by Brian Ahier, Rich Elmore and David C. Kibbe
The Direct Project announced today the completion of its open-source connectivity-enabling software and the start of a series of pilots that will be demonstrating directed secure messaging for healthcare stakeholders over the internet. The Direct Project specifies a simple, secure, scalable, standards-based way for participants to send authenticated, encrypted health information directly to known, trusted recipients over the Internet.
The Direct Project is the collaborative and voluntary work of a group of healthcare stakeholders representing more than 50 provider, state, HIE and HIT vendor organizations. Over 200 participants have contributed to the project. It’s rapid progress, transparency, and community consensus approach have established it as a model of how to drive innovation at a national level.
Today, communication of health information among providers and patients is most often achieved by sending paper through the mail or via fax. The Direct Project seeks to benefit patients and providers by improving the transport of health information, making it faster, more secure, and less expensive. The Direct Project will facilitate “direct” communication patterns with an eye toward approaching more advanced levels of interoperability than simple paper can provide.
The Direct Project provides for universal boundaryless addressing to other Direct Project participants using a health internet “email-like” address.
The Direct Project focuses on the technical standards and services necessary to securely transport content from point A to point B and does not specify the actual content exchanged. When The Direct Project is used by providers to transport and share qualifying clinical content, the combination of content and The Direct Project-specified transport standards may satisfy some Stage 1 Meaningful Use requirements. For example, a primary care physician who is referring a patient to a specialist can use The Direct Project to send a clinical summary of that patient to the specialist and to receive a summary of the consultation.
2009-10 Congress and agencies of the federal government have created regulations that require physicians and hospitals participating in the ARRA/HITECH incentives awarded for meaningful use of EHR technology to:
send messages and data to each other for referral and care coordination purposes;
send alerts and reminders for preventive care to their patients;
send patients clinical summaries of their visit and of their health information
receive lab results from labs
send immunization and syndromic surveillance data to public health agencies
integrate with HIT vendor systems
Each capability can be enabled with point-to-point secure e-mail or in a more integrated manner as HIT vendors and public health agencies enable communication with the Direct Project.
States that are receiving federal funding to enable message exchange are being asked by the ONC to facilitate Stage 1 Meaningful Use information exchange. The Direct Project may serve as a key enabler of directed messaging for all states and Health Information Exchanges. Even states that have some level of health information exchange capability need to address areas that are currently uncovered by a regional or local Health Information Organization (HIO).
As state plans seek to address a means to fill the gaps in exchange capability coverage, the Direct Project may provide a bridge to enabling the basic exchange requirements for Stage 1 Meaningful Use. The Direct Project does not obviate the need for state planning for HIE, neither does it undercut the business case for HIOs. More robust services can be layered over simple directed messaging that will provide value to exchange participants.
There are already organizations that have announced the establishment of national clinical exchange networks, including integration with the Direct Project. States and HIO’s will need to decide how best to provide Direct Project services to their constituents, whether by partnering with existing exchange networks or incorporating direct messaging into the services they provide.
The Direct Project is organizing real-world pilots to demonstrate health information exchange using The Direct Project standards and services. Six pilots are ramping up including:
Rhode Island Quality Institute, Redwood MedNet and MedAllies will be sending Continuity of Care Documents to other providers for referrals and transitions of care. Visionshare will be linking to immunization registries. Carespark (Tennesee) will be linking the VA with private clinics providing health services to veterans. And Connecticut’s Medical Professional Services, an IPA, will be linking Middlesex Hospital with primary care providers.
To help the Direct Project implementers, an open source reference implementation of the Direct Project standards and services has been developed under the guidance of the Direct Project. To ensure the broadest possible participation, the reference implementation has been implemented in two flavors: Java and .Net.
Connectivity among providers is facilitated by Health Information Service Providers (HISP). HISP describes both a function (the management of security and transport for directed exchange) and an organizational model (an organization that performs HISP functions on behalf of the sending or receiving organization or individual).
The Direct Project is bound by a set of policies that have been recommended to the HIT Policy Committee (HITPC) or are being examined by the HITPC’s Privacy and Security Tiger Team for directed messaging. Within this context, the Direct Project has developed best practice guidance for secure communication of health data among health care participants who already know and trust each other. The Direct Project assumes that the Sender is responsible for several minimum requirements before sending data, including the collection of patient consent. These requirements may or may not be handled in an electronic health record, but they are handled nonetheless, even when sharing information today via paper or fax. For example, a sender may call to ask whether a fax was sent to the correct fax number and was received by the intended provider.
The following best practices provide context for the Direct Project standards and services:
The Sender has obtained the patient’s consent to send the information to the Receiver.
