PHI - Revision history

Tom: /* Full Title or Meme */

2023-10-04T03:38:33Z

‎Full Title or Meme

Tom: /* Full Title or Meme */

2023-10-04T03:37:52Z

‎Full Title or Meme

Tom: /* Context */

2022-07-03T16:21:37Z

‎Context

Tom: /* Context */

2022-07-03T16:20:37Z

‎Context

Tom: /* Context */

2022-07-03T16:18:22Z

‎Context

Tom: /* References */

2022-04-19T22:46:03Z

‎References

Tom: /* References */

2022-04-19T22:44:02Z

‎References

Tom: /* References */

2022-04-19T22:41:51Z

‎References

Tom: /* Solutions */

2022-04-01T21:57:51Z

‎Solutions

Tom: /* Context */

2022-04-01T18:54:51Z

‎Context

@@ Line 2: / Line 2: @@
 *As defined in [[FHIR]] Protected Health Information (PHI) must be protected by [[Secure Node]] interchanges.
 *Note that in some documents this is called Personally Identifiable Healthcare Information or Electronic Health Information([[EHI]]).
-* Note that the patient's devices are '''NOT''' consider to be a [[Secure Node]]. So once the data in in their hands, HIPAA no longer applies.
+* Note that the patient's devices are '''NOT''' consider to be a [[Secure Node]]. So once the data in in their hands, it is no longer considered PHI.
 ==Context==

@@ Line 2: / Line 2: @@
 *As defined in [[FHIR]] Protected Health Information (PHI) must be protected by [[Secure Node]] interchanges.
 *Note that in some documents this is called Personally Identifiable Healthcare Information or Electronic Health Information([[EHI]]).
 ==Context==

@@ Line 15: / Line 15: @@
 # Maintained in electronic media, or
 # Transmitted or maintained in any other form or medium."
-* Note, however, that HIPPA only applies specific requirements to covered entities.
+* Note, however, that HIPAA only applies specific requirements to covered entities.
 ==Problems==

@@ Line 15: / Line 15: @@
 # Maintained in electronic media, or
 # Transmitted or maintained in any other form or medium."
 ==Problems==

@@ Line 9: / Line 9: @@
 #ePHI for Electronic Protected Health Information: has the meaning set forth in 45 C.F.R. §160.103 of the HIPAA Rules.<blockquote>45 CFR § 160.103 defines Health information as any information, including genetic information, whether oral or recorded in any form or medium, that: (1) Is created or received by a health care provider, health plan, public health authority, employer, life insurer, school or university, or health care clearinghouse; and (2) Relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual</blockquote>
 # [https://compliancy-group.com/medical-device-hipaa-compliance-sharing-patient-information/#:~:text=HIPAA%20Compliant%20Patient%20Disclosures&text=Electronic%20protected%20health%20information%20(ePHI,their%20PHI%20under%20HIPAA%20regulation. According to the Compliancy Group] Electronic protected health information (ePHI) is any information stored in an electronic format, which includes patient-specific information that is collected, maintained, or transmitted by medical devices.
-#EHI for Electronic Health Information” which is any information that identifies the individual, or with respect to which there is a reasonable basis to believe the information can be used to identify the individual and is transmitted by or maintained in electronic media, as defined in 45 CFR 160.103, that relates to the past, present, or future health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual. EHI includes information that is accessed, exchanged, used or maintained in the context of the Trusted Exchange Framework and may be developed for an individual, on behalf of an individual, or provided directly from either an individual or from technology that the individual has elected to use. EHI includes but is not limited to ePHI and health information as defined in 45 CFR 160.103. However, unlike ePHI and health information, EHI is not limited to information that is created or received by a health care provider, health plan, public health authority, employer, life insurer, school, university or health care clearinghouse. EHI does not include health information that is de-identified consistent with the requirements
+#EHI for Electronic Health Information” which is any information that identifies the individual, or with respect to which there is a reasonable basis to believe the information can be used to identify the individual and is transmitted by or maintained in electronic media, as defined in 45 CFR 160.103, that relates to the past, present, or future health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual. EHI includes information that is accessed, exchanged, used or maintained in the context of the Trusted Exchange Framework and may be developed for an individual, on behalf of an individual, or provided directly from either an individual or from technology that the individual has elected to use. EHI includes but is not limited to ePHI and health information as defined in 45 CFR 160.103. However, unlike ePHI and health information, EHI is not limited to information that is created or received by a health care provider, health plan, public health authority, employer, life insurer, school, university or health care clearinghouse. EHI does not include health information that is de-identified consistent with the requirements.
 ==Problems==

@@ Line 26: / Line 26: @@
 ==References==
-* [https://health.mil/Reference-Center/Policies/2020/10/27/PGI-224190-PII-PHI-and-Federal-Information-Requirements DHA definitions] DHA PGI 224 – PROTECTION OF PRIVACY AND FREEDOM OF INFORMATION (Revised 2020-10-27)
+* [https://health.mil/Reference-Center/Policies/2020/10/27/PGI-224190-PII-PHI-and-Federal-Information-Requirements DHA definitions] DHA PGI 224 – PROTECTION OF PRIVACY AND FREEDOM OF INFORMATION (Revised 2020-10-27) The Defense Health Agency Privacy and Civil Liberties Office is responsible for safeguarding Military Health System (MHS) individuals and information by administering compliance programs
 * [[FHIR]] STU3 version of the [http://hl7.org/fhir/secpriv-module.html Security and Privacy Module] has a good overview of protection of health information.
 * [https://wiki.idesg.org/wiki/index.php/Health_Care_Profile Health Care Profile] in Kartara IDEF documentation.

@@ Line 21: / Line 21: @@
 ==Solutions==
-[[FHIR]] taken as a whole is designed to securely exchange [[PHI]] in a [[Privacy]] preserving manner.
+*[[FHIR]] taken as a whole is designed to securely exchange [[PHI]] in a [[Privacy]] preserving manner.
 ==References==