Mass HIway Toolkit

This toolkit contains instructions on how to get connected to Mass HIway 2.0, the Massachusetts Health Information Exchange.

 

Blue Introduction Tab
Blue Enrollment Tab
Blue Identity Proofing Tab
Blue Connection Methods Tab
Direct Messaging Blue Tab
Blue Regulations Tab
Blue Attestation Tab
Blue Patient Consent Tab

Introduction to the Mass HIway

The Mass HIway is a secure Health Information Exchange (HIE) for all healthcare systems in Massachusetts, regardless of affiliation, location, or differences in technology. The HIway provides a mechanism for healthcare providers to exchange health information for the patients they serve. It is a cost-effective tool to improve care coordination, quality, patient satisfaction, and public health reporting.

The Mass HIway is operated by the Massachusetts Executive Office of Health and Human Services (EOHHS). The HIway is overseen by a Health Information Technology (HIT) Council, and informed by consumer, provider, legal and policy, and technology advisory groups to promote a transparent multi-stakeholder engagement model. Click here for meeting dates, presentations, and notes of the HIT Council.

The key services provided by the Mass HIway include:

  • Continued development of the Mass HIway infrastructure
  • Provider/health organization education, outreach and adoption
  • EHR/Practice Management Vendor integration services
  • Onboarding and Enrollment
  • Secure Direct Messaging
  • Account Management and Consulting Services
  • HIway Adoption and Utilization Support

New: HAUS Services

The Mass HIway offers HIway Adoption and Utilization Support (HAUS) Services to assist organizations in the effective deployment of HIE to enhance care coordination. If you enroll in the free-of-charge HAUS Services, a HIway Account Manager will be assigned to your organization as a project resource to enable your organization to incorporate HIE into your care coordination process.

The Account Manager will support your organization in the development and implementation of HIE-supported use cases, and will assist you in project management. To read more about HAUS, visit the HAUS Services Program pages on our website here.

New: HIway 2.0

In 2018, the Mass HIway released HIway 2.0, which is based on Orion Health's Communicate platform. HIway 2.0 aligns the HIway with modern interoperability standards, simplifies the connection process, and improves the user experience. Review the new features in the graphic shown below.

To enable providers to take advantage of the improved HIE capabilities, all HIway 1.0 users have been migrated to HIway 2.0.

If you are new to the Mass HIway, read the "Enrollment" tab to get started with enrolling and onboarding onto Mass HIway 2.0.

Contact the Mass HIway

For more information, contact the Mass HIway at:

  1-855-MA-HIway (Options: 1 = Enrollment, 2 = Support, 3 = Information)

   For general inquiries:    masshiway@state.ma.us

   For technical support:   masshiwaysupport@state.ma.us

Enrolling and Connecting to Mass HIway 2.0

The Mass HIway has contracted with two vendors to operate, maintain, and support the HIway. To become a new HIway participant, you will be supported by both vendors:

  • Orion Health will provide Platform Implementation and Technical Support Services
     
  • MeHI will support you with Account Management, Consulting Services, Outreach, and Education

The Mass HIway is currently open to Massachusetts-licensed providers, health plans, as well as business associates. Use of the Mass HIway is limited to health information exchange as allowed by law.

If this applies to you, the Account Management team at MeHI is available to assist you with the HIway enrollment, onboarding, and connection process. To get the process started:

  1. ​Contact the Mass HIway to get connected with a HIway Account Manager as explained below
     
  2. Work with the Account Manager to get enrolled, identity proofed, and onboarded
     
  3. Develop and deploy HIE Use Cases to exchange health information with your trading partners

The Enrollment Process

Mass HIway participation is initiated through enrollment. To initiate enrollment, send an email to masshiway@state.ma.us, or call 1-855-MA-HIway and select Option 1 for Enrollment.
 
An Account Manager will be assigned, who will contact you to explain the enrollment process and will provide you with a set of enrollment documents to get started. 
 
