By December 1, 2011, the lead organization shall, consistent with the federal health insurance portability and accountability act, develop processes, guidelines, and standards that address:

1. (1) Identification and prioritization of high value health data from health data providers. High value health data include:

   1. (a) Prescriptions;
   2. (b) Immunization records;
   3. (c) Laboratory results;
   4. (d) Allergies; and
   5. (e) Diagnostic imaging;
2. (2) Processes to request, submit, and receive data;

3. (3) Data security, including:

   1. (a) Storage, access, encryption, and password protection;
   2. (b) Secure methods for accepting and responding to requests for data;
   3. (c) Handling unauthorized access to or disclosure of individually identifiable patient health information, including penalties for unauthorized disclosure; and

   4. (d) Authentication of individuals, including patients and providers, when requesting access to health information, and maintenance of a permanent audit trail of such requests, including:

      1. (i) Identification of the party making the request;
      2. (ii) The data elements reported; and
      3. (iii) Transaction dates;
4. (4) Materials written in plain language that explain the exchange of health information and how patients can effectively manage such information, including the use of online tools for that purpose;
5. (5) Materials for health care providers that explain the exchange of health information and the secure management of such information.

[ 2009 c 300 s 4.]

Notes:

Findings—2009 c 300: See note following RCW 41.05.036.