic

More information

Privacy & Security Requirements: from EHRs to PHRs

Privacy & Security Requirements: from EHRs to PHRs Privacy & Security Requirements: from EHRs to PHRs Oct 28, 2010 Presented by André Carrington, P.Eng, CISSP, CISM, CISA, CIPP/C Director, Implementation, Privacy & Security, SPS Purpose As suggested by

More information

THE E-HEALTH JOURNEY. Ministry of Health Jamaica. Optimizing the use of ICT Applications in Health and Patient Care

THE E-HEALTH JOURNEY. Ministry of Health Jamaica. Optimizing the use of ICT Applications in Health and Patient Care THE E-HEALTH JOURNEY Ministry of Health Jamaica Optimizing the use of ICT Applications in Health and Patient Care 8 th Caribbean Conference on Health Financing Initiatives Presenter: Mr. Arnold Cooper

More information

ISO 27001 COMPLIANCE WITH OBSERVEIT

ISO 27001 COMPLIANCE WITH OBSERVEIT ISO 27001 COMPLIANCE WITH OBSERVEIT OVERVIEW ISO/IEC 27001 is a framework of policies and procedures that include all legal, physical and technical controls involved in an organization s information risk

More information

Cloud Security Trust Cisco to Protect Your Data

Cloud Security Trust Cisco to Protect Your Data Trust Cisco to Protect Your Data As cloud adoption accelerates, organizations are increasingly placing their trust in third-party cloud service providers (CSPs). But can you fully trust your most sensitive

More information

Remote Access to a Healthcare Facility and the IT professional s obligations under HIPAA and the HITECH Act

Remote Access to a Healthcare Facility and the IT professional s obligations under HIPAA and the HITECH Act Remote Access to a Healthcare Facility and the IT professional s obligations under HIPAA and the HITECH Act Are your authentication, access, and audit paradigms up to date? Table of Contents Synopsis...1

More information

ConnectVirginia EXCHANGE Onboarding and Certification Guide. Version 1.4

ConnectVirginia EXCHANGE Onboarding and Certification Guide. Version 1.4 ConnectVirginia EXCHANGE Onboarding and Certification Guide Version 1.4 July 18, 2012 CONTENTS 1 Overview... 5 2 Intended Audience... 5 3 ConnectVirginia Background... 5 3.1 Federated... 5 3.2 Secure...

More information

e-health: Privacy Compliance and the Electronic Health Record

e-health: Privacy Compliance and the Electronic Health Record e-health: Privacy Compliance and the Electronic Health Record Paulette Lacroix, RN, MPH, CMC, CIPP/C September 21, 2010 BCIT Sept 21, 2010 PC Lacroix Consulting Inc. 1 What we will cover Overview of the

More information

One Research Court, Suite 200 Rockville, MD 20850 www.ctisinc.com Tel: 301.948.3033 Fax: 301.948.2242

One Research Court, Suite 200 Rockville, MD 20850 www.ctisinc.com Tel: 301.948.3033 Fax: 301.948.2242 TRANSFORMATION OF HEALTH INDUSTRY THROUGH PERFORMANCE PYRAMID: Providing Excellent End-to-End Healthcare to the Population with a 30% Reduction in Cost and Time. Introduction The American health industry

More information

EHR Standards Landscape

EHR Standards Landscape EHR Standards Landscape Dr Dipak Kalra Centre for Health Informatics and Multiprofessional Education (CHIME) University College London d.kalra@chime.ucl.ac.uk A trans-national ehealth Infostructure Wellness

More information

ISO 27001: Information Security and the Road to Certification

ISO 27001: Information Security and the Road to Certification ISO 27001: Information Security and the Road to Certification White paper Abstract An information security management system (ISMS) is an essential part of an organization s defense against cyberattacks

More information

REMOTE ACCESS TO A HEALTHCARE FACILITY AND THE IT PROFESSIONAL S OBLIGATIONS UNDER HIPAA AND THE HITECH ACT

REMOTE ACCESS TO A HEALTHCARE FACILITY AND THE IT PROFESSIONAL S OBLIGATIONS UNDER HIPAA AND THE HITECH ACT REMOTE ACCESS TO A HEALTHCARE FACILITY AND THE IT PROFESSIONAL S OBLIGATIONS UNDER HIPAA AND THE HITECH ACT ARE YOUR AUTHENTICATION, ACCESS, AND AUDIT PARADIGMS UP TO DATE? BY KERRY ARMSTRONG, PRIVACY,