These documents include the Participation Agreement and forms to be reviewed and signed by your organization to get access to the Mass HIway. The documents and instructions are listed in the table below. Click on the links in the table to review the documents.
 
Compliance with these documents is required for new participants to connect to the Mass HIway: The Participation Agreement is non-negotiable and will not be changed or adapted for special requests.
 
Unless otherwise noted, an individual authorized to legally bind the prospective Participant or Participating Organization will need to act as signatory. Examples include a President, CEO, CFO, CIO, or owner of a medical practice. Please sign all documents as outlined.
 
You may scan and e-mail all documents to: masshiway@state.ma.us. Only PDF attachments are accepted, except for Exhibit A (3rd document), which needs to be attached in Excel format.
 
Document Instructions
 Policies and Procedures (version 4)

 Review this document which outlines the conditions
 and terms that apply to all Mass HIway Participants
 to ensure it is used in a safe, ethical, and lawful manner.
 
 Participation and Business Associate Agreement

 This agreement governs the access and use of the
 services of the Mass HIway network. It defines the
 roles and responsibilities of each party.
 
 This document needs to be signed and returned
 during Enrollment.
 
 Mass HIway Legal Entity and Sub Organization File Sheet V1

 This Excel file includes demographic information
 about the organization as well as key contact detail.
 
 This document is Exhibit A and needs to be
 completed and returned during Enrollment:
  • For single entities, complete only the top section for "Legal Entity (Participant)".
     
  • If signing on behalf of sub or member organizations, you must also complete the section labeled "Sub Organization/Member".
 W-9 Form

 Request for Taxpayer Identification Number
 and Certification

 

The Identity Proofing Process

After enrollment, your organization must assign an Health Care Organization (HCO) Representative, who must be either your future Mass HIway Access Administrator or an Officer of the Organization, in accordance with your organization's policies and procedures.

The HCO Representative will be required to undergo an identity proofing process to serve as your HCO Administrator. Your HIway Account Manager can assist you with this process.

Follow the instructions for the Identity Proofing process as described in the "Identity Proofing" tab.

The Onboarding Process

The HIway Services Team at Orion will configure and test your technical connection to the Mass HIway, to bring your organization onto the HIway network. Once your connection works, you will have the technical capabilities to start exchanging Direct Messages with other providers. An estimated timeline for this process is shown below.
 
Your Account Manager will help you select the best suitable connection method. Review the "Direct Messaging" and "Connection Methods" tabs to learn about Direct Messaging and to review your options for connecting to HIway 2.0. The Account Manager will also assist you in defining appropriate Direct Address(es), which you will need to send and receive Direct Messages.
 
Upon completion, the Direct Address(es) will be added to the Mass HIway Provider Directory so other providers can see that you are connected. While the Provider Directory enables providers to look up who they can electronically exchange health information with, providers need to first jointly establish Use Cases for such exchanges.
 

    The times in this table are estimates. Actual times vary by connection type, EHR vendor, and Participant.

Developing Use Cases

Going live requires more than just a technical connection and a Direct Address. You have to develop HIE Use Cases to define the who, what, when, where and how you will use the Mass HIway to exchange health information with other providers. This includes adapting your clinical workflows to incorporate HIE.

Your Account Manager can assist you with the use case development tasks, such as:

  • Assess HIE opportunities and barriers for your organization and providers
     
  • Identify viable exchange trading partners and relevant Use Cases
     
  • Engage, facilitate and manage electronic exchange across trading partners
     
  • Operationalize mutually agreed upon testing protocols, workflows, and processes
     
  • Get the right information securely to the right provider, at the right time
     
  • Streamline/Optimize internal and external workflows
     
  • HIE Educational services to all levels of the organization
     
  • Share lessons learned among the various HIE participants

New: Request HAUS Services

A great way to get assistance for connecting to the Mass HIway and developing HIE Use Cases is by signing up for the free of charge HAUS Services. To learn more, click here.

