The mission of the Health Information Security and Privacy Collaboration (HISPC) is to address the privacy and security challenges that impede electronic health information exchanges. Thirty-four (34) participating state and territorial teams assessed their laws, polices and practices with respect to health information privacy and security and developed implementation plans to address identified barriers.
In the first phase, the collaborative was comprised of teams representing 34 states and territories that were each charged to (1) assess variations in privacy and security related organizational-level business policies and state laws that affect health information exchange, (2) identify and propose practical solutions, while preserving the privacy and security requirements in applicable Federal and state laws, and (3) develop detailed plans to implement solutions.
In the second phase, the 34 teams selected a foundational component of their larger implementation plan to be completed in a six-month time frame.
In the third phase in 2008, forty-two states and territories comprised seven multi-state collaboratives to address privacy and security challenges related to the cross-state electronic exchange of health information. Project goals were to develop common, replicable multi-state solutions that have the potential to reduce variation in and harmonize privacy and security practices, policies, and laws.
The 2007 HISPC Report summarized the work and plans generated by the 34 project teams for ensuring the safety and security of electronic health information exchange.
Funded by a contract from the Agency for Healthcare Research and Quality (AHRQ) and the Office of the National Coordinator for Health Information Technology (ONC) at the Department of Health and Human Services (HHS), HISPC is managed by RTI International (RTI).
PHDSC strongly supports HISPC activities. PHDSC leadership has been participating in the HISPC Technical Advisory Panel. The PHDSC Privacy, Security and Data Exchange Committee distributed letters to all state Governors to: 1) support state efforts in the RTI contract; 2) encourage strong public health and other public sector participation; 3) outline some of the major privacy concerns for public health, especially those that differ from the private sector; and 4) offer the Consortium's support in the process.
The following PHDSC member organizations are involved in the HISPC project: