February 02, 2016 CBCC Conference Call

Community-Based Collaborative Care Working Group Meeting

Back to CBCC Main Page

Attendees

	Member Name		x	Member Name		x	Member Name
x	Johnathan ColemanCBCC Co-Chair		x	Suzanne Gonzales-Webb CBCC Co-Chair		x	Jim Kretz CBCC Co-Chair
.	Max Walker CBCC Co-Chair		x	Mike Davis Security Co-Chair			John Moehrke Security Co-Chair
x	Kathleen Connor			Ken Salyards CBCC Interim Co-Chair			Lori Simon CBCC Interim Co-Chair
x	Diana Proud-Madruga SOA Interim Co-Chair		x	Rick Grow		.	Harry Rhodes
x	Serafina Versaggi		x	Ioana Singureanu		x	Glen Marshall
x	Steve Eichner		.	Steve Daviss		.	Wende Baker
x	Neelima Chennamaraja			Lee Wise		x	Mike Lardiere
	Reed Gelzer		.	Marlowe Greenberg			Chris Clark, WV
.	Paul Knapp		.	Matt Peeling			Brian Newton
.	William Kinsley			Lisa Nelson		.	Amanda Nash
x	Russell McDonell			Susan Litton			David Bergman
.	Linda Bailey-Woods			Debbie Bucci			Chirag Bhatt
	Oliver Lawless			Keith Boone			Lori McNeil Tolley
.	Mohammed Jafari			Rob Horn			Gary Dickinson
	Beth Pumo

Back to CBCC Main Page

Agenda

1. (05 min) Roll Call, Approve Meeting Minutes from January 26, 2016 CBCC Conference Call
2. (05 min) Behavioral Health Domain Analysis Model (HL7 BH DAM) Ballot Update
3. (05 min) Healthcare Security and Privacy Access Control Catalog - Update post ballot
4. (05 min) Data Provenance DPROV Update - (Standing Agenda Item) - Update
5. (10 min) PASS Access Control Services Conceptual Model - (Standing agenda item) update (Diana)
6. (10 min) Joint EHR, Security, Privacy Vocabulary Alignment - (Standing agenda item) update (Diana/Mike)
7. (xx min) Privacy by Design Discussion
8. Ballot Reconciliation for Consent Directive - pushed to next week (February 9 meeting)

Back to CBCC Main Page

**New**  
FHIR Security Topics  in support of FHIM
Meeting Information:  Tuesdays 2:00PM PT/5:00PM ET
Phone: +1 770-657-9270, Participant Code: 994563 hosted by Security
Web meeting Info:   https://global.gotomeeting.com/join/520841173  
Discussion includes: Security - Audit, Provenance, Labels, Signature

**New Day Time!!** 
FHIR Consent Profile (FHIR Privacy IG)  FRIDAY 10AM PT / 12NOON ET hosted by CBCC
GoToMeeting information: https://global.gotomeeting.com/join/520841173 
Phone: +1 770-657-9270, Participant Code: 994563 

Meeting Minutes (DRAFT)

Approval of Meeting Minutes for January 26

Objections: None; Abstentions: 0; Approval: 7

BH DAM

• Project participants are updating the behavioral health model based on the privacy consent directives work and addressing issues with the HTML code. They also made the publication available to a technical writer for help with the language.
• All comments have been addressed and there are no substantive changes.
• Once the technical writer provides feedback, project leaders will submit the BH DAM for publication by each group.

Healthcare Security and Privacy Access Control Catalog

• No update. Reminder sent to Nancy Orvis to withdraw DoD's negative vote after DoD reviews proposed resolution responses on ballot reconciliation sheet.

DPROV

• Johnathan announced that the S&I Framework DProv meeting this week will feature a walkthrough of the DSTU by Kathleen.

PASS Access Control

• Diana remains in touch with Alex Mense, who will summarize/clarify one comment from Bernd Blobel and return it to Diana; otherwise, reconciliation and updates to document are complete.

Joint EHR, Security, Privacy Vocabulary Alignment

• At this morning's meeting, Mike presented models for terms based on the provenance modeling system. Diana described where the terms came from and identified the reason for the divergence in the terms between DICOM and ISO 21089.

Privacy by Design Discussion

OASIS PbD committee is editing and updating their PbD spec

• any interest in leveraging the guidance and requirements?
  • focus on privacy
  • ongoing projects (?), current projects which may benefit to provide feedback/input to leverage the work already done in the spec
  • we've spoken about this in the Security WG; the standards governance board (Pat Van Dyke) was supportive. Work with the ArB to build a SAIF IG, leveraging the PbD spec. so that we get further
• we have a green light to do this
  • meant to assist groups (i.e. FHIR) with a test script so that they are actually implementing privacy in FHIR

It's a matter of how we want to move forward. Security or CBCC to lead with ArB as supporting WG?

• reach out to ArB (POC?) to make sure we have buy-in with our PSS
• divide work with CBCC doing overarching guidance, Security working on test scripts and operationalizing it (risk assessment)

What distinguishes PbD from other approaches to privacy?

• more in the software engineering realm of privacy where software engineering what software engineers produce conforms with privacy-protecting high level principles that are out there. It's a framework for privacy, internationally approved and accepted. Further detail into the software engineering portion that makes the documentation conform with privacy principles (7 high level principles).

• documentation from a high level perspective (Rick will post)
• UMA and HEART in Kantara did a privacy by design analysis

• definitely move forward with the PbD work, natural tie-in with the work that Security is already working on
  • recommend co-sponsorship

• PSS to be started by Rick and Suzanne, who will email the OASIS Privacy by Design (PbD) co-chairs an invite to next week's CBCC meeting so that they can brief the group on Privacy by Design and what it entails, and then outline how OASIS brought PbD to the stage of an OASIS technical committee. They will then cover the activities of the PbD committee.

Is the goal of the PSS to create a healthcare profile of the OASIS work?

• we would create a SAIF-compliant IG that is healthcare-related, with security by design factored in as well - for those who claim conformance - and operationalize it

Meeting adjourned at 12:36 AZT