Contact the Mass HIway

For more information, contact the Mass HIway at:

  1-855-MA-HIway (Options: 1 = Enrollment, 2 = Support, 3 = Information)

   For general inquiries:    masshiway@state.ma.us

   For technical support:   masshiwaysupport@state.ma.us

 

Mass HIway 2.0 Identity Proofing

A Level of Assurance (LOA) 3 is required to connect to HIway 2.0. LOA 3 is the government standard for electronic authentication of identity required for health information exchange.

For this purpose, your organization must assign an Health Care Organization (HCO) Representative, who must be either a Mass HIway Access Administrator or an Officer of the Organization, as determined in accordance with your organization's policies and procedures. The HCO Representative will be required to:

  • Undergo an identity proofing process to serve as your HCO Administrator. This process is executed by DigiCert, a certification authority. Upon successful completion, DigiCert will issue the required key encipherment and digital signature certificates to the organization;
     
  • Manage the completion of the required Health Care Organization (HCO) Account Request Form(s) relevant to the applicable connectivity type(s), as explained below.

Complete the DOID and HCO Forms

There are two forms that must be completed and submitted to the Mass HIway to proof the identity of your HCO Representative. Both forms must be completed and signed by the HCO Representative. Click on and watch this Tutorial Video to review how to complete the required forms.

  1. Declaration of Identity (DOID) Form for Direct Identity Verification and Authorization

    Click on the DOID form link in the table below to download the form. Complete this form to designate your HCO Representative with DigiCert for identity proofing. Also read the important information about this form included at the end of this page.

  2. Communicate HCO Account Request Forms(s)

    Click on the HCO form link(s) in the table below corresponding to the HIway connection method(s) that will be used by your organization. Complete one form for each connection method. To learn more about these connection methods, read the "Connection Methods" tab. 
     

FORM CONNECTION METHOD BLANK FORM EXAMPLE
DOID  All Methods  Declaration of Identity (DOID) Form Click here
HCO  XRD/XPL Direct  Communicate Direct XDR HCO Account Request Click here
 Connect Device*  Communicate Connect Device HCO Account Request Click here
 Webmail  Communicate Webmail HCO Account Request Click here

* For HIway 1.0 this was called the LAND Appliance. For HIway 2.0, LAND Appliances were replaced with the new Connect Device.
 

Notorization of the DOID Form

A Notary must witness the signing of the DOID Form, and the Notary must complete and sign the acknowledgement listed on the form. Please note that identity proofing is a time sensitive process. DigiCert must speak with the Notary directly within 30 days of the notarized date or the form becomes invalid, in which case the process must be repeated.

Submit the DOID and HCO Forms

The DOID Form and HCO Form(s) must be submitted at the same time and must be completed and signed by the same person.

The forms must be submitted to the Mass HIway as soon as possible after notorization.

Participants have the following options to submit the DOID and HCO Forms:

  • Email to: MassHIwaySupport@state.ma.us 
    Warning: Send this email from a secure or regular email account.
                    It will not arrive if you send it from a Direct Message account.
    Warning: Standard email security measures apply when sending by regular email.
     

  • Regular mail to:
    Commonwealth of Massachusetts
    Executive Office of Health and Human Services

    Attention: Mass HIway
    100 Hancock Street, 9th Floor
    Quincy, MA 02171

What to expect after submitting the required forms

After the completed DOID Form and HCO Form(s) have been submitted to the Mass HIway:

  • The Mass HIway will review your DOID Form and your HCO Form(s). If there are any questions or issues with the forms, you will receive an email from MassHIwaySupport@state.ma.us. If there are no issues with the forms, the Mass HIway will immediately submit the forms to DigiCert via the secure support tracking system. The identity verification process by DigiCert can take up to 2 weeks to 30 days, depending on when DigiCert speaks with the Notary and informs the Mass HIway of its determination.
     

  • Once DigiCert informs the Mass HIway if the applicant has been approved or denied, the Mass HIway will contact the applicant with the determination and outline of the next steps. This notification will be sent from MassHIwaySupport@state.ma.us.
     

     What happens next:

  • If approved, the Mass HIway will work with your organization to schedule your technical connection timeline. We will do our best to schedule your connection at time that is convenient for your organization.
     

