preview

Health Information Process Analysis

Decent Essays

This week’s reading delves into the definitions of the processes and terminology that drives the way that Health Information Technology would operate in the ideal environment. These policies and procedures create the foundation for organizations to build a more interoperable health environment. Currently, each health care establishment seems to operate like its own country. Although they may belong to the larger continent, they may have their own language, currency and customs. This is great when operating within the country, but once a citizen needs to travel to a neighboring republic, the language, currency and custom just doesn’t translate as well. Important information may just be lost in translation. To attempt to bridge this issue, the …show more content…

These policies encompass all laws, regulations and guidelines for federal, state and local organizations. They address business needs, institutional policies, as well as, federal standards such as HIPAA. Although capstone policies begin to define what needs to be in place, enabling services are what makes the mission more of a reality. Enabling services are context-independent and provide a standard set of minimum requirements across HITs. DoD documentation doesn’t state whether the Army or the Navy is right or wrong. The federal documentation only established that all branches must use some form of authentication, system timeout, and credential expiration. The same would be true for HITs who conform to the NIST standard. This control could be beneficial in future interoperability. Enabling services incorporate 12 services: risk assessment, entity identification assertion (authentication), credential management, access control (authorization), privilege management, collecting and communicating audit trails, ensuring document integrity, secure communication channel, preserving document confidentiality, de-identification (proper removal), non-repudiation of origin, and managing consent directives (Matthew Scholl, …show more content…

Interchange capabilities are collectives of interfaces that cluster around specific operational services. Operational services don’t imply a particular interchange capability but is primarily related to some of the common features (Wes Rishel, 2007). The NHIN furthers considers its connection to people and policies by categorizing who information affects through the use of NHIE logical registries. These six categories are: consumers, patients, providers, PHR record locations, EHR record locations, consumer permissions, organizational participants, and systems. Since this is heavily role based, once organization know who the information belongs to they can begin to structure some of the common transaction feature. Very similar to the use of the enabling services described in the NIST, common transaction features include: audit logging, authentication (person), authentication (system), data integrity checking, error handling, HIPAA de-identification, holding messages, non-repudiation, patient summary record support, psuedonymize and re-identify, secure transport, and transport disambiguated identities (Wes Rishel, 2007). The NHIN does go on to note that while ensuring authentication not all NHIES will maintain a user registry, however, they will maintain permission registries. This would be in line with not keeping a centralized storage of PII. This also

Get Access