Privacy Management Reference Framework

Download the Entire Whitepaper in PDF.

While EHR Privacy and Security Architecture provides technical controls and safeguards to protect the patients’ personal health information in EHR, it requires each participating Health Service Provider to have efficient and effective management framework that supports the architecture. Privacy Management Reference Framework describes the governance, roles and responsibilities, and activities within a typical Health Service Provider to support EHR privacy and security.

Privacy Management Reference Framework illustrates a set of interrelated management components to manage privacy and security within HSP and support EHR.

There are many privacy and security framework and toolkits published by various health care organization or associations. Worth mentioning is the Common Privacy Framework and IAR Privacy and Security Implementation toolkit from CCIM was developed based on this Privacy Management Reference Framework, which systematically describe the functions, roles and activities to manage privacy operations within an organization. The lessons learned from the implementation of Common Privacy Framework and IAR privacy framework has been incorporated into this Privacy Management Reference Framework.