  • If not approved, you will receive a notification from MassHIwaySupport@state.ma.us to restart the process.

Important information about the DOID Form

  • Identity proofing is a time sensitive process. DigiCert must speak with the Notary directly within 30 days of the notarized date or the form is invalid.
     

  • Submit your completed DOID form immediately after the form is notarized so Mass HIway can review and submit to DigiCert as soon as possible.
     

  • Discuss the important information for the Notary on page 3 of the DOID Form with your selected Notary. The Notary must include a listed, verifiable telephone number, which DigiCert will use to contact the Notary to verify the HCO Administrator’s identity. DigiCert will call the Notary at that number from 801-701-9600, trying at least once a day within the 30 day window.
     

  • Don't submit copies of identity proofing documents to the Mass HIway or DigiCert. These are for review by the Notary only. Only high level information about your identity proofing documents will be included on page 2 of the DOID form submitted to the Mass HIway and DigiCert.
     

  • You have a choice of which identity proofing documents to show the Notary as a part of this process. See the list on page 3 of the DOID Form. Review the high level information about those documents to be submitted on page 2 when making your selection.
     

  • Only the minimum number of individuals at the Mass HIway will have access to completed DOID Forms for processing purposes. All of these individuals have had HIPAA training and are subject to HIPAA requirements in handling personally identifiable information.
     

  • The Mass HIway will not retain copies of the completed DOID Form. The submitted DOID Form will be stored in a secure tracking system, which will be used as the method for DigiCert to receive and review the Form to initiate the identity proofing process.

How to find a Notary

  • Most banks and many retail photocopy shops and parcel shipping stores have Notaries on staff. Call ahead to confirm availability and services.
     

  • Use this online search tool to find a Notary in your area.

Contact the Mass HIway

For more information, contact the Mass HIway at:

  1-855-MA-HIway (Options: 1 = Enrollment, 2 = Support, 3 = Information)

   For general inquiries:    masshiway@state.ma.us

   For technical support:   masshiwaysupport@state.ma.us

 

Mass HIway 2.0 Connection Methods for Direct Messaging

There are several options to connect to HIway 2.0, so that your organization can exchange health information and report public health data via the Mass HIway. Any of these methods will enable you to communicate with other providers via secure Direct Messaging. To learn about how Direct Messaging works, review the "Direct Messaging" tab.

Your HIway Account Manager can help you select the best HIway 2.0 connection method(s) for your organization.
 

 CONNECTION METHOD  DESCRIPTION
 Direct  Connect your EHR system directly to the HIway
 Connect Device  Connect your EHR via a secure physical device (previously known as LAND Appliance)
 HISP  Connect your existing HISP connection to the HIway
 Webmail

   
 Communicate via Mass HIway Webmail without direct access from your EHR

 Read the Mass HIway Webmail Quick Reference Guide and/or Webmail Training User Guide
    

 


 

Selecting a HIway 2.0 Connection Method

Determining which connection method is best for your organization will depend on the technical capabilities of your EHR system, the volume of data you intend to transmit, and the selected HIE Use Cases. The table below provides further information that can help in deciding the best option for your Mass HIway based HIE solution. To enlarge the table or download it as a PDF, click here.

To further enable your connection method selection, review the "Direct Messaging" tab to learn about how Direct Messaging works.
 


Resources


            Mass HIway Webmail Quick Reference Guide                                                         Webmail Training User Guide


Contact the Mass HIway

For more information, contact the Mass HIway at:

  1-855-MA-HIway (Options: 1 = Enrollment, 2 = Support, 3 = Information)

   For general inquiries:    masshiway@state.ma.us

   For technical support:   masshiwaysupport@state.ma.us

Introduction to Direct Messaging

Direct Messaging is a way to safely and securely exchange health information between healthcare entities. Providers can send and receive health information via Direct Messaging to obtain the medical history and coordinate the care of their patients. This provides a safer way of sharing patient information than faxing or mailing data to other providers.


