HIMSS24 TEFCA: With greater simplification comes greater cybersecurity responsibility
Healthcare IT News April 1, 2024
Now that participation among multiple QHINs is allowed under TEFCA, The Sequoia Project addresses how cybersecurity requirements apply to all entities exchanging protected health data.
The Trusted Exchange Framework and Common Agreement, created by the Office of the National Coordinator for Health IT under the 21st Century Cures Act, holds huge promise for interoperability and information exchange.
It also has big implications for privacy and security.
“It’s possible that a TEFCA security incident is also a HIPAA security incident, and it’s possible that a HIPAA security incident may or may not be a TEFCA security incident,” said Johnathan Coleman, principal at Security Risk Solutions and the chief information security officer at the Sequoia Project, TEFCA’s recognized coordinating entity.
At...