|
Home
Up
LouHIE Intranet
| |
Louisville Health Information Exchange
PRIVACY COMMITTEE
July 11, 2007 Meeting
Members Present/Participating: Jeff Amrein, Marti Arvin, Brenda Beckham, Susan
Carey, Bruce Edwards, Linda Kamer, Judy Nichols. Julie Patterson, Jeanne Reiners,
Judah Thornewill
AGENDA ITEMS DISCUSSION ACTION
CALL TO ORDER The meeting was called to order at 9:05am.
APPROVAL OF MINUTES Minutes were not available from the May 31, 2007, meeting
for approval.
o1 Susan Carey to send out minutes for the 5/31/07 and will facilitate an
“email” approval.
BUSINESS PLAN CONSULTANT Judah provided the next steps with Noblis, the
consulting company who will develop the business plan for the LouHIE health
banking vision.
o1 Research planning meetings are scheduled for July 24th and 25th,
representation from the Privacy and Security Committee will be needed on both
days.
o2 The July meetings are in preparation for meetings in September with the
consumer groups.
o3 The P&S Committee needs to complete a one page requirements document for
privacy and a one page requirements document for security in preparation for the
September meetings.
o4 Judah to send out the schedule for the 24th and 25th meetings.
o5 Judah to send out health record bank research plan.
o6 Susan to schedule P&S Committee working session to begin development of these
requirement documents.
o7 P&S Committee to review health record banking principles available through:
http://www.healthbanking.org/
PRIVACY AND SECURITY CONSIDERATIONS/DISCUSSION o1 The P&S Committee is the
watchdog for privacy and security and that the LouHIE model will be
consumer-centric.
o2 Linda talked to the person who is in charge of Privacy and Security for the
Memphis RHIO and offered to set up a conference call to talk with them.
o3 Need to consider who will “manage” the system once a system is in place.
o4 The vision is that the technology will be controlled by LouHIE, but will be
outsourced.
o5 We must ask “what controls” are available when seeking a system/technology
vendor. We must define the requirements that a system must have.
o6 The Privacy requirements must address opting in/out versus authorization to
be “in” by the consumer.
o7 We have to also know how the data is going to be used – are we only
exchanging data? A vast majority of RHIOs are only exchanging data; there is no
3rd party database housing sensitive data.
o8 #1 Reason that CHINs failed was due to the paranoia of the consumer about the
use of their data.
o9 Hospitals have the ability to get the data, the issue is with getting the
data timely.
o10 Need to understand what the state does in relation to a Master Patient
Index, and a Master Provider Index.
o11 We need to balance the “rules” with moving forward.
o12 Linda to contact this person and ask if she would talk with us regarding
their privacy plan.
NEXT MEETING DATES o1 Everyone agreed that we will nee to meet at least
bi-weekly in order to complete requirements documents for privacy and security,
for the September meetings. o2 Susan to coordinate meeting dates/times.
ADJOURNMENT The meeting was adjourned at 10:00am.
|
