Organizational Characteristics. As WECC carries out activities to fulfill its mission, it will seek to develop and maintain the following characteristics:
Organizational Characteristics non profit, good standing in NYS, necessary insurance, list of participants • Governance Structure – Listing of Board members, availability of organizational bylaws, and inclusive decision-making process • Availability to all Participants – Provision of Dial Tone Services and Member Facing Services • Comprehensive List of Participants – Ability to produce up-to-date list of all participant agreements • Participant Flow-Down Requirements – Procedures to address Participant compliance with Statewide Policy Guidance • Insurance/Liability Coverage – Relevant to the exchange of individually identifiable health information Operational Guide • The Operational Guide is a companion to The Statewide Collaboration Process Privacy and Security Policies and Procedures for QEs and their Participants in New York State (P&Ps). • The Guide defines privacy and security specifications needed for information exchange via the SHIN-NY and SHIN-NY QEs. Definition Policy Implementation Specification » Approach/method to guide and determine present and future approach » Instruction(s) to effectively implement a particular policy Characteristics » High-level » Statement of intent/expectation » Provides guidance in setting objectives » Supports consistent approach over time » Basis for agreement in principle on requirements and responsibilities » Detailed and measurable » Often based upon industry best- practices » Supports evolving requirements as needs and technology advances » Supports the effective application of policies » Supports enforcement Operational Guide: Implications for Participants • Section 1 – Consent: Patient notification of Break the Glass events • Section 2: – Authorization: Heightened hiring scrutiny for persons whose access to data may bypass or circumvent activity logging, access control or other security controls • Section 3: – Authentication: password strength requirements • Section 4: – Access: Display of appropriate use warning message for Authorized Users • Section 5: – Public posting on notice indicating date that patient information upload began • Section 6: – Availability on request of patient audit logs • Section 7: – A written Breach incident response plan • Section 8: – Policies governing the administration of sanctions for violations by Authorized Users accessing the SHIN NY Financing Sources and Distribution • Two potential sources identified to fund the SHIN-NY – HCRA – Medicaid Meaningful Use Matching Funds (90/10) • Methodology for distributing...
