Office of Privacy & Data Security

Data Broker Services : Other Common Requests

For all other requests please send an e-mail to help@med.miami.edu with the Data Broker group (databroker@med.miami.edu) cc’ed.

Access to Epic Cubes for Hospital Billing/Professional Billing

Provide the name and e-mail of each individual requiring access as well as

• Specify cubes/environments for which is being requested

• Why the access is needed. This provides documentation of the role/function and need for the access.

• Have a supervisor or other individual in group leadership (if not the requester) send an e-mail approving the access. This “supervisor” not only authorizes the request but is also responsible for notifying UHealth IT if that individual no longer has a job-related need for access.

Case Logs for Provider / Department Credentialing

• Provide the reason for the request
• Please provide the filters/criteria for the request (i.e. provider name & NPI, CPT procedure codes, date of service range, provider location, etc.)
• What fields to include in the output file (i.e. provider location, CPT procedure codes, units, date of service, etc.)

Workbench Data Reviews

If data needs to be either stored or moved from a Secure Workbench (secure, restricted environment inclusive of data analytic tools, provided by CTSI Informatics):

• Please briefly describe the details of this project including the need for PHI or other sensitive data.

• If for research, provide the related eProst study number.

Have a project lead (or another administrator within the area) send an e-mail stating their approval of this project.

Provide a Variable Dictionary, spreadsheet, list, etc. of all variables included in the data file. If easier please provide the actual location (i.e., which secure workbench holds the data).

List the individuals who will be receiving the data as well the reason for their need for PHI or other sensitive data. Also include how the data should be transmitted to those individuals.

Data Transfers

If data needs to be regularly shared:

Please briefly describe the details of this project including the type of data (PHI/PII, other sensitive data)

• If the data to be transferred is to an outside party, provide all relevant agreements (i.e., business associate (BAA), clinical trial (CTA), data transfer (DTA), data use (DUA), master service (MSA), etc.) and documentation (i.e., scope of work, etc.)

If for research, provide the related eProst number.

If operational purposes, have a project lead (or another administrator within the area) send an e-mail stating their approval of this project.

Provide a Variable Dictionary, spreadsheet, list, etc. of all variables included in the data file. If easier please provide the actual location (i.e. which secure workbench the data are on).

List the individuals/organization who will be receiving the data as well the reason for their need for data. This may be explained in any associated contracts/agreements.

Provider the frequency and process to be used to transfer the data. Also include any applicable transfer end dates and retention periods.

Dashboard Publications

For dashboard / report (e.g., Power BI) publication or to share with other individuals:

Briefly describe the purpose of the dashboard. If PHI or other sensitive data is included, provide the reason for inclusion.

Have a project lead (or another administrator within the business unit) send an e-mail stating their approval of the dashboard and that it will be the responsibility of the business unit to notify IT when individuals no longer require access to the dashboard.

Provide a Variable Dictionary, spreadsheet, list, etc. of all variables included in the data dashboard. If easier please share the dashboard for review.

List the individuals who will be receiving access to the dashboard as well as the access type (i.e., view-only, ability to share, download and/or print,etc.).

Here are some guidelines to follow when publishing dashboards:

• Only share with authorized individuals

• Ensure that dashboard settings are set appropriately (i.e., end user cannot edit). Some common settings to be mindful of include printing, sharing, exporting abilities.

• Individuals who no longer need access to the dashboard should have their access disabled/removed. Inform UHealth IT (help@med.miami.edu) if individuals authorized, have left, transferred or otherwise have no further need of the dashboard.