A task force of the Certification Commission for Healthcare Information Technology has published recommendations for how to proceed in development of certification criteria for personal health records.
Privacy should be the #1 goal of certification--the principal value certification can offer is to reduce concerns about privacy, the recommendations state. Other recommendations include:
* Because PHR functionality is rapidly evolving, functionality requirements in the first year should be limited to the areas of privacy, security and interoperability.
* New or stronger laws are needed in some privacy areas, so certification processes must not hinder that development.
* Specific consumer-focused recommendations for secure health information exchange published by the Connecting for Health industry stakeholder consortium should be the starting point for development of security criteria.
Complete recommendations are available at cchit.org/phratf. CCHIT expects to launch its initial PHR certification program in mid-2009.
Consumer Health Archive
Data Security Archive
Electronic Health Records Archive
Health Information Exchange Archive
Policies/Regulation Archive
Hospitals Archive
Group Practices Archive
Payers Archive