Skip to content
Search to learn about InterSystems products and solutions, career opportunities, and more.

Advisory: Issue with Consent Processing in the Operational Data Store

September 1, 2020 – Advisory: Issue with Consent Processing in the Operational Data Store

InterSystems has corrected an issue that occurs with consent processing in the Operational Data Store (ODS).

This problem exists for Customers who use the Operational Data Store (ODS) in one of the following versions:

  • HealthShare Information Exchange 2018.1.x
  • HealthShare Unified Care Record 2019.1.x
  • HealthShare Unified Care Record 2019.2.x
  • HealthShare Unified Care Record 2020.1.x

When the Operational Data Store receives a request for a patient's data from an Access Gateway, it asynchronously fetches and processes the data. Consent is evaluated asynchronously for each SourceMRN, which is a combination of Facility, Assigning Authority, and MRN.

Previously, the consent evaluation for the first SourceMRN was applied to each of the subsequently evaluated SourceMRNs. This could cause consent to be applied incorrectly. This issue has been identified as a patient privacy concern as it could result in inappropriate access to patient data by an authorized HealthShare user. This issue does not cause an increased risk of disclosure outside of HealthShare.

InterSystems recommends that customers who use the ODS apply the fix for this defect. The fix ensures that the consent evaluation for each SourceMRN is processed independently.

The correction for this defect is identified as HSIEC-3224 and will be included in all future product releases. It is also available via Ad hoc change file (patch) or full kit distribution from the Worldwide Response Center (WRC).

If you have any questions regarding this advisory, please contact the WRC.

RELATED TOPICS

Sign Up Today

Receive notifications on support alerts, critical issues,
fixes, and product releases.
*Required Fields
Highlighted fields are required
*Required Fields
Highlighted fields are required
By submitting this form, you give consent to receive notifications concerning support alerts, critical issues, important updates, fixes, and product releases via email. In addition, you consent to your business contact information being entered into our CRM solution that is hosted in the United States, but maintained consistent with applicable data protection laws.
**By clicking here, you give consent to be contacted for news, updates and other marketing purposes related to existing and future InterSystems products, offerings, and events.