Revision as of 15:39, 7 October 2008

Community-Based Collaborative Care Working Group hosting Security WG

CBCC documented suggested changes for reusing the common terminology including operations, document types (CDA R2), etc.Permissions Catalog: Recommendations for Reuse

(05 min) Roll Call
(05 min) Approved Minutes from September 9th, 2008 Conference Call 18-0-0& Accept Agenda
(45 min) Update on the Permissions Catalog Project update (ike Davis)
- Draft framework document was reviewed by Mike Davis - LINK TO DOCUMENT
- Project Space on HL7 Homebase: Security WG Project Space
- We cannot use the SNOMED ontology to allow a security system to infer that if an object identified by its SNOMED code is present in a permission {operation, SNOMED}, that is child object are also inculded in that permission. This would put terminology inference in the security system. The SNOMED codes are not organized based on how restricted or sensitive the information is but by how clinicians relate to it.
  - Security Privacy and Authorization Framework presented by Mike Davis

(18 min) Data Consent R1 and Composite Privacy Consent Directive Update (Ioana Singureanu)

Consent Directive Use Cases (CBCC) - prioritize use cases. Currently the use cases focus on the the consumer but they also include the need for jurisdictions to exchange consent policy specifications.
We will use "eConsent" as user-friendly term that will have detailed analysis and design concepts behind.
All 8 Consent Directive Use Cases will be included in the analysis model targeted for January Ballot as follows:
- Update the Composite Privacy Consent Directive "draft for comment" based on reconciliation comments based on current use cases
- Analysis Model based on the relevant Consent Directive Use Cases

--Ioana13 01:23, 16 September 2008 (UTC) Back to Meetings

@@ Line 28: / Line 28: @@
 *''(05 min)'' Roll Call
 *''(05 min)'' Approved Minutes from [[September 9th, 2008 Conference Call]] ''18-0-0''& Accept Agenda
-*''(35 min)'' Update on the Permissions Catalog Project update (ike Davis)
+*''(45 min)'' Update on the Permissions Catalog Project update (ike Davis)
 ** Draft framework document was reviewed by Mike Davis - LINK TO DOCUMENT
 ** Project Space on HL7 Homebase: [http://hl7projects.hl7.nscee.edu/projects/security/ Security WG Project Space]
 ** We cannot use the SNOMED ontology to allow a security system to infer that if an object identified by its SNOMED code is present in a permission {operation, SNOMED}, that is child object are also inculded in that permission. This would put terminology inference in the security system. The SNOMED codes are not organized based on how restricted or sensitive the information is but by how clinicians relate to it.
+*** [http://hl7projects.hl7.nscee.edu/docman/view.php/57/359/Security%20and%20Privacy%20Authz%20Framework.pdf Security Privacy and Authorization Framework presented by Mike Davis]
 #''(18 min)'' Data Consent R1 and Composite Privacy Consent Directive Update (Ioana Singureanu)