Contracts have been awarded to the following organizations:
Standards Harmonization Process: $3,300,000
Harmonization of data standards is fundamental to the success of widespread interoperability -- the seamless and secure exchange of patient information electronically. Today, there are many standards for health information exchange, but there are variations and gaps that hinder interoperability and the widespread adoption of health IT.


HHS has awarded a contract to the American National Standards Institute (ANSI), a non-profit organization that administers and coordinates the U.S. voluntary standardization activities, to convene the Health Information Technology Standards Panel (HITSP). The HITSP will bring together US Standards Development Organizations (SDOs) and other stakeholders. The HITSP will develop, prototype, and evaluate a harmonization process for achieving a widely accepted and useful set of health IT standards that will support interoperability among health care software applications, particularly EHRs.

Compliance Certification Process: $2,700,000
More than 200 EHR products are on the market, but there are no criteria for objectively evaluating product capabilities. This limits widespread investment in, and uptake of, these tools and hinders informed purchasing decisions. There are also no criteria by which communication architectures can be standardized in a way that would allow two different EHRs to communicate with each other.

HHS has awarded a contract to the Certification Commission for Health Information Technology (CCHIT) to develop criteria and evaluation processes for certifying EHRs and the infrastructure or network components through which they interoperate. CCHIT is a private, non-profit organization established to develop an efficient, credible, and sustainable mechanism for certifying health care information technology products. CCHIT will be required to submit recommendations for ambulatory EHR certification criteria in December 2005, and to develop an evaluation process for ambulatory health records in January 2006. Criteria will include the capabilities of EHRs to protect health information, standards by which EHRs can share health information and clinical features that improve patient outcomes.

Privacy and Security Solutions: $11,500,000
Regulations promulgated pursuant to the Health Insurance Portability and Accountability Act (HIPAA) established baseline health care privacy requirements for protected health information and established security requirements for electronic protected health information. Many states have adopted policies that go beyond HIPAA. The manner in which hospitals, physicians and other health care organizations implement required security and privacy policies varies and is tailored to meet their individual organizations' needs. These variations in policies present challenges for widespread electronic health information exchange.

The Health Information Security and Privacy Collaboration (HISPC), a new partnership consisting of a multi-disciplinary team of experts and the National Governor's Association (NGA). The HISPC will work with approximately 40 states or territorial governments to assess and develop plans to address variations in organization-level business policies and state laws that affect privacy and security practices which may pose challenges to interoperable health information exchange. Overseeing the HISPC will be RTI International, a private, nonprofit corporation who has been selected as the HHS contract recipient.

Back to HCB News

More Industry Headlines