HISPC Action Implementation Manual (AIM)
Between April 2008 and April 2009, the Health Information Security and Privacy Collaboration (HISPC) completed its third phase to develop state-level solutions to the privacy and security challenges presented by electronic health information exchange. The third phase focused on multistate collaboration, which resulted in the formation of seven multi-state privacy and security teams focused on developing tools and strategies to educate and engage consumers; developing a toolkit to educate providers; developing tools to help harmonize state privacy laws; studying intrastate and interstate consent policies; analyzing consent data elements in state law; developing interorganizational agreements; and recommending basic security policy requirements. Each multistate collaborative was charged with developing common, replicable solutions that have the potential to reduce variation in and harmonize privacy and security practices, policies, and laws.The AIM’s purpose is to serve as a guide to the use of all of the tools, materials, and processes developed as part of HISPC Phase III. Many products discussed in this guide are the result of 3 years’ worth of participation in HISPC and represent the collective effort and wisdom of 42 participating states and territories. Click here for the Action Implementation Manual.






