Minutes - Security WG 2023-05-23

Attendees

• Bart Decuypere
• Benny Verhamme
• Brecht Van Vooren (partially online)
• Brian Thieren
• Elien De Koker
• Jean-Michel Polfliet
• José Costa Teixeira
• Karlien Erauw
• Nick Hermans (partially online)
• Steven Van den Berghe
• Werner De Mulder

Excused/Not present

• Anthony Maton
• Cyprien Janssens
• Didier Temans
• Dominiek Leclerq
• Erwin Bellon
• Félix De Tavernier
• Jan Stinissen
• Filip Veldeman
• Isabelle Pollet
• Jan Lenie
• Marco Busschots
• Nico Vannieuwenhuyze
• Philippe Baise
• Stef Hoofd

Agenda

• future work topics and way of working

Minutes

• Determine scope and future action items of this working group

• we need to look at the bigger picture and publish guidelines on a more strategic level

• of course we need to continu to support projects to move towards mature FHIR implementations

• on top of implementation guids we also need transition guides
• what are the important topics that need our attention and for which guidelines are necessary:

• hub/metahub system and FHIR readiness & functionalities
• versioning and FHIR R5 release
• access controls & security labels

• evolution of FHIR: a kind of end of life template is needed

• work on FHIR capability server: have runtime information at one specific moment in time
• intended data capabilities need to be written out

• we discuss the presented document

• metadata meta.profile can be used but that should be done with caution ! a written guidance should be put together by HL7 Belgium

• the decision to migrate data to a new FHIR version has to be managed at project level by the project team

• access controls and security labels: see document here

Action items

• Position of HL7 Belgium on FHIR R5 release and versioniong needs to be written out (to cover the already upcoming questions from players and stakeholders in Belgium)
• FHIR readiness of Belgian metahub-hub system: a guidance document needs to be started
• Security controls & access controls: continue work on use cases for permission and consent

Next meetings

• Wednesday 14 June at 9AM online