PDMP & Health IT Integration All-Hands Meeting

1. PDMP & Health IT IntegrationAll-Hands Meeting January 28th, 2014

2. Meeting Etiquette From S&I Framework to Participants: Hi everyone: remember to keep your phone on mute  NOTE: This meeting is being recorded and will be posted on the Meeting Artifacts Wiki page after the meeting • Remember: If you are not speaking keep your phone on mute • Do not put your phone on hold – if you need to take a call, hang up and dial in again when finished with your other call • Hold = Elevator Music = very frustrated speakers and participants • This meeting, like all of our meeting is being recorded • Another reason to keep your phone on mute when not speaking • Feel free to use the “Chat” feature for questions, comments or any items you would like the moderator or participants to know.

3. Agenda

4. General Announcements… • Starting today we will be extending the time of our All-Hands call 30 minutes to ensure we can get through our use case keeping with our timeline. • 12:00-1:30 pm (ET) • We will be rescheduling our February 18th, 2014 meeting • Friday February 21st – same time 12:00-1:30 pm (ET) • OneHealthPort (Washington State) will be presenting as part of our concert series today.

5. General Announcements continued Note: Please check the meeting schedule weekly to get the most up-to-date meeting information • To subscribe to our mailing list, simply complete the PDMP & Health IT Project Signup Form: http://wiki.siframework.org/PDMP+%26+Health+IT+Integration+Join+the+Initiative • To access current and archived meeting materials, visit the Project Meeting Artifacts section: http://wiki.siframework.org/PDMP+%26+Health+IT+Integration+Meeting+Artifacts • To join our weekly webinars, visit the PDMP & Health IT Integration initiative Homepage for the latest meeting information: http://wiki.siframework.org/PDMP+%26+Health+IT+Integration+Homepage

6. WA State Department of Health PMP Transaction Processing through the OneHealthPort “statewide” HIE

7. Today’s Discussion • Brief Overview of the HIE • Key Drivers • Prescription Monitoring Program (PMP) Transaction • PMP Security • PMP Transaction Standards • Lessons Learned • Additional Levers • Questions

8. Brief Overview of the HIE • Washington State HITech grant dollars were used to fund a statewide health information exchange. • OneHealthPort managed the vendor selection process and designed the HIE model based on community/constituent input • OHP HIE is an “exchange” model – no central repository • OHP HIE can leverage many large existing repositories (EPIC, EHRs, DOH, HCA, etc.) • OHP HIE provides secure, trusted trading options • Hosted central web services • Central meeting point for secure connections • Leveraging and promoting data standards

9. The Initiative’s Key Drivers • To reduce Rx misuse we need to Increase Provider Use: • SAMHSA Grant Funding Opportunity • Operational funding for PMP program is in place • Medicaid budget proviso requiring ER prescribers to register for PMP access (effective June 2012) • DOH pain management rules recommend PMP use (from ESHB 2876 – all rules effective by January 2012) • LNI guideline for opioid prescribing requires PMP use • http://www.lni.wa.gov/ClaimsIns/Files/OMD/MedTreat/FINALOpioidGuideline010713.pdf (effective July 2013)

10. Prescription Monitoring Program The WA State Department of Health (DOH) operates a repository of dispensed medications, known as the Prescription Monitoring Program (PMP) hosted by Health Information Designs, LLC (HID). • Repository represents a history of controlled substance prescriptions dispensed from licensed pharmacies or licensed practitioners. • Access to that data is provided via the Health Information Exchange (HIE) to: • licensed practitioners (valid current registration with the online PMP system) • making a secure query from a health information system connected to the HIE.

11. Prescription Monitoring Program The response provided from the PMP database via the HIE is: • A real-time transaction based on the authentication of the requestor’s license (pre-registration of the user in the online PMP system) and… • A match of the patient record requested • The request and response utilize the NCPDP Script standard for medication history. • OHP HIE is utilizing the NCPDP 2013.12 standard.

12. Prescription Monitoring Program • Pre-requirements • Requestors of medication history from the DOH PMP repository have registered in the Prescription Review service online at http://www.wapmp.org/practitioner/pharmacist/. • Any organization planning to automate the queries can request to use the license of a Medical Director and must contact the Department of Health PMP program director for education and information about the implications for that practitioner before implementation.

13. PMP Security • Secure, encrypted connectivity • Certificate exchange and authentication • Certificate handling by the HIE hub for signing and encrypting all messages • Specifically with HID the PMP vendor, certificate authentication rules applied for signing and encrypting all messages is in the order specified by HID as SignBeforeEncryptAndEncryptSignature • Secure handling includes signature validation and encryption of ALLmessages as well as transport over https. • The messages are fully secured and posted to secure URLs designated by the DOH vendor, HID, and OHP-HIE.  The keys for this process are only shared between the HIE hub and the DOH vendor.

