This wiki has undergone a migration to Confluence found Here
Difference between revisions of "November 13, 2018 Security Conference Call"
Jump to navigation
Jump to search
(→Agenda) |
|||
(9 intermediate revisions by 3 users not shown) | |||
Line 8: | Line 8: | ||
!x||'''Member Name'''|| !! x ||'''Member Name''' !!|| x ||'''Member Name''' !!|| x ||'''Member Name''' | !x||'''Member Name'''|| !! x ||'''Member Name''' !!|| x ||'''Member Name''' !!|| x ||'''Member Name''' | ||
|- | |- | ||
− | || | + | || .|| [mailto:JohnMoerke@gmail.com John Moehrke] Security Co-chair |
||||x|| [mailto:Kathleen_Connor@comcast.net Kathleen Connor] Security Co-chair | ||||x|| [mailto:Kathleen_Connor@comcast.net Kathleen Connor] Security Co-chair | ||
||||x|| [mailto:mense@fhtw.onmicrosoft.com Alexander Mense] Security Co-chair | ||||x|| [mailto:mense@fhtw.onmicrosoft.com Alexander Mense] Security Co-chair | ||
Line 19: | Line 19: | ||
|- | |- | ||
− | || | + | || x|| [mailto:Diana.Proud-Madruga@electro-soft.com Diana Proud-Madruga] |
||||.|| [mailto:jc@securityrs.com Johnathan Coleman] | ||||.|| [mailto:jc@securityrs.com Johnathan Coleman] | ||
− | |||| | + | ||||x|| [mailto:fjaureui@electrosoft-inc.com Francisco Jauregui] |
− | |||| | + | ||||x|| [mailto:joe.lamy@aegis.net Joe Lamy] |
|- | |- | ||
|| .|| [mailto:acg.internasjonal@protonmail.com Theresa Ardal Connor] | || .|| [mailto:acg.internasjonal@protonmail.com Theresa Ardal Connor] | ||
||||.|| [mailto:glinden@lindentechadvisiors.com Greg Linden] | ||||.|| [mailto:glinden@lindentechadvisiors.com Greg Linden] | ||
||||.|| [mailto:grahameg@gmail.com Grahame Grieve] | ||||.|| [mailto:grahameg@gmail.com Grahame Grieve] | ||
− | |||| | + | ||||x|| [mailto:dsilver@electrosoft-inc.com Dave Silver] |
|- | |- | ||
− | ||. || [mailto:Beth.Pumo@kp.org Beth Pumo] | + | ||. x|| [mailto:Beth.Pumo@kp.org Beth Pumo] |
− | |||| | + | ||||.|| [mailto:jim.kretz@samhsa.gov Jim Kretz] |
||||.|| [mailto:pbspamfilteracct@gmail.com Peter Bachman] | ||||.|| [mailto:pbspamfilteracct@gmail.com Peter Bachman] | ||
− | |||| | + | ||||x|| [mailto:peter.van.liesdonk@phillips.com Peter VanLiesdonk]] |
|- | |- | ||
Line 43: | Line 43: | ||
#''(2 min)'' '''Roll Call, Agenda Approval''' | #''(2 min)'' '''Roll Call, Agenda Approval''' | ||
#''(5 min)'' '''[http://wiki.hl7.org/index.php?title=November_6,_2018_Security_Conference_Call Review and Approval of Minutes November 6, 2018] | #''(5 min)'' '''[http://wiki.hl7.org/index.php?title=November_6,_2018_Security_Conference_Call Review and Approval of Minutes November 6, 2018] | ||
− | #''(5 min)'' '''[http://wiki.hl7.org/index.php?title=PASS_Healthcare_Audit_Services Update on revision of PASS Audit - Is | + | #''(5 min)'' '''[http://wiki.hl7.org/index.php?title=PASS_Healthcare_Audit_Services Update on revision of PASS Audit - Is reconciliation spreadsheet ready for upload?]''' - Mike |
#''(5 min)'' '''Security Harmonization proposal codes approved''' Some value sets will be proposed in March - Kathleen | #''(5 min)'' '''Security Harmonization proposal codes approved''' Some value sets will be proposed in March - Kathleen | ||
+ | #''(5 min)'' '''[https://gforge.hl7.org/gf/project/security/docman/V2%20Security/Chapter4Changes%20OM1-30%20ORC-28.doc v2.9 Change Request related to Confidentiality codes]''' - Kathleen | ||
+ | #''(5 min)'' '''[https://confluence.hl7.org/display/OO/2-To-FHIR HL7 v2 to FHIR PSS], [https://gforge.hl7.org/gf/project/security/docman/V2%20Security/2-To-FHIR%20KC.xlsx v2 to FHIR Spreadsheet for Security]''' - Kathleen | ||
#''(5 min)'' '''GDPR whitepaper on FHIR''' Update, reminder of new call schedule - Alex | #''(5 min)'' '''GDPR whitepaper on FHIR''' Update, reminder of new call schedule - Alex | ||
#''(5 min)'' '''FHIR Security call update''' - John | #''(5 min)'' '''FHIR Security call update''' - John | ||
+ | |||
+ | [[Security|Back to Security Main Page]] | ||
==Meeting Minutes== | ==Meeting Minutes== | ||
− | Meeting Chair - | + | Meeting Chair - Chris Shawn |
+ | |||
+ | '''Meeting Minute Approval''' - November 6, 2018 | ||
+ | * (Motion to approve (Suzanne/Kathleen): Vote: objections/abstentions: none; | ||
+ | ((Suzanne to add harmonization proposal link)) | ||
+ | |||
+ | |||
+ | '''Update on PASS Audit reconciliation | ||
