What's Happening in Health IT

In This Issue

• Gaps Persist in Privacy and Security of Some New Health IT Technologies
• The Role of Standards in Preventing & Mitigating Health IT Patient Safety Risks
• COMMENT PERIOD EXTENDED: CMS RFI on Availability and Pre-certification of Medicaid Information Management System Modules
• Federal Advisory Committee Schedule July 18- July 22

Gaps Persist in Privacy and Security of Some New Health IT Technologies

As more and more health information is digitized with tools like wearables, fitness trackers and even health social media, the need to make sure identifiable health information is private and secure increases. However, many of these tools didn’t exist when HIPAA was first enacted in 1996. A new ONC report, posted today, takes a look at the challenges of protecting this information. Examining Oversight of the Privacy & Security of Health Data Collected by Entities Not Regulated by HIPAA finds that large gaps in policies around access, security and privacy continue, and finds that consumers and innovators are confused about the privacy and security rules that impact these tools. ONC has been working closely with the Office for Civil Rights (OCR) and the Federal Trade Commission (FTC), along with stakeholders across the health and health IT ecosystem in the development of this report and will continue to work with them to help close the gaps. Read more inthe blog post co-authored by National Coordinator for Health IT Dr. Karen DeSalvo and OCR Director Jocelyn Samuels.  

The Role of Standards in Preventing & Mitigating Health IT Patient Safety Risks

ONC and National Institute of Standards and Technology (NIST)  are hosting a health IT community technical workshop on September 7, 2016.

Health IT standards are part of the foundation needed to deliver high quality, patient-centric care. The industry continues to gain a better understanding of the relationship between managing risk and providing quality care through the safe use of Health IT.

This important forum is an opportunity to receive updates on the latest standards development process related to risk prevention and mitigation, quality assurance, and safety-related usability. It brings together industry stakeholders to share best practices and define the path forward for risk prevention and mitigation in health IT.

Register online at nist.gov

COMMENT PERIOD EXTENDED: CMS RFI on Availability and Pre-certification of Medicaid Information Management System Modules

The Centers for Medicare & Medicaid Services (CMS) issued a request for information (RFI) entitled Modular Solutions for Medicaid IT Enterprise and Pre-certification of Solutions. To be assured consideration, written or electronic responses on the June 14, 2016 RFI must be received no later than August 15, 2016.

CMS provides states with $5 billion each year to develop and maintain their Medicaid Management Information Systems (MMIS). States use these systems to process claims and encounters, enroll and pay providers, and manage enrollment and benefits for beneficiaries for the 71 million people receiving coverage through the Medicaid Program. 

With this RFI, CMS seeks public input regarding the availability of modular solutions for Medicaid enterprise systems, specifically for clinical data warehouse and identity management modules. CMS is also soliciting input on the possibility of pre-certification for such modules in order to streamline the development and certification of MMIS.

For more information, contact CMS

Federal Advisory Committee Schedule July 18- July 22

Tuesday, July 19
1:00 p.m. to 2:30 p.m. ET. Standards: 2017 Interoperability Standards Advisory Task Force Meeting. Learn more: http://ow.ly/JiMc302dHrI

Thursday, July 21
1:00 p.m. to 2:30 p.m. ET. Standards: 2017 Interoperability Standards Advisory Task Force Meeting. Learn more: http://ow.ly/FhpJ302hQZg

*All times are in Eastern Time unless otherwise noted