Minutes - Security WG 2023-06-28

Attendees

• Bart Decuypere
• Brecht Van Vooren
• Brian Thieren
• Dominiek Leclerq
• Elien De Koker
• Erwin Bellon
• Félix De Tavernier
• Hanne Vuegen
• Jan Stinissen
• José Costa Teixeira
• Karlien Erauw
• Maxime Cauchet
• Philippe Baise
• Stephane Houpresse
• Steven Van den Berghe
• Werner De Mulder

Excused/Not present

• Anthony Maton
• Benny Verhamme
• Cyprien Janssens
• Didier Temans
• Filip Veldeman
• Isabelle Pollet
• Jan Lenie
• Jean-Michel Polfliet
• Marco Busschots
• Nick Hermans
• Nico Vannieuwenhuyze
• Stef Hoofd

Agenda

• guest to enlighten us on the access matrix

Minutes

• Presentation of the access matrix by Stephane Houpresse

• the reglementation that drives the accesses
• the Excel is a translation of this reglementation, CSI/ IIVC has phrased a deliberation for this
• the matrix is under evolution
• at a time we talked about "paradigm shift": open everything up, this is still under (political) discussion
• there are also requests to open it up to organisations/care providers that are not part of KB78
• is the matrix only for read, or also for write: it is only about consultations
• the matrix is implemented in the field by the hubs and vaults etc

• the roles of the health care providers is managed in Cobhra

• there are also other "rules" that apply in practice, f.e. "circle of trust"

• we discuss the presented document
• metadata meta.profile can be used but that should be done with caution ! a written guidance should be put together by HL7 Belgium

• the decision to migrate data to a new FHIR version has to be managed at project level by the project team

Action items

• Security controls: continue work on use cases for permission and consent
• Position of HL7 Belgium on the FHIR R5 release (to cover the already upcoming questions from players and stakeholders in Belgium)
• FHIR readiness of Belgian metahub-hub system: see preparation work

Next meetings

• Wednesday 12 July on contained resources and search options May at 9AM