In phase 2, each state implemented a state-specific project and planned for multi-state collaboration in phase 3. Illinois's phase 2 project formed a Privacy and Security Work Group to develop draft privacy and security policies and recommendations for consideration by the governance structure of a state level HIE. The work group developed a draft document, "Recommendations on Privacy and Security Policies" that focused on 12 privacy and security areas. A Legal Work Group was convened to draft a uniform model patient EHR/HIE consent form for possible use by the state-level HIE, clinicians, health care facilities and other providers. During its deliberations, the work group developed three forms after they determined that one form would not address the different issues faced by providers and an HIE under state and federal law: the Notices of Privacy Practices Insert, the Consent for Use and Disclosure of Certain Types/Categories Protected Health Information, and the Authorization for Use and Disclosure of Protected Health Information for Research.
