HHS, VA demonstrate secure sharing of sensitive health information

The Department of Health and Human Services (HHS) and the Department of Veterans Affairs (VA) announced a demonstration of the standards to allow sensitive health information to be shared responsibly and to comply with confidentiality laws and regulations among providers using electronic health records (EHRs).

The demonstration also showed how sensitive information can be tagged so that when it is sent to another provider with the patient’s permission, the receiving provider will know that they need to obtain the patient’s authorization to further disclose the information with others. The demonstration was developed as part of the Data Segmentation for Privacy (DS4P) Initiative created in response to the work of the President’s Council of Advisors on Science and Technology and supported by HHS’ ONC. Using standards identified in the DS4P Initiative, HHS’ Substance Abuse and Mental Health Services Administration (SAMHSA) and the VA safely and securely transmitted a mock patient’s substance abuse treatment records tagged with privacy metadata from one EHR to a different EHR system after electronically verifying that the mock patient had consented to the transmission. Privacy metadata from the SAMHSA EHR electronically explained to the VA EHR system that substance abuse treatment information within the clinical document is protected by federal confidentiality laws and can only be used for certain authorized purposes, and cannot be further disclosed without the patient’s consent. By varying the disclosure of electronic health information, providers and patients can better balance treatment and privacy.