Page History

...

Possible Candidates from 7/19/21 Tiger Team Meeting:

• HIE VCI 
• VCI (what is "VCI")
• Good Health Pass Collaborative Blueprint (Final to be published July 21)
• Payer to Payer Data Exchange - B2B vs. B2C; patient-mediated vs. not patient-mediated
• Maternal-child health research - how do we verify the child so we know who a vaccine was given to?
• Pediatrics or Geriatrics - may be too many policy implications re: delegated access to tackle right now

TEFCA-specific (per draft 2; will need updating): Recording & communicating a Meaningful Choice; Authorizing an Individual Access Request

Patient Mediated. Patient authorizes access to their data by a third party when it is under patient's management and not the data creator (e.g. an intermediary allows patient to manage their own data).

Patient Directed. Patient authorizes access to their data to a third party through an app as in SMART app launch workflow using the patient's credentials for authenticating themselves at the data holder organization which is the data creator.

3 Compilation of industry-wide digital identity and patient matching projects

...

Risk Analysis or similar discussion Identifying the Identity Level of Assurance that is appropriate for various use cases, for example a patient's access to their own data or to make a consent, covered entity access to health data for Treatment/Payment/Operations, verification of demographic attributes to flag as verified and with Patient resource or Encounter context. 

Process Include process for considering verifying a photo to be verified for use in matching, e.g., as in 800-63 where photo taken during proofing event is confirmed as matching with photo on identity evidence for IAL2 remote unsupervised etc. 

Identity verification use case leveraging the parent's identity verification in order to shore up identity of the child.

...