CARIN App Registration - Revision history

Tom: /* References */

2023-10-25T19:18:59Z

‎References

2021-08-02T23:06:30Z

‎References

2021-08-02T22:57:04Z

‎Summary

2021-08-02T22:55:57Z

‎Summary

2021-06-06T22:07:56Z

‎Registration

2021-06-06T22:07:17Z

‎Registration

2021-06-06T22:06:35Z

‎Summary

2021-06-06T22:02:31Z

‎Registration

2021-06-06T21:50:20Z

‎Registration

2021-06-06T21:48:02Z

‎Summary

@@ Line 34: / Line 34: @@
 ==References==
 [[Category: Best Practice]]
 [[Category: Health]]

@@ Line 31: / Line 31: @@
 * The rest of the document is designed as a check list for security concerns.
 * Threats are only addressed in terms of intelligence reports with no indication that a threat analysis of the deployment is desirable.
-* The goal for mitigation risk is targeted to the creation of a binding contract with the patient.
+* The goal for mitigation risk for the payor is targeted to the creation of a binding contract with the patient.
 ==References==

@@ Line 30: / Line 30: @@
 * The guide gives a strict reading of the rule for the benefit of the payers with only every limited concern for the patient.
 * The rest of the document is designed as a check list for security concerns.
-* Threat are only addressed in terms of intelligence reports with no indication that a threat analysis of the deployment is desirable.
+* Threats are only addressed in terms of intelligence reports with no indication that a threat analysis of the deployment is desirable.
 * The goal for mitigation risk is targeted to the creation of a binding contract with the patient.

@@ Line 17: / Line 17: @@
 * The guides is for a "voluntary attestation framework that is aligned to the CARIN Code of Conduct."
 * The guide focuses on registration for Developers and their Applications.
-* CARIN makes thee assumption that most applicants will be approved.
+* CARIN makes the assumption that most applicants will be approved.
 * As is make clear in the [https://wiki.idesg.org/wiki/index.php/Patient_Choice Patient Choice] wiki, most health apps today do not protect the data in the patients domain.
 * From that we can conclude that the CARIN guide is directed towards the profitability of the various organizations involved and not on patient empowerment.

@@ Line 24: / Line 24: @@
 * Application profiles are recommended - this is a very positive approach that needs to be deployed across all of healthcare.
 * Any decision about allow an app access to PHI must be made within 5 business days, which implies that some sort of pre-registration is needed.
-* An API to the registration service is defined, but it appears to only apply to registration and not to verification.
+* An API to the registration service is described, but it appears to only apply to registration and not to verification.
 ==Summary==