 

To implement Direct Messaging to securely exchange health information with other healthcare entities, providers need to connect their EHR to a HISP (Health Information Services Provider). Alternatively, if a provider has no EHR, or the EHR can't be connected to a HISP, the provider can use standalone secure Webmail for Direct Messaging.

A HISP is an entity that manages the secure electronic exchange of health information across a network of healthcare organizations and professionals using the Direct standard for transport. HISPs provide the technical infrastructure and services needed to send and receive Direct Messages across their network. The Mass HIway is a HISP. 

The term HISP refers to the message transport functions needed to support the scaled deployment of the Direct standard across the healthcare market. These functions can be performed by the EHR vendor, by a healthcare organization or hospital, or by standalone entities specialized in HISP services.

To exchange Direct Messages via a HISP network, you need a Direct Address, which is provided by your HISP. As such, if you connect to the Mass HIway, you will receive a Direct Address(es). A Direct Address is like a secure email address that identifies you on the network. You can exchange Direct Messages with providers with a Direct Address and connected to the same HISP network. 

Using an analogy, you may have Microsoft Outlook on your computer, but you can only send and receive emails if you have an email address, and your computer is connected to an email network. Likewise, if your EHR can exchange Direct Messages, you can only send and receive messages if you have a Direct Address and are connected to a secure HISP network.

HISPs establish trust networks by defining policies for network participation. Each HISP performs two key activities to regulate and scale the exchange of Direct Messages across their network:

Issue Security Certificates: These are tied to a HISP anchor certificate established to enforce the participation policies.

Issue Direct Addresses: These are tied to the HISP anchor certificate as per conventions defined by the Direct standard. 

After you become a member, the HISP will provide the network services that connect your EHR to other EHRs using the Direct standard for communications. The services enable you to exchange Direct Messages to coordinate patient care with other providers.

HISP to HISP connections

HISPs can connect to other HISPs to expand their network. In this case, Direct Messages can not only be exchanged within their network, but also via the other HISP networks. The Direct Messages will transfer from one HISP to another as necessary to complete the information exchange. This expands the network of providers with whom you can exchange health information.


 

The Mass HIway is connected to many other HISPs, which allows HIway users to exchange messages with the members of these HISPs.

Vice versa, if you are a member of another HISP, you can access the HIway network, provided your HISP configures your system to enable access to the HIway. Your HISP will still provide you with your security certificate and Direct address, but you will be able to exchange messages across the HIway. As a member of the HISP you will pay their access fees, but the HIway fees will be waived.

The Mass HIway and other HISPs in Massachusetts

To engage in Direct Messaging, there are many HISPs operating in the Commonwealth to choose from. In practice, however, EHR vendors may dictate the HISPs available to their users, as long as the vendors don’t block transmission of electronic health data.

Whether you can connect to a particular HISP therefore largely depends on which HISPs your EHR vendor supports. Some EHR vendors may require providers to use a specific HISP, which may be their own, or a standalone HISP they integrated with their EHR. Other vendors allow providers to choose any HISP they prefer, and the vendor will integrate the HISP accordingly.

If a vendor allows you to choose a HISP, you can choose to connect to the Mass HIway. If a vendor requires you to use a designated HISP, you can connect to the HIway indirectly via this HISP. This requires that the HISP is connected to the HIway as explained above.

DirectTrust Accreditation

With the release of Mass HIway 2.0, the HIway became a member of the DirectTrust network. DirectTrust is a private non-profit organization that accredits HISPs on a voluntarily basis through its EHNAC DTAAP program. The EHNAC DTAAP accreditation process is unrelated to ONC's EHR certification process used in the Medicaid EHR Incentive and other Promoting Interoperability (PI) programs.

A significant advantage of the widespread DirectTrust network is that it connects many HISPs. By connecting to this network via the Mass HIway, it becomes easier for healthcare providers to find trading partners to exchange health information with. This in turn will help participants in meeting the HIE thresholds and targets of the Medicaid EHR Incentive and PI programs.