More information

Chapter 3 HIPAA Cost Considerations

Chapter 3 HIPAA Cost Considerations AU1953_C03.fm Page 23 Saturday, October 11, 2003 10:22 AM Chapter 3 HIPAA Cost Considerations Background Actual costs for HIPAA compliance will vary among covered entities (CEs) because of various factors

More information

HIPAA and HITRUST - FAQ

HIPAA and HITRUST - FAQ A COALFIRE WHITE PAPER HIPAA and HITRUST - FAQ by Andrew Hicks, MBA, CISA, CCM, CRISC, HITRUST CSF Practitioner Director, Healthcare Practice Lead Coalfire February 2013 Introduction Organizations are

More information

HYBRID ELECTRONIC HEALTH RECORDS

HYBRID ELECTRONIC HEALTH RECORDS HYBRID ELECTRONIC HEALTH RECORDS Tiago Pedrosa, Rui Pedro Lopes Polytechnic Institute of Bragança, Portugal pedrosa@ipb.pt, rlopes@ipb.pt João C Santos, Coimbra Institute of Engineering, DEE, Portugal

More information

Managing e-health data: Security management. Marc Nyssen Medical Informatics VUB Master in Health Telematics KIST E-mail: mnyssen@vub.ac.

Managing e-health data: Security management. Marc Nyssen Medical Informatics VUB Master in Health Telematics KIST E-mail: mnyssen@vub.ac. Managing e-health data: Security management Marc Nyssen Medical Informatics VUB Master in Health Telematics KIST E-mail: mnyssen@vub.ac.be Structure of the presentation Data management: need for a clear

More information

Health Insurance Portability and Accountability Act (HIPAA) Compliance Audit Final Report

Health Insurance Portability and Accountability Act (HIPAA) Compliance Audit Final Report Health Insurance Portability and Accountability Act (HIPAA) Compliance Audit Final Report April 2009 promoting efficient & effective local government Background The Health Insurance Portability and Accountability

More information

Health Information Technology OIT Architecture Strategy

Health Information Technology OIT Architecture Strategy Health Information Technology OIT Architecture Strategy Enabling Technology Solutions Efficiently, Effectively, and Elegantly Table of Contents Executive Summary Current State Applications Communication

More information

Chapter 2 Standards for EHRs 1 Chapter 2 Content: LO 2.1 Describe EHR Standards History LO 2.2 Identify basic HIPAA regulations LO 2.3 List basic CHI regulations LO 2.4 Summarize IOM s Core Functions LO

More information

ISO 18308 INTERNATIONAL STANDARD. Health informatics Requirements for an electronic health record architecture

ISO 18308 INTERNATIONAL STANDARD. Health informatics Requirements for an electronic health record architecture INTERNATIONAL STANDARD ISO 18308 First edition 2011-04-15 Health informatics Requirements for an electronic health record architecture Informatique de santé Exigences relatives à une architecture de l'enregistrement

More information

Solution Brief for HIPAA HIPAA. Publication Date: Jan 27, 2015. EventTracker 8815 Centre Park Drive, Columbia MD 21045

Solution Brief for HIPAA HIPAA. Publication Date: Jan 27, 2015. EventTracker 8815 Centre Park Drive, Columbia MD 21045 Publication Date: Jan 27, 2015 8815 Centre Park Drive, Columbia MD 21045 HIPAA About delivers business critical software and services that transform high-volume cryptic log data into actionable, prioritized

More information

Concepts for a standard based crossorganizational information security management system in the context of a nationwide EHR

Concepts for a standard based crossorganizational information security management system in the context of a nationwide EHR Concepts for a standard based crossorganizational information security management system in the context of a nationwide EHR Alexander Mense University of Applied Sciences Technikum Wien MedInfo 2013 August

More information

About CHIMA. Agenda 10/3/2012. HIM Workforce Transformation Where are the Leaders? HRABC Langley, BC Sept 29, 2012