+ | * last understood was that reconciliation comments were completed, and we could ask for withdrawal | ||
+ | * Kathleen brought up that Bernd B wants to see corrections in the document before he withdrawals | ||
+ | ** as far as Mike is concerned we should push forward and request withdrawal of negative | ||
+ | * e-mail from Lynn Laakso; there was material due in order to ballot TF4FA; she has listed that one and two have not been published? was this a new requirement...Kathleen asked if this was a new rule? which could be a show stopper... | ||
+ | ** we will wait and see what her answer is before proceeding. Current answer is we don't know. | ||
+ | |||
+ | '''Harmonization codes | ||
+ | * all three proposals were approved; Kathleen is deferring the codes that were not completed to next harmonization | ||
+ | * policy codes have been brought into v2 | ||
+ | * next harmonization | ||
+ | * there were changes in the xx ballot to update confidentiality | ||
+ | |||
+ | V2.9 HL7 access proposal | ||
+ | * in chapter 4; want clarification. security labels content is different than found in orders | ||
+ | * two sections which are talking about kind of labs--they were using vocabulary that was close to vocab in v3; which we changed years ago because of a mix of sensitivity and confidentiality--Kathleen proposes that the codes be retired | ||
+ | * recommendation is that they use the ARV segment be used which can point to any part of the lab order for results--removing table from both segments where they currently occur; avoiding conflict, note this is not a controversial issue...strictly clean-up. Rikki Merrick is trying to get into OO agenda to get in publishing of v2.9 clean-up | ||
+ | |||
+ | * question on harmonization – (Mike) this is a vocabulary--where does Hl7 specify where these marking are optional or mandatory?... <Kathleen response> no, there is a specific policy; it says what is in the law; so, it’s still an interpretation of the law. | ||
+ | **mike - part of the law 7332; has to do with what we've determined are the handling instructions... HII of the law; he has it from the legal folks, that their interpretations that its a requirement on the recipient not of the VA--or to tell them that such a restriction exists | ||
+ | **if 7332 hadn't been specified for just health; there is something in the law (if specified)… then | ||
+ | (listen to recording) | ||
+ | ** in other words, it’s up to the implementer to decide on the language | ||
+ | |||
+ | |||
+ | HL7 2 to FHIR PSS''' | ||
+ | * standards approach mapping from v2 to FHIR | ||
+ | * each of the datatypes; | ||
+ | * effort is underway (meetings every other week); the mapping between chapter 9 con segment and the FHIR consent and contract | ||
+ | ** important in regard to the transform; having capability from going from one set to another. i.e. get transform set into FHIR (confirm) | ||
+ | |||
+ | |||
+ | GDPR whitepaper | ||
+ | * no meeting this week | ||
+ | * next meeting is 11/19 - noon (Monday) | ||
+ | |||
+ | |||
+ | FHIR Security call update | ||
+ | * Short call today; went over v2 FHIR | ||
+ | * current build is frozen | ||
+ | * because of HIMSS several subjects are up in the air | ||
+ | * September care planning are not going to be at HIMSS--and not be at the January WGM--this will lower about ability to move with security and consent--we will still be able to do work with break glass | ||
+ | |||
+ | |||
+ | |||
+ | additional agenda items? | ||
+ | |||
+ | None | ||
+ | |||
+ | Motion t adjourn (Kathleen) | ||
+ | Meeting adjourned at 1320 Arizona Time --[[User:Suzannegw|Suzannegw]] ([[User talk:Suzannegw|talk]]) 15:20, 13 November 2018 (EST) | ||
+ | Temporary Recording: https:fccdl.in/yN1FTQeUV | ||
+ | |||
+ | |||
[[Security|Back to Security Main Page]] | [[Security|Back to Security Main Page]] |
Latest revision as of 20:53, 13 November 2018
Attendees
x | Member Name | x | Member Name | x | Member Name | x | Member Name | |||
---|---|---|---|---|---|---|---|---|---|---|
. | John Moehrke Security Co-chair | x | Kathleen Connor Security Co-chair | x | Alexander Mense Security Co-chair | . | Trish Williams Security Co-chair | |||
x | Christopher Shawn Security Co-chair | x | Suzanne Gonzales-Webb | x | Mike Davis | . | David Staggs | |||
