TEFCA: With greater simplification comes greater cybersecurity responsibility

The Trusted Exchange Framework and Common Agreement, created by the Office of the National Coordinator for Health IT under the 21st Century Cures Act, holds huge promise for interoperability and information exchange. 

It also has big implications for privacy and security.

"It's possible that a TEFCA security incident is also a HIPAA security incident, and it's possible that a HIPAA security incident may or may not be a TEFCA security incident," said Johnathan Coleman, principal at Security Risk Solutions and …

act big cybersecurity exchange framework health hipaa incident information interoperability national office privacy privacy and security responsibility security security incident under