The purpose of this guidance is to provide additional information on §§ 8703 and 8708 of the “HIE Rule”, Chapter 87 (District of Columbia Health Information Exchange) of Title 29 (Public Welfare) District of Columbia Municipal Regulations (DCMR).

This document provides guidelines for Registered Health Information Exchange (HIE) entities on:

• Meeting minimum technical requirements to ensure that only an authorized user accesses, uses, or discloses protected health information (PHI) from the HIE entity; and
• Developing a methodology to document user types and modes of accessing PHI at participating organizations.