Sec. 300.2. Establishing the SHIN-NY

The New York State Department of Health shall:

(a) oversee the implementation and ongoing operation of the SHIN-NY;

(b) implement the infrastructure and services to support the private and secure exchange of health information among qualified entities and qualified entity participants;

(c) administer the statewide collaboration process and facilitate the development, regular review and update of SHIN-NY policy guidance;

(d) perform regular audits, either directly or through contract, of qualified entity functions and activities as necessary to ensure the quality, security and confidentiality of data in the SHIN-NY;

(e) provide technical services, either directly or through contract, to ensure the quality, security and confidentiality of data in the SHIN-NY;

(f) assess qualified entity participation in the SHIN-NY and, if necessary, suspend a qualified entity’s access to or use of the SHIN-NY, when it reasonably determines that the qualified entity has created, or is likely to create, an immediate threat of irreparable harm to the SHIN-NY, to any person accessing or using the SHIN-NY, or to any person whose information is accessed or transmitted through the SHIN-NY;

(g) publish reports on health care provider participation and usage, system performance, data quality, the qualified entity certification process, and SHIN-NY security;

(h) take such other actions as may be needed to promote development of the SHIN-NY.