CO APCD Data Warehouse Management
As allowed by the CO APCD enabling legislation, CIVHC contracts with third party CO APCD technology vendors, Human Services Research Institute (HSRI) and the independent research organization, NORC, at the University of Chicago, to securely collect, store, manage, and conduct limited analysis of claims information submitted by health insurance payers to the CO APCD.
All claims data submissions are received and processed on systems and equipment owned and operated by HSRI and NORC. CIVHC does not directly receive claims data from data submitters. However, once processed and encrypted to protect Personal Health Information (PHI), CIVHC receives limited access to data warehouse files to conduct internal analysis for public and custom reporting.
As the CO APCD technology vendors, HSRI and NORC are legally required to abide by all CIVHC policies and procedures established to maintain the privacy, security, confidentiality, integrity, and availability of the data contains within the CO APCD. These policies and procedures comply with all state, local, and Federal security and privacy laws including the Health Insurance Portability and Accountability Act ("HIPAA") and the Health Information Technology for Economic and Clinical Health ("HITECH") Act. CIVHC retains all rights to the information provided by the health insurance payers.