Payer Systems

Payer System Attestation to protect Patient’s Privacy as per CMS guidelines (Best Practices for Payers and App Developers)

Payer system attests that the application clearly explains to patients that their data are no longer covered by HIPAA once the patient directs their data to be exchanged with most apps.

Payer system attests that the Application’s privacy policy includes

How a patient’s health information may be accessed, exchanged or used by any person or other entity
A requirement for express consent from a patient before health information is accessed or shared
If the app will access any other information from a patient’s device.
How a patient can discontinue app access to their data
Payer system attests that the Application’s privacy policy includes

Payer system attests that the application developers follow CMS recommended best practices and privacy regulations (https://www.cms.gov/files/document/best-practices-payers-and-app-developers.pdf)

CARIN Alliance Code of Conduct (https://www.carinalliance.com/our-work/trust-frameworkand-code-of-conduct/)

ONC Model Privacy Notice (https://www.healthit.gov/topic/privacy-security-and-hipaa/model-privacy-notice-mpn)

Privacy, Security and HIPAA (https://www.healthit.gov/topic/privacy-security-and-hipaa)

Payer system agrees to the Terms and Conditions

Application Registration

Payer System Attestation to protect Patient’s Privacy as per CMS guidelines (Best Practices for Payers and App Developers)