Direct Messaging FAQ

To review frequently asked questions and answers pertaining to Direct Messaging, click here.

Webinars

 

 

 

Mass HIway 101

Webinar February 2019

PDF

Recording (large screen)

 

 

 

Improving Care Coordination
by using Direct Messaging

Webinar October 2018

PDF 

Recording (large screen)

Contact the Mass HIway

For more information, contact the Mass HIway at:

  1-855-MA-HIway (Options: 1 = Enrollment, 2 = Support, 3 = Information)

   For general inquiries:    masshiway@state.ma.us

   For technical support:   masshiwaysupport@state.ma.us

Mass HIway Regulations

In February 2017, EOHHS, the Massachusetts Executive Office of Health & Human Services, promulgated 101 CMR 20.00: Health Information Exchange, also known as the Mass HIway Regulations. These regulations implement key components of Chapter 118I of the Massachusetts General Laws, which pertain to the Mass HIway.

The regulations codify the HIway Connection Requirement, which requires certain healthcare organizations to connect to and use the Mass HIway. These organizations must implement increasingly rigorous clinical use cases by sending/receiving HIway Direct messages over a four-year cycle. For a summary of the regulations click here.

The regulations also established a mechanism to allow patients to opt-in and opt-out of Mass HIway, and provide HIway participants the option to distribute a fact sheet for patients.

The HIway Connection Requirement

The regulations stipulate that the HIway Connection Requirement is phased in by type of organization, and currently applies to the following Provider Organizations:

  • Medium and Large Medical Ambulatory Practice
  • Community Health Center
  • Acute Care Hospital

The HIway Regulations align HIway Direct Messaging with other modes of transmission, e.g. fax or phone, and require these organizations to:

  • Transmit health information via HIway Direct Messaging;
     
  • Comply with federal and state privacy laws and implementation regulations;
     
  • Meet specific HIE Use Case requirements when using the Mass HIway; and
     
  • Attest that they comply with these regulations.

If the HIway Regulations apply to your Provider Organization, you will need to connect to the Mass HIway, and submit documentation to attest that your organization complies with the HIway Connection Requirement.

Timeline for Provider Organizations to connect

The table below shows the year by which Provider Organizations must connect to the Mass HIway. 
 

Provider Organization

First Year of Requirement

Acute Care Hospitals

2017

Large and Medium Medical Ambulatory Practices

2018

Large Community Health Centers

Small Community Health Centers

2019

 

Four Year Phase-In Period

How provider organizations must fulfill the HIway Connection Requirement is phased in over 4 years:

  1. The connection requirement gets progressively stricter in each year of implementation
  2. Organizations that don’t meet the requirement are subject to penalties starting in Year 4
  3. The 4 year phase-in period is based on when an organizations must be connected

Provider Organization

Year 1

Year 4

2019 Requirement

Acute Care Hospitals

2017

2020

Year 3 Requirements

Large and Medium Medical Ambulatory Practices

2018

2021

Year 2 Requirements

Large Community Health Centers

Small Community Health Centers

2019

2022

Year 1 Requirements


   Note: Provider types not yet specified in the regulations are anticipated to be required to connect at a future date.
               ○   Guidance to the affected providers will be provided with at least one year notice.

 

Progressive HIway Connection Requirements

The four year phase-in approach progressively encourages providers to use the Mass HIway for Provider-to-Provider Communications via bi-directional exchange of health information.
 

Year Requirements

HIE Use Case Requirements

2019

Year 1

   Send or receive HIway Direct Messages for at least one use case
       ○   Can be from any use case category* listed below

Year 2

   Send or receive HIway Direct Messages for at least one use case
       ○   Must be a Provider-to-Provider Communications use case

Year 3    Send HIway Direct Messages for at least one use case, and
   Receive HIway Direct Messages for at least one use case
       ○   Both must be Provider-to-Provider Communications use cases

Future

Year 4

   Meet Year 3 requirement, or be subject to penalties if the requirement isn’t met
       ○   Penalties go into effect in the applicable Year 4
            (e.g. Jan 2020 for Acute Care Hospitals)


    * The Use Case categories are explained in the next section.

