1. 1 Vermont Health Information Technology Plan (VHITP) Workgroup Meeting March 14, 2007 VERMONT INFORMATION TECHNOLOGY LEADERS

2. 2 Agenda VITL Update VHITP: –Where are we –Discussion topics for today: Education Authentication and Access Control Revisit Patient Centeredness / Patient Consent / Patient Control issue

3. 3 Where are we Preliminary Plan Use Narratives Architecture Consumer Feedback Funding/Financing HISPC –Education & Infrastructure –Authentication & Access Control –Patient identifiers –Patient Consent & Control –“Break the glass”

4. 4 Plan Sections - Update

5. 5

6. 6 Education What issues are we aiming to educate on? Two different campaigns? Model of managing campaigns –Role of VITL / VITL Staff / Subcommittees / Contractors What are we asking the public to do? –Opt-in, Log-in –Stay aware of initiatives –Ask practitioner What are we asking practitioners to do? Phases? Timeline?

7. 7 Education: VHITP Principles I. Health information technology will improve the care Vermonters receive by making health information available where and when it is needed. II. Vermonters will be confident that their health care information is secure and private and accessed appropriately. III. Shared health care data that provides a direct value to the patient, provider or payer is a key component of an improved health care system. Data interoperability is vital to successful sharing of data. IV. Vermont’s healthcare information technology infrastructure will be created using best practices and standards, and whenever possible and prudent, will leverage past investments, and will otherwise be fiscally responsible. V. Stakeholders in the development and implementation of the health care technology infrastructure plan will act in a collaborative, cooperative fashion to advance steady progress towards the vision for an improved healthcare system.

8. 8 Education Earned Media –Radio interviews, opinion pieces, news coverage Paid Media –Radio, TV, direct mail, sponsorships Website –New VITL Website Partnerships –Look around the stakeholder circle –Portals? (Health Plans, Medicaid, CCIS Portal, PHRs)

9. 9 Education “What’s in it for me?” –Use Narratives What about the risks? For people who have a negative viewpoint? What role does the patient control/consent/centeredness issue play here?

10. 10 Authentication/ Access Control Key Barrier –User Adoption (ease of use, security, perception of security) –Cost (integration, user support) Methods: Direct –Straight username and password (status quo) –Shared credentials (LDAP, AD) Brokered –Pass-through authentication –Central authentication (Kerberos, token services, web-based services) –Public Key Infrastructure (PKI)

11. 11 Authentication/ Access Control – Options Help RHIOs, projects, applications, stakeholders understand the options Understand what stakeholders are doing now Understand what other HIENs are doing Define framework for central services Position initiatives to work within the federal PKI infrastructure Help articulate the future environment

12. 12 Patient Control/ Consent/Centeredness Why are we revisiting this issue? What did we say in the Preliminary Plan?

13. 13 Patient Control: Preliminary Plan

14. 14 Patient Control/ Consent/Centeredness Do we need a consensus on a more specific policy/direction? Potential options: 1.Patient Control as an overarching principle; all HIEN participants adhere to the principle (must be defined of course) 2.Consent as the principle 3.No change

15. 15 Project Website