security considerations mentioning access restrictions based on content

[JohnMoehrke]

Note that some measureReports may be against sensitive subjects. For example where a measureReport is specific to regions, these reports might not be available outside the catchment area for that location (e.g. a state Public Health authority would have read access to all regions within that state, but might not have access to any region outside their state).

[szitello]

This crisis has not only created opportunities for technology solutions but also shown us the socio-political difficulties that expansive technologies bring. And so that becomes a technical issue to solve. Some form of interest/proximity areas may seem to be useful. Surely NJ CT and PA all have strong interests in what is happening in NY. Conversing, the governors of some states don't even want their own residents know their numbers. Facilitating such behavior seems wrong at some level, but it cuts both ways. So what is the granularity, does each Population have its own sensitivity, should it be at Measure definition level. Do we have Public consumers and Private consumers. Thats feels like a closed system, and runs counter to what we have already seen in the market and sort of takes the public out of Public Health, already facing down public scrutiny.

[keithboone]

Address the issue of reidentifiable data sets in measure development process. Partly addressed in defining your measure definition, but also in definition of reporting region.

[JohnMoehrke]

I removed my assignment as I am not sure if this is still an issue, and a not sure how to determine that.