     Note: There is an additional ENS Requirement that applies only to Acute Care Hospitals:

                 ○   Send Admission Discharge Transfer notifications (ADTs) to HIway within 12 months of ENS launch
 

HIE Use Case Requirements

The table below lists the HIE Use Case categories allowed to be implemented in the Year 1 to Year 4 Requirements. While all categories are allowed in Year 1, you need to implement a Provider-to-Provider Communications Use Case for Year 2 to 4. The use case examples listed in the table are for reference only, as other use cases may be suitable as well, provided these fit the category. 
 


The graphic below shows an example of a Provider-to-Provider Communications use case. You can use our HIE Toolkit to implement this use case or any other HIE Use Cases.

Frequently Asked Questions

Mass HIway Regulations FAQs provide Questions & Answers related to the Mass HIway Regulations, and the attestation process. To access the FAQs, click here.

Webinars

 

 


Mass HIway Connection

Requirement and Attestation

Webinar June 2019

PDF

Recording (large screen)

Resources

Contact the Mass HIway

For more information, contact the Mass HIway at:

  1-855-MA-HIway (Options: 1 = Enrollment, 2 = Support, 3 = Information)

   For general inquiries:    masshiway@state.ma.us

   For technical support:   masshiwaysupport@state.ma.us

Mass HIway Attestation

Provider Organizations that are required to meet the HIway Connection Requirement must submit an online Attestation Form each year. The table below shows what Attestation Form to use in 2019. You must submit this form by July 31, 2019.
 

Provider Organization

First Year of Requirement

Submit by July 31, 2019

Acute Care Hospitals

2017

Year 3 Attestation Form

Large and Medium Medical Ambulatory Practices

2018

Year 2 Attestation Form

Large Community Health Centers

Small Community Health Centers

2019

Year 1 Attestation Form

 


Online Attestation Requirements

The annual Attestation Forms collect two key areas of information:

1.    How the organization met its HIway Connection Requirement. Attestation questions include:
            o  The category of the use case? (Only on the Year 1 form)
                                Options: (1) Public Health Reporting, (2) Provider-to-Provider Communications, (3) Quality Reporting, (4) Payer Case Management
            o  Description of the use case
            o  Approximate # of HIway Direct Messages per month for the use case

2.   Whether the organization has an EHR, and if so, how it is connected to the HIway. Attestation questions include:
            o  Name and version of the EHR
            o  Whether the EHR is an ONC Certified Health IT Product
            o  How the organization connected to the HIway
                       Options: (1) EHR directly to HIway, (2) EHR via a HISP, or (3) via Mass HIway webmail

Attestation Forms

The online attestation must be completed in one sitting by July 31, 2019. The Online Attestation Forms is available on the HIway website. You can prepare for the attestation, by using the PDF version of the forms.

Suggested completion steps, as shown in the image below:

1.   To access the page with the attestation forms on the Mass HIway website directly, click here.
       (
If you are on the www.masshiway.net website, select "Resources" and "Participants Forms" to get to this page via the menu)

2.   Download the PDF version to prepare the answers

3.   When you are ready to submit online, visit the Mass HIway again here, to access the Online Attestation Forms.
 


 

If you don't meet the HIway Connection Requirement

If your organization cannot meet its 2019 HIway Connection Requirement, an authorized representative of the organization is required to complete an Online Exception Form. The PDF and Online versions of the Exception Form are available on the same HIway web page shown above. To visit the web page, click here. Use the PDF version of the Exception Form to plan and prepare your responses.

After we receive the form, the Mass HIway may contact your organization to discuss your organization’s plans to comply with its 2019 HIway connection requirement.

If an organization did not meet its Year 1 HIway connection requirement in 2018, it is still expected to meet the Year 2 requirement in 2019 and submit a Year 2 HIway Attestation Form by July 31, 2019. Likewise, if an organization did not meet its Year 2 requirement in 2018, the organization is still expected to meet its Year 3 requirement in 2019 and submit a Year 3 attestation form by July 31, 2019.

