Abstract:
A method performed by an electronic healthcare record (EHR) system with customizable compliance policies includes invoking a first data management process for a first data management operation, the first data management process defining a first set of compliance policies of a first healthcare participant for the first data management operation, and invoking a second data management process for the first data management operation, the second data management process defining a second set of compliance policies of a second healthcare participant for the first data management operation that differs from the first set of compliance policies.
Abstract:
A method performed by a processing system includes encrypting an electronic health record of a patient using a record key, encrypting a portion of a node of a metadata tree of the patient with a node key, the portion including a reference to the encrypted record in an encrypted data store, and updating the metadata tree for the patient to include the encrypted node and a node key lockbox with the node key.