1. HISPC-Illinois II The Public-Private Partnership Moves Forward on Privacy and Security

2. The Public-Private Partnership Experience demonstrates the successful implementation of electronic health records (EHR) and health information exchange (HIE) initiatives requires the committed participation of government and stakeholders. In Illinois, this public-private partnership grew out of the efforts of the Governor, the General Assembly, the Electronic Health Records Taskforce, stakeholders and the Illinois Department of Public Health.

3. Illinois Efforts

4. Illinois EHR Taskforce Created by Public Act 94-646 Created by Public Act 94-646 Convened on March 6, 2006 Convened on March 6, 2006 Held 42 meetings Held 42 meetings Report issued on December 27, 2006 Report issued on December 27, 2006

5. Illinois EHR Taskforce Recommendations Adopt legislation charging IDPH with responsibility to establish a public-private partnership by creating the non- profit Illinois Health Information Network (ILHIN) ILHIN to create a state-level HIE to connect Illinois health information with the Nationwide Health Information Network (NHIN) ILHIN to foster the adoption of EHR and HIE in the state

6. HISPC-Illinois Part of Federal initiative to study privacy and security barriers Part of Federal initiative to study privacy and security barriers One of over 30 states in the collaboration One of over 30 states in the collaboration Reports Issued: Reports Issued: Final Assessment of Variation and Analysis of Solutions Report, March 30, 2007 State Implementation Plan – Illinois, April 15, 2007

7. HISPC-Illinois Implementation Recommendations Develop systematic, comprehensive approach to promoting HIE Develop systematic, comprehensive approach to promoting HIE Adopt universal standard for patient identification Adopt universal standard for patient identification Develop standards for consistent and available privacy and security expertise for organizations. Develop standards for consistent and available privacy and security expertise for organizations. Establishment of core competencies for staff education and training in electronic health information, privacy and security. Establishment of core competencies for staff education and training in electronic health information, privacy and security. Develop educational materials for consumers Extend and promote, national Stark, e-prescribing and anti- kickback relief regulations. Provide recommendations for use of multidisciplinary teams in the acquisition of new IT solutions. Include in lead state agency/organization legal staff with expertise in privacy and security to guide integrated state efforts.

8. Executive Order #8 (2006) Governor issued on July 13, 2006 Governor issued on July 13, 2006 Created the Division of Patient Safety within the IDPH to consolidate state efforts dealing with medical errors/improve patient safety Created the Division of Patient Safety within the IDPH to consolidate state efforts dealing with medical errors/improve patient safety EHR Role: EHR Role: Encourage medical providers to utilize e-prescribing programs by 2011 Encourage medical providers to utilize e-prescribing programs by 2011 Evaluate areas in need of enhanced technology to support e- prescribing programs Evaluate areas in need of enhanced technology to support e- prescribing programs Determine the types of technology needed to implement the e- prescribing program Determine the types of technology needed to implement the e- prescribing program

9. HISPC-Illinois Phase II

10. Project Proposal The priority for Illinois as HISPC enters phase 2 is to move the public-private partnership outlined in the EHRT report and supported in the HISPC-Illinois State Implementation Plan forward in the areas of privacy and security. Solution 8, of the State Implementation Plan – Illinois provides for the lead state agency/organization to have expertise in privacy and security to guide state activities. The priority for Illinois as HISPC enters phase 2 is to move the public-private partnership outlined in the EHRT report and supported in the HISPC-Illinois State Implementation Plan forward in the areas of privacy and security. Solution 8, of the State Implementation Plan – Illinois provides for the lead state agency/organization to have expertise in privacy and security to guide state activities. Consistent with the spirit of that implementation solution, HISPC- Illinois II will set up an expert work group to prepare draft privacy and security policies and recommendations for consideration by ILHIN. Another work group will prepare a uniform patient EHR/HIE consent form for possible use by ILHIN, clinicians, health care facilities and other providers. Consistent with the spirit of that implementation solution, HISPC- Illinois II will set up an expert work group to prepare draft privacy and security policies and recommendations for consideration by ILHIN. Another work group will prepare a uniform patient EHR/HIE consent form for possible use by ILHIN, clinicians, health care facilities and other providers.

11. HISPC-Illinois II Structure Steering Committee Privacy and Security Work Group Legal Work Group

12. Steering Committee Review and approve project deliverables Provide organizational resources to help staff the working groups Seek input and/or representation from stakeholder Serve as a liaison between the Steering Committee and their organization/area of expertise, communicating HISPC activities to constituencies The HISPC-Illinois Steering Committee will provide oversight and direction for the project. It will set the direction, monitor progress, solicit work group members and approve deliverables to ensure success of the project.

13. Privacy & Security Work Group Develop an outline of privacy and security issues to be included in the Draft Policies and Recommendations document. Prepare a draft of the Draft Policies and Recommendations document for review by stakeholders. Finalize the Draft Policies and Recommendations document. Develop draft privacy and security policies and recommendations for consideration by the ILHIN Board of Directors.

14. Legal Work Group Outline issues to be addressed in the model consent form. Preparing a draft form for review by stakeholders. Adopt a Model Uniform Patient EHR/HIE Consent Form. Preparing a plan for the dissemination of the model consent form and to encourage its use by stakeholders. Develop a model uniform patient EHR/HIE consent form for possible use by ILHIN, clinicians, health care facilities and other providers. The Legal Work Group is also tasked with the development of a plan to disseminate the consent form and encourage its use.

15. Regional Collaboratives In addition to the projects undertaken by the states, representatives of HISPC and non- HISPC states will participate in projects of regional or nationwide significance. In addition to the projects undertaken by the states, representatives of HISPC and non- HISPC states will participate in projects of regional or nationwide significance. Each state HISPC project is expected to participate in one of the regional collaboratives. Each state HISPC project is expected to participate in one of the regional collaboratives.

16. Important Project Dates September 10 collaborative meeting September 10 collaborative meeting National meeting in Washington on November 1 and 2 National meeting in Washington on November 1 and 2 Final Impact Report due on November 9 Final Impact Report due on November 9 Regional collaborative strategies due on November 16 Regional collaborative strategies due on November 16 Project ends December 31 Project ends December 31

17. HISPC-Illinois Project Team David Carvalho, Deputy Director, Office of Health Policy and Planning, IDPH Project Chairman Jeff W. Johnson, Executive Assistant to the Director for Customer Service, IDPH Project Director Marilyn Thomas, Chief Legal Counsel, IDPH Project Legal Counsel Illinois Public Health Institute (IPHI) Project Management Contractor Elissa Bassler, IPHI Executive Director Project Management Staff Kathy Karsten, IPHI Program Associate Project Management Staff Stephanie Rizk, M.S. RTI International Contact TBD Legal Contractor

18. How Well Communicate with Our Stakeholders Via E-mail Via E-mail Via HISPC-Illinois II Web site – www.idph.state.il.us/hispc2 Via HISPC-Illinois II Web site – www.idph.state.il.us/hispc2 www.idph.state.il.us/hispc2 Via HISPC-Illinois II Listserv Via HISPC-Illinois II Listserv