14. PMP Security • Secure, encrypted connectivity • The response message is a synchronous transaction. The message channel is open for the response which is a few second wait at most.  • The HIE receives the response on the same thread programmatically decrypting, stripping the PMIX SOAP wrapper, re-encrypting and forwarding to the querying trading partner. • No PHI is exposed or stored by the HIE. • The HIE provides an audit trail of all transactions traded and can identify which trading partners are involved in the information exchange via message metadata including the routing identification of the trading partners

15. PMP Standards • OneHealthPort was a “stakeholder” participant in the earlier S & I workgroup evaluating PMP standards. • The recommendation from that work was that NCPDP standards should be incorporated in PMP exchanges to facilitate adoption and minimize development efforts for EHR vendors. • Concurrently, the WA State DOH came to OHP for assistance in moving forward their SAMHSA grant for connecting EHRs to the State PMP • WA DOH, their vendor - HID, and OHP jointly evaluated options with the standards recommendations in mind and moved forward with a solution for interoperability

16. PMP Standards

17. PMP Standards – PMIX Soap Wrapper

18. Lessons Learned • If you build it, “they” may not necessarily come • Must have business reason and/or regulatory requirements to truly engage healthcare providers who have limited resources • It’s not rocket science, but… • It takes willing, ready and able vendors, exchanges, and trading partners • Creative problem solving • Development effort • Tenacity, professionalism, and sometimes, good humor

19. Additional Levers • Stage 2: Meaningful Use Approval: WA DOH has obtained approval to list the PMP as an official “other specialized registry” in compliance with stage 2 meaningful use • It will be listed as an Eligible Professionals (EP) Menu item • We feel this will assist trading partners with finding a business reason to connect • DOH and other state agencies are moving towards mandated participation in the state-wide health information exchange (HIE) • DOH has several health systems that will be accessed via the HIE

20. Questions?

21. PDMP & Health IT IntegrationUse Case & Functional Requirements January 28, 2014 21

22. Proposed Use Case & Functional Requirements Development Timeline

23. Section Review Click the icon to open the Word Document Note- Below sections will be reviewed within the separate Use Case word document: • Discuss and review the following sections: • Assumptions • Context Diagram • User Stories • Introduce and review the following sections: • Pre-Conditions • Post-Conditions • Actors and Roles

24. Use Case Assumptions To be reviewed in Word Document Health IT system is capable of querying a PDMP All Healthcare Professionals have appropriate legal authority based on state regulations to request and receive information from state PDMP Healthcare Professionals accessing the PDMP follow state guidelines as appropriate, including any privacy and security requirements as required by each individual state PDMP authority The PDMP returns high positive matches to the Healthcare Professional1 The Healthcare Professional accesses information that already exists within the PDMP at the time of querying Each organization has the responsibility to figure out how query response is presented and integrated 1Question for Community: What are the responses you receive when querying a PDMP?

25. Generic Scenario & Context Diagram To be reviewed in Word Document PDMP & HIT Integration Use Case Scope Pre-Step: Healthcare Professional logs into Health IT System 1. Sends query to state PDMP Interstate Hub Healthcare Professional receives requested information 2. PDMP sends query response AND/OR PDMP & HIT Integration Use Case Scope Pre-Step: Healthcare Professional logs into Health IT System 1. Sends query to state PDMP Healthcare Professional receives requested information 2. PDMP sends query response

26. User Story 1: A legally authorized provider queries PDMP before writing a prescription for a patient To be reviewed in Word Document Trigger: Patient needs medication for chronic back pain Use Case Scope 1. Healthcare Professional logs into Health IT System 2. Sends query to state PDMP to check if patient has been prescribed narcotics/controlled substance in past X weeks 3. PDMP sends query response 4. Healthcare Professional makes an informed decision to prescribe medication based on information received Draft User Story: A patient arrives at the physician’s office or hospital for treatment of chronic back pain. If necessary, the Healthcare Professional authenticates to the Health IT system. At the appropriate point in the workflow, the query is sent to the State PDMP to see if the patient had been prescribed a controlled substance in the past X weeks. The PDMP processes the request and identifies the appropriate response to send back to the requestor. After receiving the query response from the PDMP, the Healthcare Professional makes an informed decision of whether or not to prescribe the medication or modify the dosage based on the information received.

