Privacy and Security Workgroup

6
Privacy and Security Workgroup NSTIC Approach November 2, 2012

TAGS:

description

Privacy and Security Workgroup. NSTIC Approach November 2 , 2012. January 1, 2016. The Identity Ecosystem: Individuals can choose among multiple identity providers and digital credentials for convenient, secure, and privacy-enhancing transactions anywhere, anytime. . - PowerPoint PPT Presentation

Transcript of Privacy and Security Workgroup

Page 1: Privacy and Security Workgroup

Privacy and Security Workgroup

NSTIC ApproachNovember 2, 2012

Page 2: Privacy and Security Workgroup

Ability to include identity attributes will enhance privacy

Secure, online patient access to health information

January 1, 2016The Identity Ecosystem: Individuals can choose among multiple identity providers and digital credentials for convenient, secure, and privacy-enhancing transactions anywhere, anytime.

Improved care through secure exchange of electronic medical records

Streamlined provider access to multiple systems

Page 3: Privacy and Security Workgroup

Today – Patients and providers need multiple credentials

OpenID/LOA1

Page 4: Privacy and Security Workgroup

Implementing 3rd Party Credentials

OpenID/LOA1

SAML/LOA3

OpenID/LOA1

PKI

Open ID/LOA1

SAML/LOA3

OpenID/LOA1

Implementing 3rd Party Credentials adds complexities for EHR vendors

http://www.wave.com/
Page 5: Privacy and Security Workgroup

5 Draft for Deliberative Purposes Only Federal Cloud Credential Exchange Tiger Team

Middle Layer Authentication Service

• Cloud based

• Service authenticates users

• Patients and providers can re-use credentials across multiple Health IT services

• Translate between different protocols (open ID, PKI, SAML, etc.)

• Passes verification of authentication to EHR

SAML

Citizens

OpenID

OpenID

PKI

OpenID

FCCX.Government

Page 6: Privacy and Security Workgroup

EHR Certification Criteria

6

Provider EHR

Provider EHRThird-Party Service

Authentication takes place in E H R system

EHR Certification Criteria for Two-factor Authentication

Authentication takes place via third-party service


Privacy and Security Workgroup: Summary of Big Data Public Hearings January 26, 2015 Deven McGraw, chair Stan Crosley, co-chair.

Privacy and Security Workgroup: Summary of Big Data Public Hearings January 26, 2015 Deven McGraw, chair Stan Crosley, co-chair.

Interoperability Roadmap Comments Privacy and Security Workgroup Deven McGraw, chair Stanley Crosley, co-chair April 7, 2015.

Interoperability Roadmap Comments Privacy and Security Workgroup Deven McGraw, chair Stanley Crosley, co-chair April 7, 2015.

Notice of Proposed Rulemaking (NRPM) Comments Privacy and Security Workgroup Deven McGraw, Chair Stanley Crosley, Co-chair May 12, 2015.

Notice of Proposed Rulemaking (NRPM) Comments Privacy and Security Workgroup Deven McGraw, Chair Stanley Crosley, Co-chair May 12, 2015.

HIT Policy Committee Privacy & Security Workgroup Update Deven McGraw Center for Democracy & Technology Rachel Block Office of Health Information Technology.

HIT Policy Committee Privacy & Security Workgroup Update Deven McGraw Center for Democracy & Technology Rachel Block Office of Health Information Technology.

HIT Standards Committee Privacy and Security Workgroup: Standards for Consumer Engagement Dixie Baker, SAIC Steve Findlay, Consumers Union April 28, 2009.

HIT Standards Committee Privacy and Security Workgroup: Standards for Consumer Engagement Dixie Baker, SAIC Steve Findlay, Consumers Union April 28, 2009.

1 HIT Standards Committee Privacy and Security Workgroup: Reformatted Standards Recommendations & Implementation Guidance Dixie Baker, SAIC Steven Findlay,

1 HIT Standards Committee Privacy and Security Workgroup: Reformatted Standards Recommendations & Implementation Guidance Dixie Baker, SAIC Steven Findlay,

HIPAA Privacy Rule Access Right: Assessing Fees When an Individual Requests Electronic Access to PHI Privacy and Security Workgroup Stan Crosley, Chair.

