I’ve written several posts about BIDMC’s use of “private cloud“approaches to host electronic records and gather community-wide quality data. Healthcare organizations have avoided the use of “public cloud” because of HIPAA/HITECH privacy concerns, lack of breach indemnification/data integrity guarantees, and the unwillingness of many cloud providers to sign business associate agreements.
Although it has not been widely discussed in the industry, the Centers for Disease Control and Prevention’s (CDC)Biosense 2.0initiative has doneground breaking workto solve these issues, usingAmazon’s AWS GovCloudto create a national repository of syndromic surveillance data that includes all the protections needed to protect privacy includingindependent security testingat theFISMA-Moderate Level.
CDC is the first government agency to complete all the rigorous certification needed to host sensitive data in the public cloud.
CDC has also built gateways that make it easy for public health departments to submit data to the cloud – a Direct Project adapter, an NwHIN Exchange adapter, and others. Meaningful Use Stage 1 requires the testing of health information exchange with public health and Beth Israel Deaconess did its transactions with the Boston Public Health Commission (BPHC), which stored them in CDC’s public cloud. BPHC was the first public health department in the nation to provide data feeds to the Amazon infrastructure.
Finally, CDC has enabled queries of the cloud data using multiple platforms including open source analytical toolssuch as R.
A secure, HIPAA-compliant public cloud that includes healthcare information exchange gateways and analytical tools. That’s cool!
By Dr. John D. Halamka
Dr. John D. Halamka is chief information officer and dean for technology at Harvard Medical School who writes at Life as a Healthcare CIO.Visit website | More posts by Author
- Get Livefyre
- FAQ