27. User Story 2: A legally authorized provider queries PDMP through a Hub before writing a prescription for a patient To be reviewed in Word Document Trigger: Patient needs medication for chronic back pain Use Case Scope 1. Healthcare Professional logs into Health IT System 2. Sends query to state PDMP to check if patient has been prescribed narcotics/controlled substance in past X weeks Interstate Hub 3. PDMP sends query response 4. Healthcare Professional makes an informed decision to prescribe medication based on information received Draft User Story: A patient arrives at the physician’s office for treatment of chronic back pain. If necessary, the Healthcare Professional authenticates to the Health IT system. At the appropriate point in the workflow, the query is sent to a Hub through his Health IT system to see if the patient had been prescribed a controlled substance in the past X weeks. The Hub receives the query, and reroutes the query to the appropriate state PDMP(s) (Note: this transaction implies that a Memorandum of Understanding is already in place between state PDMPs). The PDMP(s) process the request and identify the appropriate response to send back to the requestor. The PDMP(s) send the query response to the Hub involved in the transaction. The Hub reroutes the query response back to the Health IT system where the query originated. After receiving the query response(s), the Healthcare Professional makes an informed decision of whether or not to prescribe the medication or modify the dosage based on the information received.

28. User Story 3: Pharmacist queries PDMP prior to dispensing opioids to a patient To be reviewed in Word Document Trigger: Patient arrives at pharmacy and drops off prescription to be filled Use Case Scope 1. Pharmacist logs into Pharmacy Dispensing System 2. Sends query to state PDMP to check if patient has received narcotics/controlled substance in past X weeks 3. PDMP sends query response 4. Pharmacist makes an informed decision to dispense medication based on information received Draft User Story: A patient arrives at the pharmacy to have his prescription filled. The pharmacist logs into the Pharmacy Dispensing system, and she enters her credentials. After, she sends a query to the State PDMP through her Pharmacy Dispensing system to see if the patient had filled a prescription for a controlled substance in the past X weeks. The PDMP processes the request and identifies the appropriate response to send back to the requestor. After receiving the query response from the PDMP, the pharmacist makes an informed decision of whether or not to dispense the medication based on the information received.

29. Pre/Post Conditions To be reviewed in Word Document Post-Conditions • Health IT System has sent a query • PDMP system has received the query • PDMP system has sent a response to the Health IT system • Health IT system has successfully received the query results from the PDMP system • Health IT system can display/present query response Pre-Conditions • The necessary access controls and authorization protocols based on State and/or Federal regulations (which could include patient consent or privacy permissions) for any of the systems or users described, are in place • The Health IT system application can provide any necessary authorization, authentication or privacy information to the PDMP • An intermediary, such as a Hub, provides necessary technology infrastructure to allow PDMP data exchange from the PDMP to the Health IT system • Query parameters required to create the query in a standardized format by the Health IT system/Hub are recognized and accepted by the PDMP system • The PDMP system can provide a query response in a standardized format recognized and accepted by the Hub/Health IT system • The PDMP system has knowledge about the Hub and the Hub has knowledge about the Health IT system to send a query response (this is in the event a request is parsed out to other states and the other states respond back) • Health IT System and PDMP have a common understanding of the shared vocabulary that is used to create the queries and provide the query results • Health IT System is able to determine which state PDMP(s) should receive the query

30. Actors and Roles To be reviewed in Word Document

31. Looking Forward:Proposed Use Case & Functional Requirements Development Timeline

32. Next Steps • Review:Pre/Post Conditions, Actors and Roles, and User Stories • Next Meeting is Tuesday, February 4 from 12:00pm - 1:30pm EST • Reminder: All PDMP & HIT Integration Announcements, Meeting Schedules, Agendas, Minutes, Reference Materials, Use Case, Project Charter and general information will be posted on the PDMP Wiki page • http://wiki.siframework.org/PDMP+%26+Health+IT+Integration+Homepage

33. Contact Information • For questions, please feel free to contact your support leads: • Initiative Coordinators: • Johnathan Coleman jc@securityrs.com • Sherry Green sgreen@namsdl.org • ONC Leads: • Mera Choi mera.choi@hhs.gov • Jennifer Frazier Jennifer.Frazier@hhs.gov • Helen Caton-Peters Helen.Caton-Peters@hhs.gov • SAMHSA Leads • Jinhee Lee Jinhee.Lee@samhsa.hhs.gov • Kate Tipping Kate.Tipping@samhsa.hhs.gov • Support Team: • Project Management: • Jamie Parker jamie.parker@esacinc.com • Ali Khan Ali.Khan@esacinc.com (Support) • Use Case Development: • Ahsin Azim Ahsin.Azim@accenturefederal.com • Presha Patel presha.patel@accenture.com • Vocabulary and Terminology Subject Matter Expert: • Mark Roche mrochemd@gmail.com