Difference between revisions of "Minutes - Security WG 2023-06-28"

From Health Level 7 Belgium Wiki
Line 36: Line 36:
 
===== Minutes =====
 
===== Minutes =====
 
* Presentation of the access matrix by Stephane Houpresse
 
* Presentation of the access matrix by Stephane Houpresse
::* the reglementation that drives the accesses
+
::* the reglementation drives the accesses: [https://www.ehealth.fgov.be/ehealthplatform/nl/reglementen see here], including [https://www.ehealth.fgov.be/ehealthplatform/file/view/AWedzvUXgwvToiwBkfwJ?filename=18-190-n256-toegangsmatrix-gewijzigd%20op%206%20juli%202021.pdf CSI/IVC deliberation]
::* the Excel is a translation of this reglementation, CSI/ IIVC has phrased a deliberation for this
+
::* the Excel is a translation of this reglementation
 
::* the matrix is under evolution
 
::* the matrix is under evolution
 
::* at a time we talked about "paradigm shift": open everything up, this is still under (political) discussion
 
::* at a time we talked about "paradigm shift": open everything up, this is still under (political) discussion
 
::* there are also requests to open it up to organisations/care providers that are not part of KB78
 
::* there are also requests to open it up to organisations/care providers that are not part of KB78
 
::* is the matrix only for read, or also for write: it is only about consultations  
 
::* is the matrix only for read, or also for write: it is only about consultations  
::* the matrix is implemented in the field by the hubs and vaults etc
+
::* the matrix is implemented in the field by the hubs and vaults etc, and by developers
 
::::* the roles of the health care providers is managed in Cobhra
 
::::* the roles of the health care providers is managed in Cobhra
 
 
::* there are also other "rules" that apply in practice, f.e. "circle of trust"
 
::* there are also other "rules" that apply in practice, f.e. "circle of trust"
 
 
::* we discuss [https://drive.google.com/file/d/1bQg38faSQySh7NuXQrjG4WHJS-grbDbB/view?usp=share_link the presented document]
 
::* metadata meta.profile can be used but that should be done with caution ! a written guidance should be put together by HL7 Belgium
 
* the decision to migrate data to a new FHIR version has to be managed at project level by the project team
 
  
 
===== Action items =====
 
===== Action items =====

Revision as of 07:52, 28 June 2023

Attendees
  • Bart Decuypere
  • Brecht Van Vooren
  • Brian Thieren
  • Dominiek Leclerq
  • Elien De Koker
  • Erwin Bellon
  • Félix De Tavernier
  • Hanne Vuegen
  • Jan Stinissen
  • José Costa Teixeira
  • Karlien Erauw
  • Maxime Cauchet
  • Philippe Baise
  • Stephane Houpresse
  • Steven Van den Berghe
  • Werner De Mulder
Excused/Not present
  • Anthony Maton
  • Benny Verhamme
  • Cyprien Janssens
  • Didier Temans
  • Filip Veldeman
  • Isabelle Pollet
  • Jan Lenie
  • Jean-Michel Polfliet
  • Marco Busschots
  • Nick Hermans
  • Nico Vannieuwenhuyze
  • Stef Hoofd
Agenda
  • guest to enlighten us on the access matrix
Minutes
  • Presentation of the access matrix by Stephane Houpresse
  • the reglementation drives the accesses: see here, including CSI/IVC deliberation
  • the Excel is a translation of this reglementation
  • the matrix is under evolution
  • at a time we talked about "paradigm shift": open everything up, this is still under (political) discussion
  • there are also requests to open it up to organisations/care providers that are not part of KB78
  • is the matrix only for read, or also for write: it is only about consultations
  • the matrix is implemented in the field by the hubs and vaults etc, and by developers
  • the roles of the health care providers is managed in Cobhra
  • there are also other "rules" that apply in practice, f.e. "circle of trust"
Action items
  • Security controls: continue work on use cases for permission and consent
  • Position of HL7 Belgium on the FHIR R5 release (to cover the already upcoming questions from players and stakeholders in Belgium)
  • FHIR readiness of Belgian metahub-hub system: see preparation work
Next meetings
  • Wednesday 12 July on contained resources and search options May at 9AM