First, the nation needs a well-defined, comprehensive privacy framework based on key policy and technology attributes that I will lay out.
Second, while the entities and contracts created by HHS have been useful to initiate action in this field, we now need to find the appropriate longer term process for determining both the policies and the technologies that will achieve the attributes of such a framework.
Our national strategy for health information technology must be carried out by decision-makers informed by and accountable to a broad range of interests with direct public accountability.