The Sender and Receiver ensure that the patient’s privacy preferences are being honored.
The Sender of a Direct Project transmission has determined that it is clinically and legally appropriate to send the information to the Receiver.
The Sender has determined that the Receiver’s address is correct.
The Sender has communicated to the receiver, perhaps out-of-band, the purpose for exchanging the information.
The Sender and Receiver do not require common or pre-negotiated patient identifiers. Similar to the exchange of fax or paper documents, there is no expectation that a received message will be automatically matched to a patient or automatically filed in an EHR.
The communication will be performed in a secure, encrypted, and reliable way, as described in the detailed The Direct Project technical specifications.
When the HISP is a separate entity from the sending or receiving organization, best practice guidance for the HISP has been developed for privacy, security and transparency.
The Direct Project is not targeted at complex scenarios, such as an unconscious patient who is brought by ambulance to an Emergency Department. In the unconscious patient scenario, a provider in the ED must “search and discover” whether this patient has records available from any accessible clinical source. This type of broad query is not a simple and direct and therefore requires a more robust set of health information exchange tools and services that The Direct Project does not provide.
The Direct Project is an integral component in a broader national strategy to have an interconnected health system through a Nationwide Health Information Network (NHIN). The NHIN is “a set of standards, services and policies that enable secure health information exchange over the Internet. The NHIN will provide a foundation for the exchange of health IT across diverse entities, within communities and across the country, helping to achieve the goals of the HITECH Act.”
Brian Ahier is chairman of the State of Oregon’s Health Information Technology Oversight Council Technology Workgroup. Rich Elmore is Vice President, Strategic Initiatives at Allscripts. David C. Kibbe is a family physician, senior advisor to American Academy of Family Physicians and co-founder of the Clinical Groupware Collaborative.
Congratulations to Arien Malec and the Direct Project Implementation Group on a major landmark.
As reported at last Tuesday's Implementation Group meeting, the Direct Project has successfully completed the 1.0 versions of its reference implementations both for Java and .Net. At the same time, implementation pilots are now ramping up around the country.
This is the result of a true team effort by providers, states/HIE's and HIT vendors.
And in related news:
Onward to the pilots!
Join me tomorrow at 10 AM Pacific, 1 PM Eastern, at NHIN 203, on the Direct Project.
(Note: this is taken from an e-mail message I sent to the Direct Project membership yesterday.)
A little under 9 months ago, we launched this project with the sketch of a dream: universal addressing and secure transport that would enable health information exchange reaching patients and providers where they are and where they are going in support of meaningful use and improved health outcomes.
In that 9 months, we've agreed and disagreed, formed, stormed, normed and performed, and accomplished great things. We have two specifications that are content complete (needing editorial review and revision); two reference implementations that are at a 1.0 state and can "out of the box, just add trust" enable exchange with a simple install and configuration; some amazing documentation, from the elegant generalist overview, to the most geeked out installation and programming guides; a compelling presentation; solid best practices and security reviews to protect privacy, security and trust; and some incredible implementation geographies integrating directed exchange into physician workflow to enable meaningful use and improved quality. We are seeing multiple organizations, from commercial HIT organizations to public-private health information exchange organizations building Direct specifications into their products and building Direct implementations into their business plans and missions.
It has been incredibly humbling being part of this process, because the Direct Project has truly been about "we": an organization of glorious individuals who have come together on a volunteer basis to accomplish great things. None of what we have accomplished would be there without you, and the energy, brilliance and hard work you have put into this project.
So on this day of national Thanksgiving, a very simple message:
For personal reasons, and not without great regret, I am changing roles and from this point forward will be a part-time follower and volunteer on the project. With the handoff from specification and coding to running pilots, and with my "year to open source Washington" going on 20 months, it seemed like a good time for such a transition. It's an amazing project and I will be following it closely as the pilots get started and the rubber hits the road. In particular there are some big steps in open source governance that need sorting out, and I'll be helping in the background with that. I've had a ton of fun working with Arien, Uvinie, Jackie, Honora, Sean, Umesh, Beau, Dragon, Doug, Farzad, and everyone else who has jumped in and contributed, defended, funded, championed, critiqued, and believed in what the project set out to do and has accomplished.
He usually does, but I want to call this instance out.
The Direct Project will be successful primarily because the market has changed. Meaningful use was a big part of it, state HIE programs are a big part of it, ACOs and PCMH are a big part of it, tipping points on EHR adoption are a big part of it, but the market has changed such that organizations of all different types are seeing business benefit from ease of integration.
The project formed a convenient nexus for organizations to help ease integration but there have been, and will be, many forums for this kind of collaboration to occur. The market shift is the primary reason that Direct happened as quickly as it did.