1. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Sprint #4 Technical Objectives Integration of Drools Service, Document Processing, and REM Batch Execution of Drools rules SAMHSA/FEISystems Provide live Context Handler Meeting between FEI, Duane, and Kathleen to discuss clinical privacy rules (pursue both Drools DRL representation and rules engine-neutral clinical policy representation) VA/Edmonds Scientific Mitre Update Vocabularies

2. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Sprint #4 Technical Accomplishments Integration of Drools Service, Orchestrator, Document Processing, and REM Batch Execution of Drools rules SAMHSA/FEISystems Meeting between FEI, Duane, and Kathleen to discuss clinical privacy rules (pursue both Drools DRL representation and rules engine-neutral clinical policy representation) VA/Edmonds Scientific Mitre Update Vocabularies Provide live Context Handler (In-progress validating in test harness) Vocabulary for Clinical/Organizational Rules Editor

3. Sprint #5 Objectives Issues Integrate ACS – HCS – Document Processor Integrate Karion Services (Need Change to Web Services) XACML Policies – First Cut VA EHTAC Task Order #6 Not Delivered on July 29, 2012. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Integrate Jericho PDP RTM Mapping – Monday July 16th Team approves Jericho Systems as new team member Integrate Clinical/Organization Tagging Rules Generation (DRL) Actions

4. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Mitre Patient Authorization And Restrictions SAMHSA/FEISystems VA/Edmond Scientific Jericho Systems REM Reference ‘EHR’ PUSH SENDER HCS/ACS ORCHESTRATION HCS Rules Engine HCS Document Processing (Tagging) XACML PDP Enforcement Patient Sensitivity Constraints/Obligations Organizational/Jurisdictional/Applicable Privacy Law Obligations and Refrain Policies Consent Locator Access Control System (ACS) Clinical Rules Organizational Rules Push Receiver XDS and XD* Re-Disclosure ex. Enforce Release Constraints Enforce Internally Prototypic Third Party Enforce Constraints on Re-Disclosure Pilot Development Activities Phase I – Push Scenarios Patient Consent Directive Auth Decision Req AuthZ request(ACS) C32 AuthZ decision(ACS) Obligations Clinical Rules Organization Rules

5. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Kairon Updates

6. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Kairon Updates

7. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Kairon Updates

8. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Drools Batch Updates

9. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Tagging Policy – Phase I

10. Data Segmentation for Privacy VA/SAMHSA/Mitre Pilot Sprint 4 Review Clinical Sensitivity Tagging Rules – Phase I (NLM/NIH Candidate)