AdvCIS - CRv2: Use Case

3 Use Case flows 

• Notice and a Notification to the person
  • title; Short Description
    • link to use case 
• Person using notice to control data
• Person creating a Notification - control the use of data

Healthcare Use-Cases

Dimensions of the use-cases

• Whether there are different domains (hospitals, countries)
• Whether data is pre-anonymised (notably for medical research)
• Whether there is an established identity system able to authenticate and receive requests

Actors

• The subject
• The healthcare organisations holding EHRs
• Requesting parties
• Countries or jurisdictions

Use-Cases

From simplest to comprehensive

1. Within a single domain, subject agrees to share anonymised medical data for research
2. Across two domains, subject agrees to share anonymised medical data for research
3. Across two domains with federated identity, subject authenticates and allows access to EHRs
4. Across two domains over which no common identity system exists, subject agrees to share EHRs
5. Across two different countries, and necessarily two different domains, subject agrees to share EHRs and use part of that information to comply with public notification requirements