Requirements and Certification Criteria
PHIN Requirement #3 and Certification Criteria
PHIN REQUIREMENTS: FUNCTIONS OF ELECTRONIC INFORMATION SYSTEMS
CDC requires that each state or local health department—or its agent—
3. be able to securely receive, process, and interpret electronic messages sent using standard protocols, formats, and terminologies.
3.1. verify that the sending systems and parties are trusted.
3.2. be able to process and interpret received messages and, as appropriate, store their content in locally maintained datasets.
3.3. be able to send acknowledgement of message receipt when requested.
3.4. be able to send a notification indicating that an error was encountered during the processing or interpreting of a message.
3. Is the application able to receive and process functional electronic messages that comply with applicable implementation guides, message guides, message specifications, and associated standards for PHIN electronic messages?
3.1 Is the application receiving electronic messages able to identify the sending party within the message and verify that the sending party exists and is trusted using an appropriate means of authentication?
3.2 Is the application receiving electronic messages able to send acknowledgement of message receipt when requested?
3.3 If necessary, is the application receiving electronic messages able to interface with, and without error transfer the message to, an application that processes the message?
3.4 For each type of message, is the application processing electronic messages able—without error or loss of required information—to map and convert all required data elements from PHIN compliant terminologies, classification schemes, and value domains to any local terminologies, classifications schemes, and value domains that may be used for these data elements?
3.5 Is the application processing electronic messages able to send a message indicating that an error was encountered when processing a message?