4 ms·
To which legislation in particular are you referring? I often see this claim on HN, but I do not think that most people here have any real understanding of the
by absconditus 14y ago
To which legislation in particular are you referring? I often see this claim on HN, but I do not think that most people here have any real understanding of the situation.
As an anecdote, I work on a medical information system for emergency rooms. The VA uses our system in some locations. Federal regulations are not at all onerous. Things like HIPAA are dealt with using a few really basic rules.
- No1 14y agoI agree with your sentiment, but the contest rules state "The replacement product will, as a part of the overall VistA EHR, deliver privacy, security, data integrity, patient accessibility, interoperability and other services required by federal law, regulations and VA policy." without citing anything specific either. A summary of those laws, regulations, and policies (and specific pointers to them) would help potential entrants get a real understanding of the situation.
- absconditus 14y agoFrankly, standard best practices for software development are far beyond what is common for healthcare software. The sentence that you quoted sounds more like ass covering than anything else.
- tedchs 14y agoBesides HIPAA, it is possible this software would need to comply with the VA's "6500", their internal information security handbook, as well as meeting relevant FISMA / NIST requirements (see http://csrc.nist.gov/groups/SMA/fisma/index.html http://csrc.nist.gov/groups/SMA/fisma/index.html ).
- absconditus 14y agoAgain, the system on which I work is used by the VA. I cannot imagine that any of these regulations are any more onerous than standard best practices in the industry.