July 16, 2013 DS4P Joint Project

IG Front matter submitted by Richard Thoreson

This Guide is about segmenting clinical records, so that personally identified information (PII) can be selectively shared. It mainly specifies an interoperable, standards-based privacy policy document. Policy execution is largely left up to EHRs, PHRs and HIE venders. This specification conveys policy information that venders can import, export, and execute, without human hands.

  The following analysis also considers and illustrates how privacy policies can be incorporated as clinical records are shared for care coordination, quality and public health reporting, and research.  The idea is that patients are more likely to consent to sharing sensitive PII, and providers are more likely to share valuable business records, if both are given meaningful opportunities to select who can see and use what data, and for what purpose.