1. HIT Policy Committee Privacy & Security Policy Workgroup Deven McGraw, Chair Center for Democracy & Technology Rachel Block, Co-Chair NYS Department of Health December 15, 2009

2. 2 Workgroup Members Chair  Deven McGraw, Center for Democracy & Technology Co-Chair  Rachel Block, New York RHIO Members Dixie Baker, SAIC Peter Basch, Provider A. John Blair, Provider Marianna Bledsoe, NIH Joyce DuBow, American Association of Retired Persons Paul Egerman, Consultant Judy Faulkner, Epic, Inc. Justine Handelman, Blue Cross Blue Shield Gayle Harrell, Consumer Representative/Florida John Houston, University of Pittsburgh Medical Center Mike Klag, Johns Hopkins University, Public Health Terri Shaw, Children’s Partnership Latanya Sweeney, Carnegie Mellon University Paul Tang, Palo Alto Medical Foundation Paul Uhrig, SureScripts David Wanser, NDIIC Kathleen Connor, MicroSoft

3. 3 Workgroup Charge - DRAFT Broad Charge (draft) –To make recommendations to the Health IT Policy Committee on privacy and security policies and practices that will help build public trust in health information technology and electronic health information exchange. Specifically, the workgroup will seek to address complex privacy and security challenges through the development of proposed solutions and approaches that enhance privacy and security while also facilitating the appropriate access, use and exchange of health information to improve health outcomes.