RE: [xspa] Question for XSPA TC

["Davis, John M." <Mike.Davis@va.gov>]

XSPA SAML is only indirectly related to patient consent directives.

XSPA XACML could be used as a formal language to express consents.

HITSP TP20 Access Control has specified XSPA XACML for the purpose of describing interoperable policy. 

HITSP TP30 describes CD stored in an XDS directory.

 

So you could have an interoperable (machine consumable) version in XACML, a human readable PDF, and an HL7 CDA R2 version with just attributes in your directory.

 

 

Regards, Mike Davis, CISSP

Department of Veterans Affairs

CHIO Emerging Health Technologies

Security Architect

760-632-0294

 

From: Adam Stone [mailto:adam1840@yahoo.com]
Sent: Wednesday, February 03, 2010 8:43 AM
To: xspa@lists.oasis-open.org
Subject: [xspa] Question for XSPA TC

 

All,

 

Could someone inform my perspective regarding the XSPA standard? Is XSPA an alternative to managing patient consent via metadata connected to a Record Locator Service (RLS)? Or, would XSPA enhance RLS functionality in some way?

 

Further, how might XSPA help enable some of the ideas proposed in the "Consumer Preferences Draft Requirements Document" released by HHS last October?

 

Thanks in advance for your thoughts/clarification.

 

Adam Stone