About CHIMA. Agenda 10/3/2012. HIM Workforce Transformation Where are the Leaders? HRABC Langley, BC Sept 29, 2012 HIM Workforce Transformation Where are the Leaders? Candace Gibson, PhD, CHIM Board Chair, CHIMA HRABC Langley, BC Sept 29, 2012 As the voice for the HIM professional, CHIMA is redefining an essential

More information

Implementing Electronic Health Records in the Kurdistan Region

Implementing Electronic Health Records in the Kurdistan Region Implementing Electronic Health Records in the Kurdistan Region By: Hiwa Ali Faraj MSC Computer Systems Management E-mail: hiwa@hotmail.co.uk Agenda Objectives & Methodology. The Terminology & Concept.

More information

Solutions for Health Insurance Portability and Accountability Act (HIPAA) Compliance

Solutions for Health Insurance Portability and Accountability Act (HIPAA) Compliance White Paper Solutions for Health Insurance Portability and Accountability Act (HIPAA) Compliance Troy Herrera Sr. Field Solutions Manager Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA

More information

An open source software tool for creating and managing patient consents electronically in IHE XDS.b environments

An open source software tool for creating and managing patient consents electronically in IHE XDS.b environments An open source software tool for creating and managing patient consents electronically in IHE XDS.b environments 20th of April 2012 O. Heinze 1, M. Birkle 1, H. Schmuhl 1, B. Bergh 1 1 Department of Information

More information

Leveraging innovative security solutions for government. Helping to protect government IT infrastructure, meet compliance demands and reduce costs

Leveraging innovative security solutions for government. Helping to protect government IT infrastructure, meet compliance demands and reduce costs IBM Global Technology Services Leveraging innovative security solutions for government. Helping to protect government IT infrastructure, meet compliance demands and reduce costs Achieving a secure government

More information

REQUIREMENTS REGARDING QUALITY CERTIFICATION OF ELECTRONIC HEALTH RECORDS

REQUIREMENTS REGARDING QUALITY CERTIFICATION OF ELECTRONIC HEALTH RECORDS REQUIREMENTS REGARDING QUALITY CERTIFICATION OF ELECTRONIC HEALTH RECORDS Alexander Hoerbst, Thomas Schabetsberger, Werner Hackl, Elske Ammenwerth Research Division for ehealth and Telemedicine UMIT -

More information

Committees Date: Subject: Public Report of: For Information Summary

Committees Date: Subject: Public Report of: For Information Summary Committees Audit & Risk Management Committee Finance Committee Subject: Cyber Security Risks Report of: Chamberlain Date: 17 September 2015 22 September 2015 Public For Information Summary Cyber security

More information

This document is a preview generated by EVS

This document is a preview generated by EVS INTERNATIONAL STANDARD ISO 10781 Second edition 2015-08-01 Health Informatics HL7 Electronic Health Records-System Functional Model, Release 2 (EHR FM) Informatique de santé Modèle fonctionnel d un système

More information

NURSING INFORMATION AND KNOWLEDGE MANAGEMENT

NURSING INFORMATION AND KNOWLEDGE MANAGEMENT PositionStatement NURSING INFORMATION AND KNOWLEDGE MANAGEMENT CNA POSITION CNA believes that information management and communications technology are integral to nursing practice. Competencies 1 in information

More information

GLOBAL HEALTHCARE IT SOLUTIONS. Corporate Profile. dedalusgs.com

GLOBAL HEALTHCARE IT SOLUTIONS. Corporate Profile. dedalusgs.com GLOBAL HEALTHCARE IT SOLUTIONS Corporate Profile We bring over 25 years of experience in applying Information and Communication Technologies to healthcare organizations About us Dedalus Global Services

More information

Securing the Cloud Infrastructure

Securing the Cloud Infrastructure EXECUTIVE STRATEGY BRIEF Microsoft recognizes that security and privacy protections are essential to building the necessary customer trust for cloud computing to reach its full potential. This strategy

More information

Interoperability testing in Finland. Konstantin Hyppönen Summit on Interoperability (DK) 21.1.2014

