Slide Presentation from the AHRQ 2007 Annual Conference

However, we underestimated the issues related to privacy, security and confidentiality

• From a technical perspective we were ready for initial use in the fall of 2005 but due to the privacy, confidentiality, security AND legal concerns, we did not begin using the system until May 2006.
• Initially we believed once the Business Associate Agreements (BAAs) were in place, then we were fine—WRONG!
• It took 11 months to achieve consensus (and trust) on our initial approach, to draft the data sharing agreements, and to write the policies.
• In addition we spent approximately 3 months setting up the infrastructure to respond "real time" to changes in privacy, security and confidentiality.