Frequently Asked Questions

Mass HIway Regulations FAQs provide Questions & Answers related to the Mass HIway Regulations, and the attestation process. To access the FAQs, click here.

Webinars

 

 

Mass HIway Connection

Requirement and Attestation

Webinar June 2019

PDF

Recording (large screen)

Summary of 2018 Attestations

The graphic below provides a summary overview of the Mass HIway attestations submitted in 2018.
 


 

Contact the Mass HIway

For more information, contact the Mass HIway at:

  1-855-MA-HIway (Options: 1 = Enrollment, 2 = Support, 3 = Information)

   For general inquiries:    masshiway@state.ma.us

   For technical support:   masshiwaysupport@state.ma.us

Mass HIway Patient Consent

The Mass HIway Regulations 101 CMR 20.00: Health Information Exchange became effective as of February 10, 2017. Section "20.07: Opt-in Opt-out Mechanism" of these regulations specifies the following HIway consent policy: 

(1) HIway Direct Messaging. Mass HIway users may transmit information via HIway direct messaging in compliance with
      applicable federal and state privacy laws and implementing regulations. Mass HIway users may implement local opt-in
      and/or opt-out process that applies to the use of HIway direct messaging by their organization, but are not required to do so.

(2) HIway-sponsored Services.

      (a) Opt-in. HIway participants must provide each patient and/or their legal representatives with written notice of
             how the organization uses HIway-sponsored services.
             1. Written notice shall be provided by at least one of the following methods:
                     a. inclusion in the HIway participant's privacy notice;
                     b. patient handout; or
                     c. letter, email, or other personal electronic communication to patients.
             2. Written notice must be available in languages as established by EOHHS and described in the Mass HIway Policies
                  and Procedures.
             3. The written notice must describe the manner and means that the patient can opt-out of HIway-sponsored services.

       (b) Opt-out. The Mass HIway or its designee administers a centralized opt out system. Patients and/or their authorized
             designees may notify the Mass HIway or its designee directly if they choose to opt-out. A HIway participant that has
             an established relationship with a patient must notify the Mass HIway that the patient has decided to opt-out and/or
             provide written instructions to its patients on how a patient or their authorized designees can notify the Mass HIway
             or its designee of the patient’s choice to opt-out. Such notifications shall be made in the form and format determined
             by the Mass HIway and detailed in the Mass HIway Policies and Procedures.

       (c) Local opt-in opt-out. In addition to the opt-in opt-out provisions described in 101 CMR 20.07(2)(a) and (b), HIway
             participants may choose to implement their own local opt-in and/or opt-out process that applies to the use of HIway-
             sponsored Services by their organization, but are not required to do so. If a HIway participant does implement a local
             process that applies to HIway-sponsored services, it must supplement the opt-in opt-out provisions described in
             101 CMR 20.07(2)(a) and (b), and shall not replace 101 CMR 20.07(2).

If you have questions, contact the Mass HIway at 1-855-MA-HIWAY or MassHIway@state.ma.us

Patient Fact Sheet

The Mass HIway provides a Patient Fact Sheet with key information for patients about the HIway. To download, click here.

The sheet shown below describes that:

  • The HIway does not function as a clinical data repository that holds electronic medical records for individuals
     
  • The Patients’ electronic health records are held by provider organizations and not the Mass HIway
     

Note: Distribution of this Fact Sheet to patients is not a requirement to use Mass HIway for Direct Messaging.
 


 

Contact the Mass HIway

For more information, contact the Mass HIway at:

  1-855-MA-HIway (Options: 1 = Enrollment, 2 = Support, 3 = Information)

   For general inquiries:    masshiway@state.ma.us

   For technical support:   masshiwaysupport@state.ma.us

Introduction
Enrollment
IdentityProofing
ConnectionMethods
DirectMessaging
Regulations
Attestation
PatientConsent
admin