HL7 WGM Atlanta October 2015

Minutes from Security WG

Tuesday Q1

Opening Security WG Meeting Introductions

• Attendees
  • Chaired by Mike Davis - Co-Chair
  • Princess Trish Williams - Co-Chair
  • Alex Mense - Co-Chair
  • John Moehrke - Co-Chair
  • Hideyuki Miyohara
  • Johnathan Coleman
  • Duane De Couteau
  • Suzanne Gonzales-Webb
  • Kathleen Connor
  • Diana Proud-Madruga

Approval of agenda

• Agenda Reviewed [[1]]
  • Moved - Trish, Seconded - Johnathan Coleman, Approved 9/0/0

Approval of Previous WGM Minutes

• Minutes Reviewed [2]
  • Moved - Trish, Seconded - Kathleen Connor, Approved 10/0/0
    • Discussion on Wed Q4 session and separation of consent from contract in minutes. It was requested to have a computable method to provide evidence that consent was obtained. It was relayed that all except two items are optional in the profile for consent. Nothing was decided at this meeting - just a consensus reached but contingent on CBCC approval. Subsequently CBCC did not give approval.

International Report outs

• Japan (Hideyuki) is commencing Social Security number. Intention to create Japanese Medical Association want to define a new healthcare number for medical treatment. Want to introduce in 2018. Currently, each hospital has a separate number and therefore it is difficult to share information using patient number.
• Austria (Alex): ELGA will start in Dec 2015. Next step will be implementing tele-health and then to provide an infrastructure for tele-monitoring. Timeframe about 3 years.
  • Europe projects looking at cross country sharing - refer to International Council presentations.
  • In June Europe agreed on 'Right to Forget' - next step will be working out details to be completed by end of 2015. Possibly become law in 2018.
• Australia (Trish) PCEHR being renamed at MyHealthRecord. Push for more clinical engagement with the national system. Revision of governance for development organisation (replacing NEHTA).
• Other SDO update
  • ISO (Hideyuki) No updates since May, Next meeting in Bern in Nov 2015.
  • OASIS Trust Elevation (Diana) working on 4th deliverable - protocols for trust elevation. Looking at different models for implementation. They are seeking input and comments. Possible need for harmonisation. Diana will pass on to distribute to HL7 Sec WG.
  • OASIS XSPA (Mike) working with Sequoia - working on information to convey consent. Also updating to include move to Vocabs to HL7.
  • ANSI Insights (monitoring WG1 in ISO SC27) Next Generation Access Control (NGAC) - (very) technical specification
  • IHE (John) - Entering phase for new proposals. Working to align IUA profile with the SMART and HEART work. New consent profile to support codeable consents as opposed to BPPC.

Tuesday Q2

• Attendees
  • Chaired by Mike Davis - Co-Chair
  • Princess Trish Williams - Co-Chair
  • Alex Mense - Co-Chair
  • John Moehrke - Co-Chair
  • Hideyuki Miyohara
  • Duane De Couteau
  • Kathleen Connor
  • Diana Proud-Madruga
  • Don Jorgensen (SOA)
  • Ken Rubin (SOA)
  • Vadim Polyakov vpolyakov@ikovaloa.com (SOA)

PASS AC ballot reconciliation (Security,CBCC,SOA)

Tuesday Q3

• Attendees
  • Chaired by

Security WG Project Meeting: Data Provenance (w/Harry), review for final publication

Tuesday Q4

• Attendees
  • Chaired by

Security WG Project Meeting FHIR Security and Privacy (announcement to be made) - TENTATIVE Entire Quarter

Wednesday Q1

Joint with EHR