Interoperability testing in Finland. Konstantin Hyppönen Summit on Interoperability (DK) 21.1.2014 Interoperability testing in Finland Konstantin Hyppönen Summit on Interoperability (DK) 21.1.2014 Contents 1. Overview of the Finnish national ehealth infrastructure 2. Interoperability testing requirements

More information

ehealth Interoperability State of the Art in Serbia

ehealth Interoperability State of the Art in Serbia ehealth Interoperability State of the Art in Serbia Nada Teodosijević ProRec Serbia Western Balkan Summit on ehealth interoperability Ljubljana, 3 rd April 2014 Topics 1. ehealth State of the art in the

More information

Addressing Cyber Security in Oracle Utilities Applications

Addressing Cyber Security in Oracle Utilities Applications Addressing Cyber Security in Oracle Utilities Applications Anthony Shorten Principal Product Manager Oracle Utilities Global Business Unit Sept, 2014 Safe Harbor Statement The following is intended to

More information

Service Alberta BUSINESS PLAN 2010 13

Service Alberta BUSINESS PLAN 2010 13 Service Alberta BUSINESS PLAN 2010 13 Service Alberta BUSINESS PLAN 2010-13 ACCOUNTABILITY STATEMENT The business plan for the three years commencing April 1, 2010 was prepared under my direction in accordance

More information

Direct Secure Messaging: Improving the Secure and Interoperable Exchange of Health Information

Direct Secure Messaging: Improving the Secure and Interoperable Exchange of Health Information Direct Secure Messaging: Improving the Secure and Interoperable Exchange of Health Information Within the healthcare industry, the exchange of protected health information (PHI) is governed by regulations

More information

Is Your Identity Management Program Protecting Your Federal Systems?

Is Your Identity Management Program Protecting Your Federal Systems? Is Your Identity Management Program Protecting Your Federal Systems? With the increase in integrated, cloud and remote technologies, it is more challenging than ever for federal government agencies to

More information

Using the HITRUST CSF to Assess Cybersecurity Preparedness 1 of 6

Using the HITRUST CSF to Assess Cybersecurity Preparedness 1 of 6 to Assess Cybersecurity Preparedness 1 of 6 Introduction Long before the signing in February 2013 of the White House Executive Order Improving Critical Infrastructure Cybersecurity, HITRUST recognized

More information

HHSN316201200042W 1 QSSI - Quality Software Services, Inc

HHSN316201200042W 1 QSSI - Quality Software Services, Inc ARTICLE C.1. STATEMENT OF WORK This contract is designed to permit the Institutes and Centers (ICs) of NIH, the Department of Health and Human Services (DHHS), and all other federal agencies to acquire

More information

ISO/HL7 10781 EHR System Functional Model Standard

ISO/HL7 10781 EHR System Functional Model Standard ISO/HL7 10781 EHR System Functional Model Standard Presented by: Gary Dickinson Director, Healthcare Standards CentriHealth Co-Chair, HL7 EHR Work Group Lead, S&I Framework Cross-Initiative Simplification

More information

HL7 EHR System Functional Model and Standard (ISO/HL7 10781), Release 2

HL7 EHR System Functional Model and Standard (ISO/HL7 10781), Release 2 HL7 EHR System Functional Model and Standard (ISO/HL7 10781), Release 2 Health Information Management Systems Society (HIMSS) Las Vegas, NV 20 Feb 2012 Presented by: Mark G. Janczewski, MD, MPH Deloitte

More information

Privacy Issues in the Austrian EHR Project ELGA

Privacy Issues in the Austrian EHR Project ELGA Privacy Issues in the Austrian EHR Project ELGA Thomas Mueck Vienna University of Technology Outline ehealth study of the EU (Gartner) Privacy concerns (EC, Forrester) ELGA - Austrian ehealth Strategy

More information

2.2 The Security of Electronic Medical Records (EMR) DOH, the Executive Yuan August 19, 2009

2.2 The Security of Electronic Medical Records (EMR) DOH, the Executive Yuan August 19, 2009 Topic 2: Privacy Protection and Ensuring Security of Network Applications or Services 2.2 The Security of Electronic Medical Records (EMR) DOH, the Executive Yuan August 19, 2009 1 Agenda 1. The Vision