x | Diana Proud-Madruga | . | Johnathan Coleman | x | Francisco Jauregui | x | Joe Lamy | |||
. | Theresa Ardal Connor | . | Greg Linden | . | Grahame Grieve | x | Dave Silver | |||
. x | Beth Pumo | . | Jim Kretz | . | Peter Bachman | x | Peter VanLiesdonk] |
Agenda
- (2 min) Roll Call, Agenda Approval
- (5 min) Review and Approval of Minutes November 6, 2018
- (5 min) Update on revision of PASS Audit - Is reconciliation spreadsheet ready for upload? - Mike
- (5 min) Security Harmonization proposal codes approved Some value sets will be proposed in March - Kathleen
- (5 min) v2.9 Change Request related to Confidentiality codes - Kathleen
- (5 min) HL7 v2 to FHIR PSS, v2 to FHIR Spreadsheet for Security - Kathleen
- (5 min) GDPR whitepaper on FHIR Update, reminder of new call schedule - Alex
- (5 min) FHIR Security call update - John
Meeting Minutes
Meeting Chair - Chris Shawn
Meeting Minute Approval - November 6, 2018
- (Motion to approve (Suzanne/Kathleen): Vote: objections/abstentions: none;
((Suzanne to add harmonization proposal link))
Update on PASS Audit reconciliation
- last understood was that reconciliation comments were completed, and we could ask for withdrawal
- Kathleen brought up that Bernd B wants to see corrections in the document before he withdrawals
- as far as Mike is concerned we should push forward and request withdrawal of negative
- e-mail from Lynn Laakso; there was material due in order to ballot TF4FA; she has listed that one and two have not been published? was this a new requirement...Kathleen asked if this was a new rule? which could be a show stopper...
- we will wait and see what her answer is before proceeding. Current answer is we don't know.
Harmonization codes
- all three proposals were approved; Kathleen is deferring the codes that were not completed to next harmonization
- policy codes have been brought into v2
- next harmonization
- there were changes in the xx ballot to update confidentiality
V2.9 HL7 access proposal
- in chapter 4; want clarification. security labels content is different than found in orders
- two sections which are talking about kind of labs--they were using vocabulary that was close to vocab in v3; which we changed years ago because of a mix of sensitivity and confidentiality--Kathleen proposes that the codes be retired
- recommendation is that they use the ARV segment be used which can point to any part of the lab order for results--removing table from both segments where they currently occur; avoiding conflict, note this is not a controversial issue...strictly clean-up. Rikki Merrick is trying to get into OO agenda to get in publishing of v2.9 clean-up
- question on harmonization – (Mike) this is a vocabulary--where does Hl7 specify where these marking are optional or mandatory?... <Kathleen response> no, there is a specific policy; it says what is in the law; so, it’s still an interpretation of the law.
- mike - part of the law 7332; has to do with what we've determined are the handling instructions... HII of the law; he has it from the legal folks, that their interpretations that its a requirement on the recipient not of the VA--or to tell them that such a restriction exists
- if 7332 hadn't been specified for just health; there is something in the law (if specified)… then
(listen to recording)
- in other words, it’s up to the implementer to decide on the language
HL7 2 to FHIR PSS
- standards approach mapping from v2 to FHIR
- each of the datatypes;
- effort is underway (meetings every other week); the mapping between chapter 9 con segment and the FHIR consent and contract
- important in regard to the transform; having capability from going from one set to another. i.e. get transform set into FHIR (confirm)
GDPR whitepaper
- no meeting this week
- next meeting is 11/19 - noon (Monday)
FHIR Security call update
- Short call today; went over v2 FHIR
- current build is frozen
- because of HIMSS several subjects are up in the air
- September care planning are not going to be at HIMSS--and not be at the January WGM--this will lower about ability to move with security and consent--we will still be able to do work with break glass
additional agenda items?
None
Motion t adjourn (Kathleen) Meeting adjourned at 1320 Arizona Time --Suzannegw (talk) 15:20, 13 November 2018 (EST) Temporary Recording: https:fccdl.in/yN1FTQeUV