Acentra Health Interoperability Solution – Sandbox

Vendor Apps

The application owners will need to register their application in order to access Patient Access API. Please use the form below to register your application and review the attestation requirements to protect Patient’s Privacy as per CMS guidelines.

Application Registration

remove

* Mandatory field

Application Owner Attestation to protect Patient’s Privacy as per CMS guidelines (Best Practices for Payers and App Developers)

Application owner attests that the application clearly explains to patients that their data are no longer covered by HIPAA once the patient directs their data to be exchanged with most apps.

Application owner attests that the Application’s privacy policy includes

How a patient’s health information may be accessed, exchanged or used by any person or other entity, including whether the patient’s health information may be shared or sold at any time (including in the future)
A requirement for express consent from a patient before the patient’s health information is accessed, exchanged or used, including receiving express consent before a patient’s health information is shared or sold (other than disclosures required by law or disclosures necessary in connection with the sale of the application or a similar transaction)
If the app will access any other information from a patient’s device.
How a patient can discontinue app access to their data and what the app’s policy and process is for disposing of a patient’s data once the patient has withdrawn consent.

Application owner attests that the application developers follow CMS recommended best practices and privacy regulations (https://www.cms.gov/files/document/best-practices-payers-and-app-developers.pdf)

CARIN Alliance Code of Conduct (https://www.carinalliance.com/our-work/trust-frameworkand-code-of-conduct/)

ONC Model Privacy Notice (https://www.healthit.gov/topic/privacy-security-and-hipaa/model-privacy-notice-mpn)

Privacy, Security and HIPAA (https://www.healthit.gov/topic/privacy-security-and-hipaa)

Application owner agrees to the Terms and Conditions

For more information visit https://www.cms.gov/Regulations-and-Guidance/Guidance/Interoperability/index