Slide Presentation from the AHRQ 2007 Annual Conference

Applying MPSP's security & privacy principles is ongoing

• Concentrating on 4A's principles
  • Data to be captured in audit logs
  • Limit access requests to patients being treated and information relevant to that treatment
  • Develop & accept
    • written policies and procedures for participating in the exchange
    • security credentialing guidelines for authorizing individuals to access health information through the exchange
    • minimum standards for routine auditing of individuals' access through the exchange