§170.315(b)(10) Electronic Health Information (EHI) Export
Cures criteria for 170.315(b)(10) Electronic Health Information (EHI) Export.
(b)(10) Electronic Health Information (EHI) Export gives the user the capability to efficiently export single and multi-patient EHI in a secure and timely manner.
Required Extensions:
Features that Support the Certification
- Use of the Role-Based Access Control extension to limit access to protected health information (PHI).
- Ability to view and search for messages on multiple channels.
Required Actions
Administrator needs to create roles and assign them to each user based on the company’s policies.
Single Patient Export
Patient PHI is stored in the messages that come from several entities. Each entity could have the same patient with different patient IDs. Because of this, the user must search for the PATIENT_ID and the SOURCE for each entity, resulting in multiple searches. To comply with CURES (b)(10) criteria, the user can export the XML serialized messages and include attachments during the export.
Multi-Patient Export
Patient PHI is stored in the messages that come from several entities. To comply with CURES (b)(10) criteria for searching and exporting all patients, the user must either search by SOURCE or Channel Name to get a list of all messages that have been processed by a channel. Then they can export the XML serialized messages and include attachments during the export.