Provision of this data is governed by the privacy and security agreement which outlines Harvard Pilgrim's expectations and provider group responsibilities for safeguarding member data.
To manage user access in compliance with national and state regulations, Harvard Pilgrim has implemented a user access management policies and processes to ensure compliance with the privacy and security agreement.
Requesting Access to LCU Reporting
Requestors must complete the User Request Form to identify which LCU reporting tools they wish to access. The LCU Reporting tools are available on both HPHConnect (structured report outputs) and on the secure SFTP server (data extracts).
In addition, individual requestors must complete a User Agreement Form outlining the obligations of the user related to LCU reporting. This online form is presented to the new user upon initial logon.
Requests for user access (or termination of access) should be sent to Network Medical Management.
Upon receipt of the documentation in the Harvard Pilgrim Provider Analytics mailbox, the request will be triaged to the appropriate Harvard Pilgrim team. All communications related to user access should be directed to this mailbox so tracking and triage can occur in a timely way.
Data Access Liaison
A key component of user access management is the role within the provider organization who serves as a liaison with Harvard Pilgrim on reporting related issues, the Data Access Liaison (DAL) role. This includes oversight of requestors from the provider organization, as well as managing the annual user account revalidation process. Through these processes and roles, Harvard Pilgrim seeks to develop a robust user community of LCU Reporting.
The provider organization notifies Harvard Pilgrim of its designated Data Access Liaison through completion and submission of the Data Access Liaison Form.
Throughout the year, as staff may leave the provider organization, the Data Access Liaison should notify HPHC of any departing staff whose user access should be terminated. In addition, on an annual basis, HPHC will work with the Data Access Liaison on a User Revalidation Process to revalidate user accounts established for the provider organization, confirming both the individuals needing to retain access and the specific reporting tools to which they need access.
The User Guide to Account Revalidation for LCU Reporting describes this annual process.
If a user has not accessed their HPHConnect account for 120 days, the account will be locked and the user will need to re-establish the account. If the account has not been used for 180 days, the account will be terminated.