The Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information

The principles of the Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information below establish a single, consistent approach to address the privacy and security challenges related to electronic health information exchange through a network for all persons, regardless of the legal framework that may apply to a particular organization. The goal of this effort is to establish a policy framework for electronic health information exchange that can help guide the Nation’s adoption of health information technologies and help improve the availability of health information and health care quality. The principles have been designed to establish the roles of individuals and the responsibilities of those who hold and exchange electronic individually identifiable health information through a network.

• The Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information

The Health IT Privacy and Security Toolkit

As part of a Privacy and Security Toolkit to implement the Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information (Privacy and Security Framework) the Office of the National Coordinator for Health Information Technology (ONC) and the Office for Civil Rights (OCR) developed a number of materials and guidance, respectively. The Privacy and Security Toolkit includes:

• Draft Model Personal Health Record (PHR) Privacy Notice & Facts-At-A-Glance (the "Leavitt Label")
• Reassessing Your Security Practices in a Health IT Environment: A Guide for Small Health Care Practices