CareAccord Direct Secure Messaging

1. CareAccordDirect Secure Messaging

2. Who is CareAccord? • Oregon’s Health Information Exchange. • Administered by the Oregon Health Authority • Funded through the ONC, no cost through 2013 • The Triple Aim • Better health • Better care • Lower cost • Built on national standards developed through The Direct Project

3. Building Trust Communities Providers have established trust amongst themselves and are able to exchange information with a select number of other providers. Providers are vetted by CareAccord and must adhere to the same Participation Agreement, allowing all organizations within CareAccord’s trust community to share information. CareAccord’s Trust Community Today’s Community

4. What is Direct Secure Messaging

5. Direct Secure Messaging • Rely less on fax, regular mail and couriers • Send (push) and receive protected health information securely through encrypted email • HIPAA compliant • X.509 v3 Direct compliant Digital Certificate • Meets Stage 2 Meaningful Use criteria • Secure web portal, accessible via the internet by PC or mobile devices • Processed confirmations provide evidence that your message was securely sent and viewed. • It is not necessary to have an EHR

6. Security Security • Dual Email Encryption: • Encrypted connection: Your email is secure even before you type it, with our encrypted connection, look for the “s” in the address bar (https://) to verify that your data is secured. • Encrypted message content: Your message is further secured by a public key infrastructure that encrypts both the message and any included attachments. Your message can only be opened by another CareAccord account holder.

7. Direct Address Like a physical address, a direct address is a unique identifier that locates each account. UserName@direct.Organization.careaccord.org Unique to each account Unique to your organization Selected during online registration Selected during organization account activation

8. How Direct Secure Messaging is different from Single Encrypted Messaging

9. Registration

10. Register for Direct Secure Messaging 1.) Complete the Online Registration 2.) Sign the Organizational Participation Agreement 3.) Notarize the Identity Verification From

11. Direct Secure Messaging Demo

12. Organization There are 3 types of accounts listed in the Provider Directory Account Types • Organization: A hospital, clinic, solo provider or other healthcare entity. A delegate may be assigned to manage the in box. • Sub Organization: A hospital or clinic department or specialty clinic. A delegate may be assigned to manage the in box • Individual: A physician or an individual who represents a hospital department. A delegate may be assigned to manage the in box * Delegates are not listed in the Provider Directory Sub- Organization Individual Delegate* Delegate* Delegate*

13. Next Steps and Questions

14. www.CareAccord.org Video’s and Guides Start your Registration Log into your Account Security Best Practices Contact Us