446. EPMO Open Source Coordination Office Redaction File Detail Report

Produced by Araxis Merge on 12/13/2018 10:35:34 AM Eastern Standard Time. See www.araxis.com for information about Merge. This report uses XHTML and CSS2, and is best viewed with a modern standards-compliant browser. For optimum results when printing this report, use landscape orientation and enable printing of background images and colours in your browser.

446.1 Files compared

#	Location	File	Last Modified
1	v12.5_iter_7_build 51.zip\TRM_Upgrade\src\main\webapp\docs	IHTAAccessPolicyPSI.pdf	Fri Dec 7 17:34:36 2018 UTC
2	v12.5_iter_7_build 51.zip\TRM_Upgrade\src\main\webapp\docs	IHTAAccessPolicyPSI.pdf	Mon Dec 10 17:45:05 2018 UTC

446.2 Comparison summary

Description	Between Files 1 and 2
Description	Text Blocks	Lines
Unchanged	1	232
Changed	0	0
Inserted	0	0
Removed	0	0

446.3 Comparison options

Whitespace
Character case	Differences in character case are significant
Line endings	Differences in line endings (`CR` and `LF` characters) are ignored
CR/LF characters	Not shown in the comparison detail

446.4 Active regular expressions

No regular expressions were active.

446.5 Comparison detail

	1
	2	Home Teleh ealth Capa bility Enh ancements (HTCE)
	3	Integrated Home Tele health App lication ( IHTA)
	4
	5	IHTA Acces s Policy f or Patient Sensitive Informati on
	6
	7
	8
	9
	10
	11	April 2011
	12	Version 1. 2
	13
	14
	15	IHTA
	16	PSI Access Policy ii 04/2011
	17	Revision H istory
	18	The revisi on history cycle beg ins once c hanges or enhancemen ts are req uested to an approve d
	19	IHTA Acces s Policy.
	20
	21	Date Revis ion Descri ption Auth or
	22	06/16/2010 0.1 First draft for review Da vid Komrau s
	23	06/18/10 1 .0 Approve d Marcia Dunn
	24	08/12/10 1 .1 Updated IHTA User list to m atch CRUD David Komr aus
	25	04/15/11 1 .2 Changed project n ame to Hom e Teleheal th
	26	Capability Enhanceme nts (HTCE)
	27	Katie Shep herd
	28
	29
	30	Department of Vetera ns Affairs
	31	Product De velopment
	32	Home Teleh ealth Capa bility Enh ancement ( HTCE)
	33
	34	IHTA
	35	PSI Access Policy ii i 04/2011
	36	Table of C ontents
	37	1. Purpose ......... .......... .......... .......... .......... .......... .......... .......... .......... .......... .......... .......... .. 1
	38	2. Access to Patient Sensitive Informati on ....... .......... .......... .......... .......... .......... .......... .. 1
	39	3. Data Ac cess ..... .......... .......... .......... .......... .......... .......... .......... .......... .......... .......... ......... 1
	40	3.1. Secon dary Acces s......... .......... .......... .......... .......... .......... .......... .......... .......... .......... .......... ........ 2
	41	4. Referen ces ...... .......... .......... .......... .......... .......... .......... .......... .......... .......... .......... .......... 2
	42
	43
	44	Department of Vetera ns Affairs
	45	Product De velopment
	46	Home Teleh ealth Capa bility Enh ancement ( HTCE)
	47
	48	IHTA
	49	PSI Access Policy 1 04/2011
	50	1. Purpose
	51	The purpos e of this document i s to descr ibe the bu siness rul es that de termine wh ich Integr ated
	52	Home Teleh ealth Appl ication (I HTA) users are grant ed access to Patient Sensitive Informati on
	53	(PSI). Fo r IHTA pur poses, PSI is the co mbination of a patie nt’s name and Social Security
	54	Number (SS N). These rules are implement ed to ensu re that pr oper level s of secur ity and
	55	confidenti ality are maintained , while at the same time allow ing each u ser the fu nctionalit y and
	56	informatio n needed t o perform his/her jo b, but not hing more.
	57	2. Access to Patient Sensitive Informati on
	58	Currently, PSI is on ly used in the Inven tory Track er module of IHTA. Table 2 sh ows where PSI
	59	is used an d displaye d in the m odule.
	60
	61	Table 1: U se of PSI in Invento ry Tracker
	62	Function I nputs Outp uts
	63	Search Dev ice by Pat ient Patie nt First N ame
	64	Patient La st Name
	65	Patient SS N
	66	Patient Fi rst Name
	67	Patient La st Name
	68	Patient SS N
	69
	70	3. Data Ac cess
	71	In additio n to being limited b y function , access t o PSI is a lso contro lled accor ding to
	72	organizati onal bound aries. A user may o nly access data with in his/her own organ ization an d at
	73	the lowest organizat ional leve l that he/ she was ap proved for during re gistration approval process.
	74	Table 2 ou tlines thi s user-lim ited acces s in Inven tory Track er.
	75
	76	Table 2: I nventory T racker's U ser-Limite d Access
	77	IHTA User Function D ata Range
	78	National A dministrat or Search Device by Patient No patients
	79	Applicatio n Administ rator Sear ch Device by Patient No patien ts
	80	Management Search De vice by Pa tient No p atients
	81	VISN Admin istrator S earch Devi ce by Pati ent Own VI SN patient s
	82	Facility A dministrat or Search Device by Patient Ow n facility patients
	83	Care Coord inator Sea rch Device by Patien t Own faci lity patie nts
	84	Program Su pport Assi stant Sear ch Device by Patient Own facil ity patien ts
	85
	86	Department of Vetera ns Affairs
	87	Product De velopment
	88	Home Teleh ealth Capa bility Enh ancement ( HTCE)
	89
	90	IHTA
	91	PSI Access Policy 2 04/2011
	92	3.1. Secon dary Acces s
	93	Secondary access pol icies will be requir ed by the Continuati on of Oper ations Pol icy (COOP) .
	94	COOP ensur es that th e Departme nt of Vete rans Affai rs (VA) ca n continue to provid e critical
	95	services i n the even t of a sys tem failur e or natur al disaste r that dis rupts serv ice delive ry in a
	96	geographic area. Gr anting add itional ac cess to su pport the COOP will modify the data rang es
	97	presented in Table 2 . In a CO OP scenari o, for exa mple, the Veterans I ntegrated Service
	98	Network (V ISN) 1 Adm inistrator may be gr anted acce ss to VISN 2 patient data, so that the
	99	VISN 1 Adm inistrator can assum e the duti es of the VISN 2 Adm inistrator . In this case, the
	100	VISN 1 Adm inistrator would hav e access t o VISN 2 P SI.
	101
	102	The full i mplication s of COOP for PSI ac cess will be added t o this doc ument as d etails bec ome
	103	available.
	104
	105	4. Referen ces
	106	The follow ing refere nces were utilized t o develop this acces s policy:
	107
	108	1. Privacy Act of 19 74, (PL 93 -575)
	109	2. VA Dire ctive 6210 , Automate d Informat ion System s Security
	110	3. VA Hand book 6500, MP-1, Par t II, Chap ter 21, Ac cess to VA Systems o f Records under
	111	the Privac y Act of 1 974
	112	4. VA Dire ctive 6500 , Informat ion Securi ty Program , dated Au gust 4, 20 06
	113	5. VA Hand book 1605. 1, Privacy and Relea se of Info rmation
	114	6. Freedom of Inform ation Act
	115	7. HIPAA 1 64.308a4ii B, 164.312 d.b.
	116	8. Compute r Security - A Handb ook for VA Managers and End Us ers