October 16, 2018 Security Conference Call

Back to Security Main Page

Attendees

Back to Security Main Page

x	Member Name		x	Member Name		x	Member Name		x	Member Name
.	John Moehrke Security Co-chair		x	Kathleen Connor Security Co-chair		.	Alexander Mense Security Co-chair		.	Trish Williams Security Co-chair
.	Christopher Shawn Security Co-chair		x	Suzanne Gonzales-Webb		x	Mike Davis		.	David Staggs
x	Diana Proud-Madruga		.	Johnathan Coleman		x	Francisco Jauregui		x	Joe Lamy
.	Rhonna Clark		.	Greg Linden		.	Grahame Grieve		x	Dave Silver
.	Beth Pumo		x	Jim Kretz		.	Peter Bachman		.	Bo Dagnall
x	Peter van Liesdonk		x	Theresa Ardal Connor		.	[mailto: ]		.	[mailto: ]

Back to Security Main Page

Agenda

1. (2 min) Roll Call, Agenda Approval
2. (5 min) Review and Approval of Minutes
   • Security Conference Call September 18, 2018 WGM minutes in process.
3. (10 min) TF4FA Normative Ballot reconciliation (formerly PSAF) - Mike, Chris
   • Meetings: Tuesdays, 11:00 AM Eastern; freeconference.com same as Security call
   • TF4FA Ballot Reconciliation (wiki)
   • TF4FA Vol.1 & 2 Ballot Reconciliation Sheet
     • Comments to be voted on this week: Comments 129 - 146 (last comment)
     • Next week: Review and vote on comments 147 - 161(last comment), which will conclude recon.
   • Assignment of document update?
   • Update on revision of PASS Audit
4. (05 min) TF4FA Trust Framework, Volume 3 - Update Mike, Chris
5. (05 min) Vote to approve NIB submission on three reaffirmation ballots: HCS, S&P Ontology, and SLS - Kathleen
6. (05 min) Review Security WG 3 Year Plan - Kathleen
7. (05 min) Check out Security WG Confluence site - Kathleen
8. (10 min) Vote to approve submission of November initial harmonization proposals: Revise HL7 ActPrivacyPolicy, Privacy Marks for CUI, Copy, Prohibition against Redisclosure with definition describing how to render, Add COPY as an integrity code per John, fixes Security Role code definition for grantor, healthcare power of attorney.
9. (05 min) GDPR whitepaper on FHIR Update - Alex

Back to Security Main Page

Meeting Materials

• 201809 Connectathon video for the integrated Care Plan, Clinical Reasoning, and Consumer Mediated Exchange tracks, which featured a Break the Glass scenario. Break glass scenario demonstrated a technical approach to balancing patient safety with patient privacy. Betsy, the starring persona, used a FHIR consent directive to restrict access to her mental health care plan by all of her multiple distributed care teams other than her mental health provider and CDS'.

• Betsy's endocrinologist is about to order an opioid to treat her diabetic neuropathy pain based on her medication list, which masked the mental health medication, Xanax based on her consent directive. The endocrinologist's CDS throws a drug-drug counter indication warning based on a CDS Hooks card.

• The warning gives two options to the endocrinologist, either Break the Glass with notice about being audited or to ask the patient if there are medications that are not shown on the medication list. If the provider takes the Break the Glass option, the endocrinologist will be shown her mental medication list, which includes Xanax and a recommendation to prescribe Gabapentin instead.

• If the endocrinologist takes the second option, he will explain to Betsy that there is a potential drug-drug counter indication. The endocrinologist then asks if there are some medications that Betsy hasn't authorized him to see. Betsy decides to tell him about her mental health prescription for Xanax. Using her mobile app for Right of Access directives, she directs the app to only retrieve her mental health medications from either her mental health provider's EHR or optionally from those records that are accessible through the mental health provider's HIE. Because Betsy is exercising her Right of Access on her own behalf rather than delegating that right to a third party app to exercise on her behalf, she does not need a signed Right of Access directive. So in this case, a simple click on the app's OAuth authorization button is sufficient. The app returns her mental health medication list, which indicates that Xanax is her currently prescribed anti-anxiety and antidepression medication to treat late onset PTSD related to combat. The provider then requests a list of alternative non-opioid medications for diabetic neuropathy pain. CDS-Hooks returns Gabapentin as a recommended alternative pain medication. The endocrinologist discusses this with Betsy and she agrees to try Gabapentin instead.

Back to Security Main Page

Meeting Minutes DRAFT

Chair, Kathleen Roll Taken, Agenda reviewed, updates made as requested

• Security 9/18 meeting minutes approved - Diana Moved/Theresa Second 9-0-0
• Submission of 3 Reaffirmation NIBs approved - Theresa Moved/Mike Second, Peter abstained 8-1-0

TF4FA Ballot Reconciliation

• Spreadsheet for 10/16 Comment dispositions 130 - 146 approved. Mike Moved/Theresa Suzanne abstained Second 8-1-0

Next block are Ballot comments: 147 - 161 for TF4FA Recon call and Security WG review on 10/23. Final vote on the last of the dispositions is scheduled for 10/30.

• PASS Audit document update - Mike had no updates
• Volume 3 - Mike had no updates
• Security WG 3 Year Plan - Work in progress. Will be adding milestones, e.g., NIB submissions to tie more closely with Project Insights for project management and WG health purposes.
• Securithy Confluence - Quick review. Suzanne and Kathleen met with Joshua Procious about CBCP and Security wiki set up, migration of wiki materials, and cut-over to only using Confluence after the January WGM while continuing to use wiki for archived material.
• Submission of November Initial Harmonization Proposals approved Diana Moved/Theresa, Mike abstained. 8-1-0
• FHIR Security Update - Call Cancelled and John sent his regrets.
• GDPR whitepaper on FHIR Update - Alex and John were absent so no report.

No additional discussion items brought forward Meeting adjourned at 1258? Temporary Recording https://fccdl.in/4EMYgsorg0 --Suzannegw (talk) 21:55, 19 September 2018 (EDT)

Back to Security Main Page