August 14, 2018 Security Conference Call

Back to Security Main Page

Attendees

meeting recording temporary: https://fccdl.in/7ooU0lXS9l

x	Member Name		x	Member Name		x	Member Name		x	Member Name
x	John Moehrke Security Co-chair		.	Kathleen Connor Security Co-chair		.	Alexander Mense Security Co-chair		.	Trish Williams Security Co-chair
x	Christopher Shawn Security Co-chair		x	Suzanne Gonzales-Webb		x	Mike Davis		x	David Staggs
x	Diana Proud-Madruga		x	Francisco Jauregui		x	Joe Lamy		.	Greg Linden
.	Rhonna Clark		.	Grahame Grieve		.	Johnathan Coleman		.	[mailto: Matt Blackman, Sequoia]
.	Mohammed Jafari		x	Jim Kretz		.	Peter Bachman		x	Dave Silver
.	Beth Pumo		.	Bo Dagnall		.	Riki Merrick		.	[mailto: Julie Maas]

Agenda

1. (2 min) Roll Call, Agenda Approval
2. (5 min) Review and Approval of:
   • August 07, 2018 Security Conference Call
3. (5 min) GDPR whitepaper on FHIR update - Alex, John, Kathleen
4. (5 min) PSS Review and Vote Cross Paradigm Interoperable Implementation IG PSS
5. (5 min) TF4FA Normative Ballot reconciliation (formerly PSAF) - Mike, Chris
   • Meetings: Tuesdays, 11:00 AM Eastern; freeconference.com same as Security call
   • TF4FA Ballot Reconciliation (wiki)
   • Ballot Reconciliation Sheet_v20180724 for review offline
     • Comments 25-41 up for vote (review if necessary)
6. (10 min) PASS Audit post ballot reconciliation document update - Mike
   • http://wiki.hl7.org/index.php?title=PASS_Healthcare_Audit_Services
7. (05 min) TF4FA Trust Framework Volume 3 (placeholder) - Mike, Chris
8. Is Privacy Obsolete - Mike
9. (05 min) Placeholder: HL7 WGM Baltimore planning

Back to Security Main Page

Meeting Minutes (DRAFT)

Chair: Chris Shawn

Roll taken

GDPR whitepaper on FHIR update;

• Link to Rene Spronk's GDPR presentation https://vimeo.com/267769545 password GDPR (4 capitals) approx. 30 min long.

MOTION made : to be a co-sponsor for PSS as presented (Suzanne/MIke) objections: none; abstentions: none; motion approved:

MOTION to approve block of TF4FA comments 24-41 (Suzanne/Mike) objections: none; abstentions: none; motion approved:

additional meeting today, 42-51 comments ballot resolutions completed

PASS Audit:

• No update on AUDIT

TF4FA Trust Framework Volume 3

• met this week to discuss; understanding that there is a great deal of interested fro FHIR

• reviewed by Kathleen with complements
• plan to present at the September WGM, balloting in January
• docuoment will be put out to security listserve as soon as we can for review (pre-ballot)
• presented major graphics at the security WG, its a matter of filling in the content

Privacy Obsolete

• plan to present ata the security WGM
• add to the joint agenda CBCP-Security
• there is a tremendous amount of information being gathered (enough for 3+ years)
  • trying to narrow it down and make resources avialbe that we have to make sometables that summarize the vectors that we
  • technology, policy viewpoints
  • we will most likely not have a conclusion, but information can be evalutated (US:good luck, EU:better, etc)
• Mike does not feel that its obsolete--that's what the paper will draw out
  • PPT given at May 2018 meeting which will be very close to where we are at

Baltimore WGM Agenda

• add TUE Q4 - update PSAF Working Session to PSAF/TF4FA Volume 3 Working Session)
• move from TUE Q1 (TF4FA - volume 3)
• DISCUSSIONS on major changes in FHIR (from experts) ; full quarter
  • changes expected to see. something in between FHIR for DUMMIES and FHIR for TECHNICAL discussion
  • drill down of activities (TUE Q3 entire quarter)

Joe L, Mike, chris shawn dave s, david stags, diana, Francisco, jim K

• Mike mentioned that a few folk have been close to the TEFCA;
  • TEFCA update; more than what does TEFCA and its acronym mean...
    • in the US the Feds have been involved in their own wg to make TEFCA recommendations and concerns
    • if we have an opportunity to talk to that; more than 10 minutes
  • schedule a Q on TEFCA; invite ONC, VA, IHS, CMS, SS, DoD (US Federal Agencies)
    • issues around the TEFCA that is of interest to HL7

1. finishing up of POU; current TEFCA has defined POU, but is different.... some states have need for EMergeny access, which is not part of TEFCA; HL7 needs to do a better job of promoting..standards based and not 'made up' by verticlas (TEFCA has its own, VA has its own, DURSA has its own); we want to coax ONC into adopting the HL7 standards;

• because we are very willing to put into th voca into the vertical; Sequoa, CommenWell or whomever
• OASIS Update to XSPA-SAML (add to Q3 Q4 joint) as part of international standards

Motion to Adjourn: (Suzanne) Meeting adjourned at 1234 Arizona Time --Suzannegw (talk) 15:35, 14 August 2018 (EDT)