Since there are different classifications of health facilities, an algorithm should be made to standardize the process.
The HIE policy should be consistent and transparent during deployment.
DOH shall develop a monitoring and evaluation mechanism and perform random visits and monitoring on the implementation of the PHIE program for check and balance purposes.
Each health facility shall have its respective policy on role-based access control.
Provisions of data like patient records shall be consistent with the guidelines of the hospital health information management manual issued by the DOH.
The health facility shall implement capacity building activities in the security aspect of PHIE.
Appointment of a Chief Privacy Officer shall be a requirement in the licensing of hospitals.
Compliance to required PHIE security measures shall be included as an item in the checklist for PhilHealth Accreditation or renewal of license to operate.
Information, education and communication materials on data privacy and security shall be provided to the patient.
A reporting policy on violations shall be made.