A CMMI® Maturity Level 3 Company
GSA Certified HSPD-12 Systems Integrator

Home > Practice Areas > Health IT > Personal Health Records

Personal Health Records

QSSI is the prime contractor for the Center's for Medicare and Medicaid Services (CMS) PHR pilot project, My Personal Health Record, South Carolina (MyPHRSC) that provides a secure, web-based electronic Personal Health Record (PHR) to fee-for-service (FFS) Medicare beneficiaries in South Carolina. The goal of the Medicare PHR Pilot project is to provide FFS beneficiaries with free access to a commercial, off-the-shelf (COTS) electronic Personal Health Record (PHR) and develop strategies to encourage uptake and utilization of the PHR.   The project, launched in April, 2008, provides access to a safe and secure electronic Personal Health Record for approximately 600,000 eligible Medicare recipients. In September 2008, CMS and DoD signed an interagency agreement to expand the scope of MyPHRSC to include DoD TRICARE for Life data. Under this expansion, an eligible beneficiary may authorize the DoD to provide TRICARE for Life data from the DoD systems directly to their existing MyPHRSC record. All Personal Health Information (PHI) complies with HHS, CMS, DoD and FISMA guidelines.


MyPHRSC is built using several middleware components and is based on the CMS 3-tier technical reference architecture. A number of software and hardware components have been installed and integrated together with appropriate security controls in place to ensure the privacy and security of PHI that is made available to registered beneficiaries. QSSI is responsible for the operational support of the PHR and regularly coordinates with the data center contractor to ensure high availability of the system. This PHR project requires complex inter-application interaction across multiple contractors and system boundaries and QSSI works closely with its subcontractors to securely extract claims data for beneficiaries. QSSI has developed a security architecture design to ensure that all PHI is protected from unauthorized access, disclosure, duplication, modification, diversion, destruction, loss, misuse, or theft by employing risk-based and business-driven security safeguards, with implementation achieved through a multi-layered security structure. Continuity of operations (COOP) is critical to this program and is achieved by using a data center with multiple levels of redundancy for hardware, software and trained personnel.

Additionally, QSSI is responsible for the development and implementation of a highly customized education and outreach program, including a staffed help desk to assist registerd users via a toll free number and email. The outreach component, incorporates targeted messaging, expert technical support, online, radio, print media and local advertising, and planning of and participation in workshops, presentations, and related events. QSSI has conducted or participated in over 140 events in South Carolina and as a result of QSSI's efforts, there are over 4,500 registered users of the PHR. For more information, go to www.myphrsc.com.