PHDSC LogoPHDSC Graphic Banner
Home Join the PHDSC ListServ Subscription Site Map Contact Us
 

Privacy, Security and Data sharing (PSDS) Committee

Purpose | Description of Activities | Products | Founded | Minutes | Links

In the Spotlight

Register now for a Webinar on PRISM: April 21, 2008 from 2:00-3:30 pm EST
PRISM one-pager
PRISM Press Release

PRISM: A Privacy Toolkit for Public Health Professionals

HIPAA Privacy Case Studies for Local Public Health Agencies

Purpose

Privacy refers to an individual’s right to control their personal information.

Confidentiality refers to an organization's responsibility to protect personal information obtained to provide or as a result of a service.

Security refers to the actions an organization takes to protect that information.

The mission of the PHDSC Privacy, Security and Data Sharing (PSDS) Committee (formerly known as the Privacy, Confidentiality and Data Sharing Committee) is to:

§      Represent broad public health and health services research interests on privacy and security issues

§      Address balancing the need for individual privacy, confidentiality, and security with the need for use of data for public health and research activities

§      Focus on priorities related to privacy, security, and data standardization, including implementation of the HIPAA privacy and security rules

§      Educate on privacy and security as related to public health and research

Description of Activities

The PSDS Committee is working on the development of educational resources for state and local health agencies on privacy and security issues related to HIPAA, national standards, and NHIN implementation.

Recent PSDS activities include:

§      Participating on the AHIMA Security and Privacy Task Force under the RTI project to generate draft health information workflow sharing scenarios to assess variations in state and federal laws and business practices that hinder interoperability and the exchange of health information

§      Developing a joint national communications effort to communicate with both the public health sector as well as to groups involved in national efforts around the electronic health record, health information infrastructure, standards, and other health-related activities.

§      Writing and distributing letters to all state governors to: 1) support state efforts in the RTI contract; 2) encourage strong public health and other public sector participation; 3) outline some of the major privacy concerns for public health, especially those that differ from the private sector; and 4) offer the Consortium's support in the process.

§      Completing several case studies describing efforts by local public health agencies to implement the HIPAA Privacy Rule.

Products

PRISM: A Privacy Toolkit for Public Health Professionals -  June 2007

The PRISM Privacy Tool is an interactive electronic tool to provide state and local government health programs, and public health departments and programs in particular, with a convenient and useful way to understand the basic legal privacy requirements for identifiable health information use and disclosure. The tool identifies and defines the baseline conditions and requirements that a public health or other government health entity must follow when using and disclosing specific types of health information.

The PRISM tool is organized according to the three common roles and functions of state and local public health and other government health entities that often require use or disclosure of health information: public health authority, health care provider, and as a payer of health services. Using the HIPAA requirements as a general foundation, along with other applicable federal laws such as 42 CFR pt.2 and FERPA, the tool uses a set of tables to describe the general guidelines and requirements for uses and disclosures of various types of information (such as mental health, immunization, and reproductive health) by purpose category (such as treatment, public health, law enforcement, and research), and include recognition of where state law may come into play.

The PRISM tool can be used in two ways: the tables can be downloaded separately, or the user can access specific information by clicking first on a specific table and then clicking on the icon in the box that corresponds to the use/disclosure of interest. The box will open a view of the contents for that specific information/purpose. The Consortium is also interested on your feedback on the tool and its usefulness; please use the feedback form available on the site.

The PRISM tool was developed by Consortium members Walter G. Suarez, MD, MPH, Institute for HIPAA/HIT Education and Research and Vicki Hohner, MBA, Fox Systems, Inc, in association with the Lewin Group under contract with the National Center for Health Statistics. Legal review was provided by Joy Pritts, JD.

Local Health Privacy Case Studies:

These case studies provide real life examples of how to implement the provisions of the HIPAA Privacy Rule in the complex public health agency setting. These studies will help public health entities, particularly at the local level, determine when and how the HIPAA privacy regulation applies to them. This project was funded through a grant from the Health Resources and Services Administration.

 

Founded

December 9, 2002

Minutes

October 22, 2007 (PDF, 2 pages/75KB)
July 17, 2007 (PDF, 3 pages/74KB)
February 1, 2007 (PDF, 3 pages/18KB)
October 30, 2006 (PDF, 3 pages/19KB)
July 11, 2006 (PDF, 4 pages/21KB)
June 6, 2006 (PDF, 5 pages/26KB)
April 11, 2006 (PDF, 4 pages/46KB)

See Information on Past PSDS Activities

Click here for a list of privacy, security, and data sharing resources.

 

Co-Chairs

Vicki Hohner, MBA
Senior Consultant
Fox Systems, Inc.
vicki.hohner@foxsys.com

David P. Lawton, RN, PhD
Health Surveillance Section Administrator
Nebraska Health and Human Services System
david.lawton@hhss.ne.gov

List of Members of the PSDS Committee

 

 
 
 

Click here to review the PHDSC's Legal and Privacy Statement

 
Copyright 2006 © Public Health Data Standards Consortium - All rights reserved