Concept of Operations: Relating to the introduction of a Personally Controlled Electronic Health Record System
3.4.3 Conformant Portal Providers
The PCEHR System supports the capability for independent consumer-oriented portal services to access the PCEHR System9. These portals will be used to offer value added features on top of the PCEHR System, such as self-managed care features, access to health literacy information, consumer-oriented decision support, etc.
In order to connect to the PCEHR System, Conformant Portal Providers must fulfil the following requirements:
- Compliance with any prescribed terms and conditions.
- Implementation of the functionality, relevant standards and specifications and other requirements for Conformant Portal Providers outlined in Section 6.2.1.
- Register with the PCEHR System Operator and obtain a Conformant Portal Provider Identifier (known as a CPP Identifier). Registration requires registration of the Conformant Portal Provider’s Responsible Officer and Organisation Maintenance Officer and agreement to the terms, conditions and service levels of a Conformant Portal Provider.
- A NASH Conformant Digital Credential, which asserts their CPP Identifier.
- Conformant Portal Providers which access the PCEHR System will be required to ensure that servers used for PCEHR System purposes and all personal information used for PCEHR System purposes must be held only within Australia.
- The Conformant Portal Provider must be operated by an Australian legal entity and the entity must not operate a conformant portal unless it is subject to the Privacy Act or equivalent state or territory privacy protections.
- Successful completion of the conformance assessment process and obtaining a Notice of Connection from the PCEHR System Operator (see Section 7.4.1).
Information stored within a Conformant Portal Provider is treated as a separate record from the PCEHR System, and the Conformant Portal Provider will access and load information into the PCEHR System as per other systems. For example, if the portal is used to help individuals self-manage their diabetes, then any information will only be held within the Conformant Portal Provider and not shared with the PCEHR System, unless loaded into it.
If a Conformant Portal Provider wishes to host information on behalf of the PCEHR System, rather than simply access and load information, then it will be required to support the additional requirements of a conformant repository provider (see Section 3.4.4).
| eHealth Site Notes: The Medibank Private eHealth site and the Mater Misericordiae eHealth site will inform the development and implementation of consumer-oriented portals. The Medibank Private Portal will allow individuals enrolled in the Medibank Private chronic disease management program to collect and share information with their healthcare providers. Medibank Private will not be using any of this information for the management of claims or eligibility for healthcare insurance benefits. This work will also be required to collaborate with healthdirect Australia to ensure equity of access synergies are explored for the broader Australian community. |
9 Services which offer provider-oriented portals are treated as a Contracted Service Provider (see Section 3.4.1).
