The principles of the Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information below establish a single, consistent approach to address the privacy and security challenges related to electronic health information exchange through a network for all persons, regardless of the legal framework that may apply to a particular organization. The goal of this effort is to establish a policy framework for electronic health information exchange that can help guide the Nation’s adoption of health information technologies and help improve the availability of health information and health care quality. The principles have been designed to establish the roles of individuals and the responsibilities of those who hold and exchange electronic individually identifiable health information through a network.

• The Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information [PDF - 80K]

As part of a Privacy and Security Toolkit to implement the Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information (Privacy and Security Framework) the Office of the National Coordinator for Health Information Technology (ONC) and the Office for Civil Rights (OCR) developed a number of materials and guidance, respectively. The Privacy and Security Toolkit includes:

• Draft Model Personal Health Record (PHR) Privacy Notice & Facts-At-A-Glance
• Reassessing Your Security Practices in a Health IT Environment: A Guide for Small Health Care Practices (PDF)
• HIPAA Privacy Rule Guidance Related to the Privacy and Security Framework and Health IT