ASTM_E_2211_-_02.pdf

Designation:E 2211 02An American National StandardStandard Specification forRelationship Between a Person(Consumer)and a Supplierof an Electronic Personal(Consumer)Health Record1This standard is issued under the fixed designation E 2211;the number immediately following the designation indicates the year oforiginal adoption or,in the case of revision,the year of last revision.A number in parentheses indicates the year of last reapproval.Asuperscript epsilon(e)indicates an editorial change since the last revision or reapproval.1.Scope1.1 This specification covers the relationship between aperson(consumer),organization,or custodian(or other autho-rized representative)and a managing(storing)organization(such as a web site or other organization).However,web-basedpersonal(consumer)health records that are created by health-care providers or health plans are not within the scope of thisspecification.Further,this specification will not address per-sonal(consumer)health records(PCHR)that are created andmanaged by patients on paper records,on personal computers,or on other media offline.2.Referenced Documents2.1Other References:Internet Healthcare Coalition2Health on the Net(HON)3Federal Trade Commission FTC4Hi Ethics Alliance5MedCertain6American Medical Association Guidelines for Medical andHealth Information Sites on the Internet7AHIMA E-health Tenets8URAC(also known as the American AccreditationHealthCare/Commission)93.Terminology3.1 Definitions:3.1.1 consumerthe person who provides information to bestored by the personal(consumer)health record(PCHR)supplier.3.1.2 disclosure statementa prominent notice that de-scribes an organizations policies in order to enable a person todecide whether(s)he can trust this organization with healthinformation.3.1.3 Gramm-Leach-Bliley Actfederal legislation enactedin 1999 as part of the Financial Services Modernization Actthat specifies for web activities that“opt-out”is the norm.103.1.4 individuallyidentifiablehealthinformationinformation that is a subset of health information,includingdemographic information collected from an individual,andthat:(1)is created or received by a healthcare provider,healthplan,employer,or healthcare clearinghouse;and(2)relates tothe past,present,or future physical or mental health orcondition of an individual;the provision of healthcare to anindividual;or the past,present,or future payment for theprovision of healthcare to an individual;and(1)that identifiesthe individual;or(2)with respect to which there is a reasonablebasis to believe the information can be used to identify theindividual.HIPAA113.1.5 patient health record(PHR)the primary legal recordcreated and maintained by the healthcare provider document-ing the healthcare services provided to a person,in any aspectof healthcare delivery.This term is synonymous with medicalrecord,health record,patient care record(primary patient carerecord),client record,and resident record.The term includesroutine clinical or office records,records of care in anyhealth-related setting,preventive care,wellness,lifestyleevaluation,research protocols,special study records,andvarious clinical databases.The records may be in paper-basedor electronic form.3.1.6 personal(consumer)health record(PCHR)an elec-tronic application through which individuals can maintain andmanage their health information,and that of others for whomthey are authorized,in a private,secure,and confidentialenvironment that allows the individual or other authorizedpersons to access and share such information.1This specification is under the jurisdiction of ASTM Committee E31 onHealthcare Informatics and is the direct responsibility of Subcommittee E31.28 onElectronic Health Records.Current edition approved May 10,2002.Published August 2002.2http:/www.ihealthcoalition.org/3http:/www.hon.ch/HONcode/Conduct.html4http:/www.ftc.gov/reports/privacy3/fairinfo.htm5http:/www.ihealthcoalition.org/ethics/ethics.html6http:/www.medcertain.org/7http:/www.ama-assn.org/ama/pub/category/1905.html8www.ahima.org9www.urac.org10For a summary of the act,see www.senate.gov/banking/conf/grmleach.htm.11Information on legislation and standards can be found at http:/aspe.hhs.gov/admnsimp.1Copyright ASTM International,100 Barr Harbor Drive,PO Box C700,West Conshohocken,PA 19428-2959,United States.3.1.7 personal(consumer)healthrecord(PCHR)supplierthe company or organization that maintains or man-ages,or both,the personal(consumer)health record(PCHR)online service.3.1.8 personal identifiable information(PII)individuallyidentifiable information about an individual collected online,including:(1)a first and last name;(2)a home or other physicaladdress,including street name and name of a city or town;(3)an e-mail address or other online contact information,includ-ing but not limited to an instant-messaging user identifier,or ascreen name that reveals an individuals e-mail address;(4)atelephone number;(5)a Social Security number;(6)a persis-tent identifier,such as a customer number h