Topic: Data Security and eUCI
Agencies that collect client data, either on paper or electronically, are responsible for protecting the data. Data security is defined by Public Health Data Standards as “physical, technological, or administrative safeguards or tools used to protect identifiable health information from unwarranted access or disclosure.”
Data security entails attention to security and also requires attention to protecting the privacy of client information in accordance with HIPAA and other requirements. Ryan White data collection systems use the eUCI (Unique Client Identifier), an algorithm that meets the highest privacy and security standards.
Guidelines and Manuals
-
HRSA HIV/AIDS BureauDecember 2014
An explanation of the encrypted Unique Client Identifier (eUCI) to use for each client reported in the RSR client level data reporting system.
-
Data and Reporting TA TeamJanuary 2011
Common questions related to data elements, reporting logistics, eUCI, and other RSR topics.
-
Minnesota Department of Human ServicesJanuary 2009
n/a
-
HRSA HIV/AIDS BureauApril 2004
The Health Insurance Portability and Accountability Act (HIPAA) requires health care providers to assure patient confidentiality and other patient rights. This resource assists Ryan White grantees, their contractors, and subgrantees in complying with these requirements.
Webinars and Training
-
Data and Reporting TA TeamFebruary 2015
Overview of the responsibilities of Ryan White Grantees regarding data security as it applies to the collection, storage and transmission of RSR and ADR data.
-
Data and Reporting TA TeamSeptember 2014
This series of brief videos covers many of the fundamental concepts behind the Ryan White Services Report (RSR) for new and experienced grantees.
-
HRSA HIV/AIDS BureauJanuary 2010
These web-based training modules are designed to help Ryan White HIV/AIDS Program grantees and service providers to build skills and become more efficient in how they collect, use, and share data.
-
HRSA HIV/AIDS BureauJanuary 2009
-
HRSA HIV/AIDS BureauJuly 2008
Tools and Job Aids
-
HRSA HIV/AIDS Bureau, Data and Reporting TA TeamDecember 2014
This user guide explains how the eUCI is constructed, how to generate it using the eUCI application if using a data system that does not generate it automatically, and steps for developers who want to generate eUCIs within their data systems. Systems that generate eUCIs automatically are listed.
-
HRSA HIV/AIDS BureauOctober 2012
Toolbox explains health IT issues that are unique to HIV/AIDS care. Modules include an introduction to Health IT issues unique to HIV/AIDS,
selecting Health IT tools, financing Health IT, improving quality and efficiency, and security and privacy issues. -
LaCANApril 2011
Sample agreement from the Louisiana CAREWare Access Network (“LaCAN”), shared via the CAREWare listserv.
-
Mecklenberg CountyJanuary 2011
Sample agreement addressing HIPAA and data security, submitted via the CAREWare listserv.
-
Hartford Department of Health and Human ServicesJanuary 2010
Sample agreement submitted via the CAREWare listserv.
-
Hartford Department of Health and Human ServicesJanuary 2010
Sample consent submitted via the CAREWare listserv.
-
Hartford Department of Health and Human ServicesJanuary 2010
Sample user agreement submitted via the CAREWare listserv.
-
HRSAJanuary 2009
Several online training modules (adoption of technology, rural, children) are available to help agencies understand and implement health information technologies, particularly in dealing with issues like electronic medical records and privacy of records.
Reports and Best Practices
-
Data and Reporting TA TeamMay 2016
These tools are designed to walk users through some common functions associated with preparing and submitting the RSR.