More information

HIE Services & Pricing

HIE Services & Pricing Services Available at No Cost Health Information Exchange Services & Pricing Package Effective: December 11, 2015 0 Interface Connection Details Services Available at No Cost HealthlinkNY Web Portal The

More information

The Adoption of IT Security Standards in a Healthcare Environment

The Adoption of IT Security Standards in a Healthcare Environment ehealth Beyond the Horizon Get IT There S.K. Andersen et al. (Eds.) IOS Press, 2008 2008 Organizing Committee of MIE 2008. All rights reserved. 765 The Adoption of IT Security Standards in a Healthcare

More information

Document process management solutions for MiFID compliance

Document process management solutions for MiFID compliance Adobe Technical White Paper produced in conjunction with Equiduct Document process management solutions for MiFID compliance Adobe technology provides document process management solutions, enabling investment

More information

Managing Trust in e-health with Federated Identity Management

Managing Trust in e-health with Federated Identity Management ehealth Workshop Konolfingen (CH) Dec 4--5, 2007 Managing Trust in e-health with Federated Identity Management Dr. rer. nat. Hellmuth Broda Distinguished Director and CTO, Global Government Strategy, Sun

More information

HIE Services & Pricing

HIE Services & Pricing Services Available at No Cost Health Information Exchange Services & Pricing Package Services Available at No Cost Services Available at No Cost HealthlinkNY Web Portal The HealthlinkNY Web Portal is available

More information

Meaningful Use Stage 2 Certification: A Guide for EHR Product Managers

Meaningful Use Stage 2 Certification: A Guide for EHR Product Managers Meaningful Use Stage 2 Certification: A Guide for EHR Product Managers Terminology Management is a foundational element to satisfying the Meaningful Use Stage 2 criteria and due to its complexity, and

More information

State of the EHR: The Vendor Perspective

State of the EHR: The Vendor Perspective State of the EHR: The Vendor Perspective AHIMA is the national association of health information management (HIM) professionals. AHIMA s 50,000 members are dedicated to the effective management of personal

More information

HIPAA and HITECH Compliance for Cloud Applications

HIPAA and HITECH Compliance for Cloud Applications What Is HIPAA? The healthcare industry is rapidly moving towards increasing use of electronic information systems - including public and private cloud services - to provide electronic protected health

More information

SecSDM: A Model for Integrating Security into the Software Development Life Cycle

SecSDM: A Model for Integrating Security into the Software Development Life Cycle SecSDM: A Model for Integrating Security into the Software Development Life Cycle Lynn Futcher, Rossouw von Solms Centre for Information Security Studies, Nelson Mandela Metropolitan University, Port Elizabeth,

More information

RSA SECURE WEB ACCESS FOR HEALTHCARE ENVIRONMENTS

RSA SECURE WEB ACCESS FOR HEALTHCARE ENVIRONMENTS RSA SECURE WEB ACCESS FOR HEALTHCARE ENVIRONMENTS Security solutions for patient and provider access AT A GLANCE Healthcare organizations of all sizes are responding to the demands of patients, physicians,

More information

ELECTRONIC MEDICAL RECORDS. Selecting and Utilizing an Electronic Medical Records Solution. A WHITE PAPER by CureMD.

ELECTRONIC MEDICAL RECORDS. Selecting and Utilizing an Electronic Medical Records Solution. A WHITE PAPER by CureMD. ELECTRONIC MEDICAL RECORDS Selecting and Utilizing an Electronic Medical Records Solution A WHITE PAPER by CureMD CureMD Healthcare 55 Broad Street New York, NY 10004 Overview United States of America

More information

Analysis of Information Security Management Systems at 5 Domestic Hospitals with More than 500 Beds

Analysis of Information Security Management Systems at 5 Domestic Hospitals with More than 500 Beds Original Article Healthc Inform Res. 2010 June;16(2):89-99. pissn 2093-3681 eissn 2093-369X Analysis of Information Security Management Systems at 5 Domestic Hospitals with More than 500 Beds Woo-Sung

More information

5 Things to Look for in a Cloud Provider When it Comes to Security

5 Things to Look for in a Cloud Provider When it Comes to Security 5 Things to Look for in a Cloud Provider When it Comes to Security In This Paper Internal technology services that lack resources, rigor or efficiencies are prime candidates for the cloud Understand the

