12
Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Embed Size (px)

Citation preview

Page 1: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Privacy, Security and Data Sharing Committee

Annual ReportOct. 2, 2007

Page 2: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Background and Mission Formed Dec. 9, 2002

Mission represent public health and health services

research interests in privacy and security issues

address balancing patient privacy, confidentiality, and security with the need for useful data for public health and research

Focus on priorities related to privacy, security and data standardization including implementation of the HIPAA privacy and security rules

Page 3: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Accomplishments Revise Privacy and Security

Committee Web Page for improved access to committee products and information resources

Participate in national privacy and security efforts (HISPC and HITSP)

Develop PRISM Privacy Tool to improve public sector privacy guidance

Page 4: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Revise Privacy and Security Committee Web Page

New Privacy, Security and Data Sharing Committee web page

Revised page format and content Consolidated privacy and security

materials, resources, and websites

Committee page at http://phdsc.org/about/committees/psds.htm

Page 5: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Participate in National Efforts on Privacy and Security

Participate in national privacy and security efforts

State and national privacy and security projects (HISPC)

Participation in defining public health scenarios. Several members participate/participated in state-specific efforts.

National privacy and security standards harmonization (HITSP)

Participation in the Security and Privacy Workgroup. Involves selection, definition, and standards recommendation of relevant security

and privacy constructs.

Page 6: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Develop PRISM Privacy Tool

An electronic, table-driven, web-based tool Provides a framework for understanding the basic

legal privacy requirements for the use and disclosure of health information in the public sector

Identifies and defines the baseline conditions and requirements that a government or other health entity must follow when using and disclosing specific types of health information

Organizes key privacy requirements related to uses and disclosures to provide direction to improve privacy policies, procedures, and compliance

Addresses a gap in federal HIPAA privacy guidance

Page 7: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Develop PRISM Privacy Tool

PRISM structure and contents Uses the HIPAA privacy rule as the framework,

then adds other federal privacy laws, such as 42 CFR pt. 2 and FERPA, where relevant

References common provisions in state law

Focuses on DISCLOSURES of health information by public programs

Funded by the National Center for Health Statistics (NCHS)

Access PRISM at http://www.phdsc.org/prism/introduction.htm. Will be available during the meeting to view

Page 8: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Future Activity Submitted a proposal for further

development, review, and refinement of the PRISM tool

Submitted a proposal to conduct a systematic, in-depth analysis of the state-level HISPC Public Health Domain findings to identify best practice and guidance recommendations

Continue to monitor and look for avenues of involvement and/or participation in the national privacy/security efforts

Development of ideas for security projects

Page 9: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Committee Chairs

Vicki Hohner, MBASenior ConsultantFox Systems, [email protected]

David P. Lawton RN, PhDPublic Health Informatics CoordinatorNebraska Department of Health and Human [email protected]

Page 10: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Committee Members Kimberly Baldwin-Stried, MBA, MJ, RHIA,

CPHQ KBS Consulting

Bruce BurnsTexas Health Care Information Council

Kathleen Cook National Association of County and City Health Officials (NACCHO)

Robert DavisNational Association of Health Data Organizations

Sterling Elliott, MPHAssociation of State and Territorial Health Officials (ASTHO)

Angela Fix, MPH Association of State and Territorial Health Officials (ASTHO)

Page 11: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Committee Members Marjorie Greenberg, M.A.

CDC/NCHS Hetty Khan, M.S., B.S.N., R.N.

CDC/NCHS Sally Klein, RN, MBA

Fox Systems, Inc. Denise Love

National Association of Health Data Organizations Dr. Gerald Masson

Johns Hopkins University Anna Orlova

Public Health Data Standards Consortium Barbara Rudolph, Ph.D.

The LeapFrog Group

Page 12: Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

Committee Members Virginia K. Saba, Ph.D

Georgetown University Walter Suarez, M.D., M.P.H.

Midwest Center for HIPAA Education Jonathan Teague

California Office of Statewide Health Planning and Development

Jessica Townsend, M.P.H.Health Resources & Services Administration

Socrates TuchOhio Department of Health

Richard Urbano, MDVanderbilt Kennedy Center