Key Questions: What is the architecture of consent models? What is consent management? What does this service look like?
Background: The University Hospital Heidelberg is implementing a Regional Health Information Network (RHIN) in the Rhine-Neckar-Region in order to establish a shared-care environment, which is based on established Health IT standards and in particular Integrating the Healthcare Enterprise (IHE). Similar to all other Electronic Health Record (EHR) and Personal Health Record (PHR) approaches the chosen Personal Electronic Health Record (PEHR) architecture relies on the patient’s consent in order to share documents and medical data with other care delivery organizations, with the additional requirement that the German legislation explicitly demands a patients’ opt-in and does not allow opt-out solutions. This creates two issues: firstly the current IHE consent profile does not address this approach properly and secondly none of the employed intra- and inter-institutional information systems, like almost all systems on the market, offers consent management solutions at all. Hence, the objective of our work is to develop and introduce an extensible architecture for creating, managing and querying patient consents in an IHE-based environment.
Methods: Based on the features offered by the IHE profile Basic Patient Privacy Consent (BPPC) and literature, the functionalities and components to meet the requirements of a centralized opt-in consent management solution compliant with German legislation have been analyzed. Two services have been developed and integrated into the Heidelberg PEHR.
Results: The standard-based Consent Management Suite consists of two services. The Consent Management
Service is able to receive and store consent documents. It can receive queries concerning a dedicated patient
consent, process it and return an answer. It represents a centralized policy enforcement point. The Consent Creator Service allows patients to create their consents electronically. Interfaces to a Master Patient Index (MPI) and a provider index allow to dynamically generate XACML-based policies which are stored in a CDA document to be transferred to the first service. Three workflows have to be considered to integrate the suite into the PEHR: recording the consent, publishing documents and viewing documents.
Conclusions: Our approach solves the consent issue when using IHE profiles for regional health information
networks. It is highly interoperable due to the use of international standards and can hence be used in any other region to leverage consent issues and substantially promote the use of IHE for regional health information networks in general.
- Basic Patient Privacy Consents (BPPC) deficits for opt-in scenarios
- Architecture of COMS and integration into IHE-based environments
- Consent Management Service
- Consent Creator Service
- The consent document
- Integration of COMS into an XDS.b based setting
Oliver Heinze, Markus Birkle, Lennart Köster and Björn Bergh (2011). BMC Medical Informatics and Decision Making