More information

Sunday March 30, 2014, 9am noon HCCA Conference, San Diego

Sunday March 30, 2014, 9am noon HCCA Conference, San Diego Meaningful Use as it Relates to HIPAA Compliance Sunday March 30, 2014, 9am noon HCCA Conference, San Diego CLAconnect.com Objectives and Agenda Understand the statutory and regulatory background and purpose

More information

HIMSS Electronic Health Record Definitional Model Version 1.0

HIMSS Electronic Health Record Definitional Model Version 1.0 HIMSS Electronic Health Record Definitional Model Version 1.0 Prepared by HIMSS Electronic Health Record Committee Thomas Handler, MD. Research Director, Gartner Rick Holtmeier, President, Berdy Systems

More information

New York ehealth Collaborative. Health Information Exchange and Interoperability April 2012

New York ehealth Collaborative. Health Information Exchange and Interoperability April 2012 New York ehealth Collaborative Health Information Exchange and Interoperability April 2012 1 Introductions Information exchange patient, information, care team How is Health information exchanged Value

More information

Best Practices at Research Level

Best Practices at Research Level PReparing Industry to Privacy-by-design by supporting its Application in REsearch Best Practices at Research Level Hisain Elshaafi Telecommunications Software and Systems Group (TSSG) Waterford Institute

More information

Greenway Marketplace. Hear from GSG Compliance & White Plume November 14, 2013

Greenway Marketplace. Hear from GSG Compliance & White Plume November 14, 2013 Greenway Marketplace Hear from GSG Compliance & White Plume November 14, 2013 Marketplace Mission Statement To enhance the Greenway customer user experience by offering innovative, forwardthinking technologies

More information

IIA Conference. September 18, 2015. Paige Needling Director, Global Information Security Recall, Inc.

IIA Conference. September 18, 2015. Paige Needling Director, Global Information Security Recall, Inc. IIA Conference September 18, 2015 Paige Needling Director, Global Information Security Recall, Inc. IT SECURITY UMBRELLA Compliance for IT Data Privacy Protection Privacy Risk Assessment Vulnerability

More information

Enabling a healthier tomorrow MEDICAL DEVICES HCL ENGINEERING AND R&D SERVICES

Enabling a healthier tomorrow MEDICAL DEVICES HCL ENGINEERING AND R&D SERVICES Enabling a healthier tomorrow MEDICAL DEVICES HCL ENGINEERING AND R&D SERVICES The Environment Today How can the current healthcare and medical device infrastructure meet the requirements of a growing

More information

EHR Interoperability Framework Overview

EHR Interoperability Framework Overview Hospital Health Information System EU HIS Contract No. IPA/2012/283-805 Final version July 2015 Visibility: Public Target Audience: EHR Developers EHR Administrators EPR Systems Developers This document

More information

Greek ehealth Strategy under public consultation

Greek ehealth Strategy under public consultation Greek ehealth Strategy under public consultation Mina Boubaki Ministry of Health, IT Department ehealth Network, ehealth Forum Recent relevant Reforms Law 3892/2010 Electronic Recording of Prescription

More information

Arizona Health Information Exchange Marketplace. Requirements and Specifications Health Information Service Provider (HISP)

Arizona Health Information Exchange Marketplace. Requirements and Specifications Health Information Service Provider (HISP) Arizona Health Information Exchange Marketplace Requirements and Specifications Health Information Service Provider (HISP) Table of Contents Table of Contents... 1 Introduction... 2 Purpose... 3 Scope...

