DT P&S accreditation ensures adherence to data processing standards and compliance with security infrastructure, integrity and trusted identity requirements.

Orion Health, a global, award-winning provider of health information technology, announced today it has achieved full accreditation with the DirectTrust Privacy & Security (DT P&S) for the HIE program from DirectTrust and the Electronic Healthcare Network Accreditation Commission (EHNAC). Direct Trusted Agent accreditation recognizes excellence in health data processing and transactions and ensures compliance with industry-established standards, HIPAA regulations and the Direct Project. The DT P&S accreditation program accredits against HIPAA Privacy and Security requirements for organizations also pursuing DirectTrust accreditation as a Health Information Service Provider (HISP), through EHNAC’s comprehensive third-party review.

Orion Health Communicate was evaluated in areas of privacy, security and confidentiality; technical performance; business practices and organizational resources as it relates to Directed exchange participants. In addition, EHNAC reviewed the organization’s process of managing and transferring protected health information and determined that the organization meets or exceeds all EHNAC criteria and industry standards.

“For health care professionals, patients, and others to take advantage of Directed exchange of health information, Health Information Service Providers must carry out the responsibility for managing the intricate parts of the deployment of digital certificates and of managing public and private keys, which are necessary for Directed exchange subscribers to be assured of consistent privacy, security, and trust,” said Lee Barrett, Executive Director & CEO, EHNAC.

“With the undeniable need in the healthcare marketplace for guidance and accountability on the secure and interoperable exchange of PHI, we congratulate Orion Health who has established and upheld a superior level of trust for its stakeholders by achieving the highest standards in privacy, security and confidentiality.”

“Orion Health believes that achieving and maintaining its EHNAC and DirectTrust certifications are critical to its success in the HIE marketplace. It shows that Orion Health is committed to delivering software that conforms to the highest standards of privacy and security while improving the ability for organizations to leverage Communicate to deliver value-based care.” said Brett Hamilton, Product Director, Communicate.


About DirectTrust

DirectTrust is a three-year old, non-profit, competitively neutral, self-regulatory entity created by and for participants in the Direct community, including Health Internet Service Providers (HISPs), Certificate Authorities (CAs), and Registration Authorities (RAs), doctors, patients and vendors, and supports both provider-to-provider as well as patient-to-provider Direct exchange. DirectTrust recently received a Cooperative Agreement Award from ONC as part of the Exemplar HIE Governance Program. DirectTrust serves as a forum and governance body for persons and entities engaged in Directed exchange of electronic health information as part of the Nationwide Health Information Network (NwHIN). DirectTrust’s Security and Trust Framework is the basis for the voluntary accreditation of service providers implementing Directed health information exchange. The goal of DirectTrust.org is to develop, promote and, as necessary, help enforce the rules and best practices necessary to maintain security and trust within the Direct community, consistent with the HITECH Act and the governance rules for the NwHIN established by ONC, DirectTrust.org is committed to fostering widespread public confidence in the Direct exchange of health information. To learn more, visit www.directtrust.org


The Electronic Healthcare Network Accreditation Commission (EHNAC) is a voluntary, self-governing standards development organization (SDO) established to develop standard criteria and accredit organizations that electronically exchange healthcare data. These entities include accountable care organizations, data registries, electronic health networks, EPCS vendors, e-prescribing solution providers, financial services firms, health information exchanges, health information service providers, management service organizations, medical billers, outsourced service providers, payers, practice management system vendors and third-party administrators.

The Commission is an authorized HITRUST CSF Assessor, making it the only organization with the ability to provide both EHNAC accreditation and HITRUST CSF certification. EHNAC was founded in 1993 and is a tax-exempt 501(c)(6) nonprofit organization. Guided by peer evaluation, the EHNAC accreditation process promotes quality service, innovation, cooperation and open competition in healthcare.

To learn more,

Visit www.ehnac.org, contact info@ehnac.org or follow us on Twitter, LinkedIn and YouTube.