September, 2005What IHE Delivers 1 Basic Patient Privacy Consents (BPPC) IHE Vendors Workshop 2006 IHE Patient Care Coordination Education <Author(s)>

2 Basic Patient Privacy Consents Abstract The Basic Patient Privacy Consents (BPPC) profile provide mechanisms to: Record the patient privacy consent(s), Record the patient privacy consent(s), Mark documents published to XDS with the patient privacy consent that was used to authorize the publication, Mark documents published to XDS with the patient privacy consent that was used to authorize the publication, Enforce the privacy consent appropriate to the use. Enforce the privacy consent appropriate to the use.

3 Basic Patient Privacy Consents Scope Document Sources and Document Consumers in an XDS Affinity Domain Document Sources and Document Receivers using Cross Enterprise Point- to-Point Document Sharing

4 Basic Patient Privacy Consents Value Proposition an Affinity Domain can develop privacy policies, develop privacy policies, and implement them with role-based or other access control mechanisms supported by EHR systems. and implement them with role-based or other access control mechanisms supported by EHR systems. A patient can Be made aware of an institutions privacy policies. Be made aware of an institutions privacy policies. Have an opportunity to selectively control access to their healthcare information. Have an opportunity to selectively control access to their healthcare information.

5 Basic Patient Privacy Consents Key Technical Properties Human Readable Consents Machine Processable Support for standard Role-Based Access Control Mechanisms

6 Basic Patient Privacy Consents Standards and Profiles Used CDA Release 2.0 XDS Scanned Documents Document Digital Signature Cross Enterprise Document Sharing Cross Enterprise Point-to-Point Document Sharing