More information

SUPPLIER ASSESSMENT CHECKLIST

SUPPLIER ASSESSMENT CHECKLIST Sample Pages of SUPPLIER ASSESSMENT CHECKLIST For Standard ISO/IEC 90003:2004 Software engineering: Guidelines for the application of ISO 9001:2000 to computer software ISBN 0-9770309-1-1 7/5/2007 1 Sample

More information

SECTION C: DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

SECTION C: DESCRIPTION/SPECIFICATIONS/WORK STATEMENT PAGE 6 of 51 SECTION C: DESCRIPTION/SPECIFICATIONS/WORK STATEMENT Article C.1 Statement of Work This contract is designed to permit the Institutes and Centers (ICs) of NIH, the Department of Health and

More information

Enterprise Risk Management in Compliance 360

Enterprise Risk Management in Compliance 360 Enterprise Risk Management in Compliance 360 2 Enterprise Risk Management in Compliance 360 Effective risk management involves identifying and understanding the risks the organization is faced with, analyzing

More information

Interoperability: White Paper. Introduction. PointClickCare Interoperability - 2014. January 2014

Interoperability: White Paper. Introduction. PointClickCare Interoperability - 2014. January 2014 White Paper PointClickCare Interoperability - 2014 Interoperability: In healthcare, interoperability is where multiple technology platforms and software applications are able to connect, communicate, and

More information

Is HIPAA Ready for the EHR? Practical and Legal Considerations of the Interoperable Electronic Health Record

Is HIPAA Ready for the EHR? Practical and Legal Considerations of the Interoperable Electronic Health Record Is HIPAA Ready for the EHR? Practical and Legal Considerations of the Interoperable Electronic Health Record Barry S. Herrin, CHE, Esq. Smith Moore LLP The Twelfth Annual HIPAA Summit April 11, 2006 Hyatt

More information

MED 2400 MEDICAL INFORMATICS FUNDAMENTALS

MED 2400 MEDICAL INFORMATICS FUNDAMENTALS MED 2400 MEDICAL INFORMATICS FUNDAMENTALS NEW YORK CITY COLLEGE OF TECHNOLOGY The City University Of New York School of Arts and Sciences Biological Sciences Department Course title: Course code: MED 2400

More information

Social Security Administration (SSA) Experience with Provider Directory HIT Security and Privacy WG

Social Security Administration (SSA) Experience with Provider Directory HIT Security and Privacy WG Social Security Administration (SSA) Experience with Provider Directory HIT Security and Privacy WG Presenters: Shanks Kande, Nitin Jain Date: 04/06/2011 1 Social Security Administration Use of Provider

More information

The Information Assurance Process: Charting a Path Towards Compliance

The Information Assurance Process: Charting a Path Towards Compliance The Information Assurance Process: Charting a Path Towards Compliance A white paper on a collaborative approach to the process and activities necessary to attain compliance with information assurance standards.

More information

The Practical Guide to HIPAA Privacy and Security Compliance

The Practical Guide to HIPAA Privacy and Security Compliance The Practical Guide to HIPAA Privacy and Security Compliance By Kevin Beaver and Rebecca Herold Published by Auerbach Publications in December 2003 TABLE OF CONTENTS SECTION 1 HIPAA ESSENTIALS 1 Introduction

More information

Quality Label and Certification Processes Education Material on ehealth Interoperability. Karima Bourquard Director of Interoperability IHE-Europe

Quality Label and Certification Processes Education Material on ehealth Interoperability. Karima Bourquard Director of Interoperability IHE-Europe Quality Label and Certification Processes Education Material on ehealth Interoperability Karima Bourquard Director of Interoperability IHE-Europe Testing and Certification Objectives To design a European

More information

Dr. rer. nat. Hellmuth Broda

Dr. rer. nat. Hellmuth Broda International Telecommunication Union Privacy, Security, and Trust with Federated Identity Management Dr. rer. nat. Hellmuth Broda Distinguished Director and CTO, Global Government Strategy, Sun Microsystems

More information

Assessing State EHDI Programs Capability for Standards-Based Health Information Exchange

Assessing State EHDI Programs Capability for Standards-Based Health Information Exchange Assessing State EHDI Programs Capability for Standards-Based Health Information Exchange James Jellison, MPH Deb Bara, MA Public Health Informatics Institute Topics 1. Electronic information exchange between

More information

U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES Health Resources and Services Administration

U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES Health Resources and Services Administration U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES Health Resources and Services Administration Bureau of Primary Health Care Office of Quality and Data Affordable Care Act - Health Center Controlled Networks