HIPAA Privacy Rule Access Right: Assessing Fees When an Individual Requests Electronic Access to PHI Privacy and Security Workgroup Stan Crosley, Chair.

HIT Standards Committee Privacy and Security Workgroup Dixie Baker, Chair, Privacy and Security Workgroup Walter Suarez, Co-Chair, Privacy and Security.

HIT Standards Committee Privacy and Security Workgroup Dixie Baker, Chair, Privacy and Security Workgroup Walter Suarez, Co-Chair, Privacy and Security.

Privacy & Security Training - Texas CASAtexascasa.org/.../Privacy-and-Security-Course-Companion.pdfguidelines for confidentiality, privacy, physical and information security, breach

Privacy & Security Training - Texas CASAtexascasa.org/.../Privacy-and-Security-Course-Companion.pdfguidelines for confidentiality, privacy, physical and information security, breach

Privacy - Introductie Beware of privacy – security fallacies ! Privacy ...

Privacy - Introductie Beware of privacy – security fallacies ! Privacy ...

HIT Standards Committee HIT Standards Committee Privacy and Security Workgroup joint meeting with Clinical Operations Workgroup: Digital Signatures for.

HIT Standards Committee HIT Standards Committee Privacy and Security Workgroup joint meeting with Clinical Operations Workgroup: Digital Signatures for.

HIT Standards Committee Privacy and Security Workgroup: Privacy and Security Workgroup: Update Dixie Baker, SAIC Steve Findlay, Consumers Union March 24,

HIT Standards Committee Privacy and Security Workgroup: Privacy and Security Workgroup: Update Dixie Baker, SAIC Steve Findlay, Consumers Union March 24,

HIT Standards Committee Privacy and Security Workgroup ... · MacKenzie Robertson ... Walter Suarez, MD, MPH – Kaiser Permanente – Director of Health IT Strategy Well, yeah, I

HIT Standards Committee Privacy and Security Workgroup ... · MacKenzie Robertson ... Walter Suarez, MD, MPH – Kaiser Permanente – Director of Health IT Strategy Well, yeah, I

PROJECT WORKGROUP UPDATES - publichealth.lacounty.govpublichealth.lacounty.gov/ip/ICLAC/materials/WorkgroupUpdates... · Adolescent Workgroup Background •Due to privacy concerns,

PROJECT WORKGROUP UPDATES - publichealth.lacounty.govpublichealth.lacounty.gov/ip/ICLAC/materials/WorkgroupUpdates... · Adolescent Workgroup Background •Due to privacy concerns,

Privacy and Security Workgroup Big Data and Privacy October 27, 2014 Deven McGraw, chair Stan Crosley, co-chair.

Privacy and Security Workgroup Big Data and Privacy October 27, 2014 Deven McGraw, chair Stan Crosley, co-chair.

MU Stage 3 Notice of Proposed Rulemaking (NPRM) Comments Privacy and Security Workgroup Deven McGraw, chair Stan Crosley, co-chair May 7, 2015.

MU Stage 3 Notice of Proposed Rulemaking (NPRM) Comments Privacy and Security Workgroup Deven McGraw, chair Stan Crosley, co-chair May 7, 2015.

Privacy & Security Tiger Team: Update on C/A workgroup recommendations for behavioral health & CEHRT May 6, 2014.

Privacy & Security Tiger Team: Update on C/A workgroup recommendations for behavioral health & CEHRT May 6, 2014.

Federal: Privacy and Security - SCPMCS Privacy & Security 031914… · security so that patient privacy is protected. Following good privacy and security practices is also good sense.

Federal: Privacy and Security - SCPMCS Privacy & Security 031914… · security so that patient privacy is protected. Following good privacy and security practices is also good sense.

Personal Security and Privacy inPersonal Security and Privacy

Personal Security and Privacy inPersonal Security and Privacy

the usable security & privacy group · the usable security & privacy group. overview • framing privacy and security decisions • privacy and IoT • privacy on mobile devices.

the usable security & privacy group · the usable security & privacy group. overview • framing privacy and security decisions • privacy and IoT • privacy on mobile devices.