Stream: connectathon mgmt
Topic: GDPR track?
John Moehrke (Feb 19 2018 at 13:24):
Given the next FHIR Connectathon is in Europe. Who would be interested in a track titled GDPR, that is based on the Consumer Centered Data Exchange? This is essentially a personal consent track -- http://wiki.hl7.org/index.php?title=201801_Consumer_Centered_Data_Exchange
David Hay (Feb 19 2018 at 17:23):
Count me in...
René Spronk (Feb 22 2018 at 14:12):
I'll be there, and I have an interest in the topic - but I won't be testing/bringing any software and as such I'd be more of an 'active observer' than a participant in a connectathon.
John Moehrke (Feb 22 2018 at 14:17):
I will consider you a SME then @René Spronk
John Moehrke (Feb 22 2018 at 14:17):
From a testing perspective we start with the consumer empowerment track... but likely need to add to it.
John Moehrke (Feb 22 2018 at 14:20):
More actionable is to create some kind of a documentation of relationship of GDPR needs and mechanisms in FHIR to meet those needs. Including: Consent, security-tags, Provenance, AuditEvent... Alex Mense is working on getting us this initial GDPR needs table. We don't want to re-invent this, we want to pull it from some organization that has already worked it out. He is an author of an early version, but has recommendations of more current and accurate.
David Hay (Feb 22 2018 at 17:42):
Yes, a guide to using FHIR resources in that way would be great...
John Moehrke (Mar 26 2018 at 12:53):
I submitted a GDPR track. I expect it to leverage the consent work done in previous FHIR Connectathons, and would also bring in some AuditEvent, and possibly other stuff. What it does is up to the community
John Moehrke (May 11 2018 at 15:47):
Not many people signed up for the GDPR track... However I am still interested in hosting a breakout during the FHIR connectathon. Please let me know if you are interested. If we can get a few people interested in meeting for an hour, we can make some progress.
Rien Wertheim (May 12 2018 at 07:03):
@John Moehrke I'm interested in the breakout.
John Moehrke (May 12 2018 at 09:32):
Here is a spreadsheet that we are working on regarding mapping of FHIR capabilities to GDPR need. First sheet is starts with the capabilities already in FHIR, and which articles and parts of GDPR they might be useful to address. The second sheet is a listing of gaps. If you are willing to help improve this sheet, please ask for edit rights.
John Moehrke (May 12 2018 at 09:33):
https://docs.google.com/spreadsheets/d/1--6HKnMY7QCqsorpJXdgIm9lC-MJ-O_qIPTcjPdUGKg/edit?usp=sharing
John Moehrke (May 12 2018 at 09:49):
BREAKOUT Saturday 3pm-5pm in Salon 14 - To discuss existing FHIR capabilities mapping to GDPR, and gaps. This is not a general GDPR discussion
John Moehrke (May 22 2018 at 12:29):
My reportout from the GDPR connectathon track https://healthcaresecprivacy.blogspot.com/2018/05/gdpr-on-fhir.html
Last updated: Apr 12 2022 at 19:14 UTC