1. Privacy, Security and Data Sharing Committee Annual Report Oct. 2, 2007

2. Background and Mission  Formed Dec. 9, 2002  Mission  represent public health and health services research interests in privacy and security issues  address balancing patient privacy, confidentiality, and security with the need for useful data for public health and research  Focus on priorities related to privacy, security and data standardization including implementation of the HIPAA privacy and security rules

3. Accomplishments Revise Privacy and Security Committee Web Page for improved access to committee products and information resources Participate in national privacy and security efforts (HISPC and HITSP) Develop PRISM Privacy Tool to improve public sector privacy guidance

4. Revise Privacy and Security Committee Web Page  New Privacy, Security and Data Sharing Committee web page  Revised page format and content  Consolidated privacy and security materials, resources, and websites  Committee page at http://phdsc.org/about/committees/ps ds.htm http://phdsc.org/about/committees/ps ds.htm

5. Participate in National Efforts on Privacy and Security Participate in national privacy and security efforts State and national privacy and security projects (HISPC) Participation in defining public health scenarios. Several members participate/participated in state-specific efforts. National privacy and security standards harmonization (HITSP) Participation in the Security and Privacy Workgroup. Involves selection, definition, and standards recommendation of relevant security and privacy constructs.

6. Develop PRISM Privacy Tool An electronic, table-driven, web-based tool Provides a framework for understanding the basic legal privacy requirements for the use and disclosure of health information in the public sector  Identifies and defines the baseline conditions and requirements that a government or other health entity must follow when using and disclosing specific types of health information  Organizes key privacy requirements related to uses and disclosures to provide direction to improve privacy policies, procedures, and compliance Addresses a gap in federal HIPAA privacy guidance

7. Develop PRISM Privacy Tool PRISM structure and contents Uses the HIPAA privacy rule as the framework, then adds other federal privacy laws, such as 42 CFR pt. 2 and FERPA, where relevant References common provisions in state law Focuses on DISCLOSURES of health information by public programs  Funded by the National Center for Health Statistics (NCHS) Access PRISM at http://www.phdsc.org/prism/introduction.htm. Will be available during the meeting to view http://www.phdsc.org/prism/introduction.htm

8. Future Activity Submitted a proposal for further development, review, and refinement of the PRISM tool Submitted a proposal to conduct a systematic, in-depth analysis of the state-level HISPC Public Health Domain findings to identify best practice and guidance recommendations Continue to monitor and look for avenues of involvement and/or participation in the national privacy/security efforts Development of ideas for security projects

9. Committee Chairs Vicki Hohner, MBA Senior Consultant Fox Systems, Inc. vicki.hohner@foxsys.com vicki.hohner@foxsys.com David P. Lawton RN, PhD Public Health Informatics Coordinator Nebraska Department of Health and Human Services david.lawton@dhhs.ne.gov

10. Committee Members Kimberly Baldwin-Stried, MBA, MJ, RHIA, CPHQ KBS Consulting Bruce Burns Texas Health Care Information Council Kathleen Cook National Association of County and City Health Officials (NACCHO) Robert Davis National Association of Health Data Organizations Sterling Elliott, MPH Association of State and Territorial Health Officials (ASTHO) Angela Fix, MPH Association of State and Territorial Health Officials (ASTHO)

11. Committee Members Marjorie Greenberg, M.A. CDC/NCHS Hetty Khan, M.S., B.S.N., R.N. CDC/NCHS Sally Klein, RN, MBA Fox Systems, Inc. Denise Love National Association of Health Data Organizations Dr. Gerald Masson Johns Hopkins University Anna Orlova Public Health Data Standards Consortium Barbara Rudolph, Ph.D. The LeapFrog Group

12. Committee Members Virginia K. Saba, Ph.D Georgetown University Walter Suarez, M.D., M.P.H. Midwest Center for HIPAA Education Jonathan Teague California Office of Statewide Health Planning and Development Jessica Townsend, M.P.H. Health Resources & Services Administration Socrates Tuch Ohio Department of Health Richard Urbano, MD Vanderbilt Kennedy Center