myConsentMinder

Web-based, patient/consumer-facing application for managing privacy preferences

Accessed via a patient-centric user interface, e.g. personal health record or patient portal

Consumers create or edit their health information privacy policies – e.g. consent to share PHI, consent to participate in research, etc. – using simple Web templates

Consumers may allow or deny override (‘break the glass’) access to PHI, where appropriate

Privacy policies are automatically enforced in any HIE environment by interfacing with the standards-based access control service

Policies are expressed in OASIS XACML