More information

VALUE OF QUALITY LAB-EHR INTEROPERABILITY IN TODAY S DYNAMIC IT LANDSCAPE

VALUE OF QUALITY LAB-EHR INTEROPERABILITY IN TODAY S DYNAMIC IT LANDSCAPE VALUE OF QUALITY LAB-EHR INTEROPERABILITY IN TODAY S DYNAMIC IT LANDSCAPE Keith C. Drake, Ph.D., Program Executive, J. Michael Hyman, M.T.(ASCP), Director, Vendor Business Solutions Teresa C. Brannum,

More information

I n t e r S y S t e m S W h I t e P a P e r F O R H E A L T H C A R E IT E X E C U T I V E S. In accountable care

I n t e r S y S t e m S W h I t e P a P e r F O R H E A L T H C A R E IT E X E C U T I V E S. In accountable care I n t e r S y S t e m S W h I t e P a P e r F O R H E A L T H C A R E IT E X E C U T I V E S The Role of healthcare InfoRmaTIcs In accountable care I n t e r S y S t e m S W h I t e P a P e r F OR H E

More information

The ecosystem of the OpenClinic GA open source hospital information management software

The ecosystem of the OpenClinic GA open source hospital information management software The ecosystem of the OpenClinic GA open source hospital information management software HEALTH FACILITY INFORMATION SYSTEMS AND INTEROPERABILITY FRANK VERBEKE, VRIJE UNIVERSITEIT BRUSSEL OpenClinic login

More information

IT S TIME! PRIMARIS EHR SOLUTION. Benefits of Operational Efficiency. Why Primaris?

IT S TIME! PRIMARIS EHR SOLUTION. Benefits of Operational Efficiency. Why Primaris? IT S TIME! PRIMARIS EHR SOLUTION For years, Primaris has advocated the use of health information technology to improve patient care. We help providers take full advantage of their electronic health records

More information

Recommendations from Industry on Key Requirements for Building Scalable Managed Services involving Telehealth, Telecare & Telecoaching

Recommendations from Industry on Key Requirements for Building Scalable Managed Services involving Telehealth, Telecare & Telecoaching Recommendations from Industry on Key Requirements for Building Scalable Managed Services involving Telehealth, Telecare & Telecoaching Contacts: Angela Single, Chair, Industry Working Group: angela.single@3millionlives.co.uk

More information

MSC Security Program Security in the Logistics Supply Chain

MSC Security Program Security in the Logistics Supply Chain Maritime Security Council L MSC Security Program Security in the Logistics Supply Chain First Hemispheric Convention on Port Logistics and Competitiveness Ixtapa-Zihuatanejo November 3-5, 2010 Talking

More information

Health Level Seven International Unlocking the Power of Health Information

Health Level Seven International Unlocking the Power of Health Information Health Level Seven International Unlocking the Power of Health Information An ANSI accredited standards developer March 15, 2010 Centers for Medicare and Medicaid Services Department of Health and Human

More information

White Paper THE HIPAA FINAL OMNIBUS RULE: NEW CHANGES IMPACTING BUSINESS ASSOCIATES

White Paper THE HIPAA FINAL OMNIBUS RULE: NEW CHANGES IMPACTING BUSINESS ASSOCIATES White Paper THE HIPAA FINAL OMNIBUS RULE: NEW CHANGES IMPACTING BUSINESS ASSOCIATES CONTENTS Introduction 3 Brief Overview of HIPPA Final Omnibus Rule 3 Changes to the Definition of Business Associate

More information

Richard Gadsden Information Security Office Office of the CIO Information Services

Richard Gadsden Information Security Office Office of the CIO Information Services Information Security Compliance System Owner Training Richard Gadsden Information Security Office Office of the CIO Information Services Sharon Knowles Information Assurance Compliance MUSC Medical Center

More information

LogRhythm and NERC CIP Compliance

LogRhythm and NERC CIP Compliance LogRhythm and NERC CIP Compliance The North American Electric Reliability Corporation (NERC) is a nonprofit corporation designed to ensure that the bulk electric system in North America is reliable, adequate

More information

Vendor-neutral, cloud-based medical image archiving

Vendor-neutral, cloud-based medical image archiving Vendor-neutral, cloud-based medical image archiving Healthcare organizations worldwide struggle to manage the exploding growth and complexity of digital patient information across disparate facilities,

More information