Reporting Syndromic Surveillance to Public Health (Emergency Department, Inpatient, and Urgent Care Settings)

Type	Standard / Implementation Specification	Standards Process Maturity	Implementation Maturity	Adoption Level	Federally required	Cost	Test Tool Availability
Implementation Specification	PHIN Messaging Guide for Syndromic Surveillance: Emergency Department, Urgent Care, Inpatient and Ambulatory Care Settings, Release 2.0	Final	Production		Yes	Free	Yes
Implementation Specification	Erratum to the PHIN Messaging Guide for Syndromic Surveillance: Emergency Department, Urgent Care, Inpatient and Ambulatory Care Settings Release 2.0 (April 21, 2015)	Final	Production		Yes	Free	No
Implementation Specification	Hl7 Version 2.5.1 PHIN Messaging Guide For Syndromic Surveillance, Release 2.0 - NIST Clarifications and Validation Guidelines (Version 1.6)	Final	Feedback requested	Feedback Requested	No	Free	Yes
Implementation Specification	PHIN Messaging Guide for Syndromic Surveillance: Emergency Department and Urgent Care Data Release 1.1	Final	Production		Yes	Free	Yes
Implementation Specification	Testing Clarification for PHIN Messaging Guide for Syndromic Surveillance: Emergency Department and Urgent Care Data (Release 1.1) Release 1.2 (February 15th, 2013)	Final	Production		Yes	Free	No
Implementation Specification	HL7® Version 2.5.1 Implementation Guide: Syndromic Surveillance, Release 1 - US Realm	Balloted Draft	Pilot	Feedback Requested	No	Free	No

Limitations, Dependencies, and Preconditions for Consideration	Applicable Security Patterns for Consideration
Stakeholders must refer to the health department in their state or local jurisdiction to determine onboarding procedures, obtain a jurisdictional implementation guide if applicable, and determine which transport methods are acceptable for submitting syndromic surveillance data as there may be jurisdictional variation or requirements. The PHIN Messaging Guide for Syndromic Surveillance Release 2.0 and its errata are referenced in the 2015 Edition Health Information Technology (Health IT) Certification Criteria, 2015 Edition and are currently used for certification. In addition see the "NIST Clarifications and Validation Guidelines (Version 1.6)" listed above. The PHIN Messaging Guide for Syndromic Surveillance Release 1.1 and its "testing clarification" document are referenced in the Health Information Technology: Standards, Implementation Specifications, and Certification Criteria for Electronic Health Record Technology, 2014 Edition and were previously used for certification. Additional information can be found at the NSSP Resource Center.	Secure Communication – Create a secure channel for client-to-server and server-to-server communication. Secure Message Router – Securely route and enforce policy on inbound and outbound messages without interruption of delivery. Authentication Enforcer – Centralized authentication processes. Authorization Enforcer – Specifies access control policies. Credential Tokenizer – Encapsulate credentials as a security token for reuse (e.g., SAML, Kerberos). Assertion Builder – Define processing logic for identity, authorization and attribute statements. User Role – Identifies the role asserted by the individual initiating the transaction. Purpose of Use - Identifies the purpose for the transaction.

Limitations, Dependencies, and Preconditions for Consideration

Applicable Security Patterns for Consideration

Stakeholders must refer to the health department in their state or local jurisdiction to determine onboarding procedures, obtain a jurisdictional implementation guide if applicable, and determine which transport methods are acceptable for submitting syndromic surveillance data as there may be jurisdictional variation or requirements.
The PHIN Messaging Guide for Syndromic Surveillance Release 2.0 and its errata are referenced in the 2015 Edition Health Information Technology (Health IT) Certification Criteria, 2015 Edition and are currently used for certification. In addition see the "NIST Clarifications and Validation Guidelines (Version 1.6)" listed above.
The PHIN Messaging Guide for Syndromic Surveillance Release 1.1 and its "testing clarification" document are referenced in the Health Information Technology: Standards, Implementation Specifications, and Certification Criteria for Electronic Health Record Technology, 2014 Edition and were previously used for certification.
Additional information can be found at the NSSP Resource Center.

Secure Communication – Create a secure channel for client-to-server and server-to-server communication.
Secure Message Router – Securely route and enforce policy on inbound and outbound messages without interruption of delivery.
Authentication Enforcer – Centralized authentication processes.
Authorization Enforcer – Specifies access control policies.
Credential Tokenizer – Encapsulate credentials as a security token for reuse (e.g., SAML, Kerberos).
Assertion Builder – Define processing logic for identity, authorization and attribute statements.
User Role – Identifies the role asserted by the individual initiating the transaction.
Purpose of Use - Identifies the purpose for the transaction.

Comment

Submitted by nssp@cdc.gov on 2023-05-19

CDC NSSP Syndromic Surveillance Comments

This is the current implementation standard and specifications in use PHIN Messaging Guide for Syndromic Surveillance: Emergency Department, Urgent, Care, Inpatient and Ambulatory Care, and Inpatient Settings, Release 2.0, April 21, 2015 and Erratum to the CDC PHIN 2.0 Implementation Guide, August 2015 and the National Syndromic Surveillance Program does not have any recommended changes at this time.

Submitted by chris.baumgart… on 2022-09-20

WA State Department of Health Syndromic Comments

Washington State Department of Health appreciates having the standards listed on the “Reporting Syndromic Surveillance to Public Health (Emergency Department, Inpatient, and Urgent Care Settings)” page and does not have any recommended changes at this time.

Submitted by chris.baumgart… on 2021-09-29