In order to get started using the CRISP portal, an organization must sign a CRISP Participation Agreement for single sites or an agreement for organizations with multiple sites and must update its Notice of Privacy Practices documents. If your organization has already signed a participation agreement, you will be able to skip this step during the onboarding process.
The participation agreement is the uniform data sharing agreement signed by every organization that participates in CRISP. It ensures that everyone sharing data follows the same rules and regulations.
Updating your NPP ensures that your practice does its part to inform patients about how CRISP is being used to deliver and coordinate care and informs them of the right to opt out.
Organizations must have CRISP Opt-Out Forms on site to distribute to patients who ask for one. They must also maintain copies of the Patient Factsheets in registration areas.
New users without an agreement will be prompted to upload one during the onboarding process.
Requirements to Participate
An organization must:
- Submit LabCorp/Quest Data Release Form if it wishes to make its results available in CRISP.
- Send a patient panel (all patients seen within the last 18 months) using DIRECT secure email to email@example.com. This patient list will be used to audit your organization’s future activity to help ensure appropriate use. Here is a sample Patient Panel.
In order to send us your panel, please email firstname.lastname@example.org to request a DIRECT secure email address.
- CRISP Participant Privacy Awareness Best Practices
As a participant of CRISP, you have agreed to educate patients on their rights to share information through CRISP. Below is a review of the Patient and Privacy Awareness Best Practices that should be implemented prior to using CRISP services.
- Update your organization’s Notice of Privacy Practices (NPP) document and email email@example.com, fax to CRISP at 443-817-9587, or email your CRISP outreach representative prior to utilizing the HIE services.
- Provide updated NPP to all patients annually.
- Place Connected to CRISP poster in reception area.
- Place patient education materials in reception area.
- Make opt-out forms available to patients.
- Educate staff on CRISP services and patient request protocols for additional information Notify patients of their right to opt-out prior to reviewing their data in CRISP, or if you are following up on a recent hospitalization based on a ENS notification Create an internal policy to hold your organizations users responsible for misuse of data available in CRISP.
All participant intake points will be required to make materials available to patients about CRISP and their option to opt-out of CRISP services (these should be in plain view for patient but don’t need to be given to each patient individually). Opting out of CRISP will apply to all services except the Prescription Drug Monitoring Program and Public Health reporting in accordance with state law.
After signing up with CRISP, your organization will receive the following materials:
- Patient opt-out forms (notify CRISP if you need a language other than English).
- Patient Guide to HIE informational flyer (notify CRISP if you need a language other than English).
- Opt Out
When a patient opts out of participation in the HIE, doctors and nurses will not be able to search for their health information through the HIE to use during treatment.
Additionally, information is not available for research. Physicians and other treating providers will still be able to select the HIE as a way to receive patient lab results, radiology reports, and other data sent directly to them that they may have previously received by fax, mail, or other electronic communications. Additionally, in accordance with the law, Public Health reporting, such as the reporting of infectious diseases to public health officials, will still occur through the HIE after the patient decides to opt out. Controlled Dangerous Substances (CDS) information, as part of the Maryland Prescription Drug Monitoring Program, will continue to be available through the HIE to licensed providers.
User Admin Portal
We launched the CRISP User Admin Portal. Every 90 days, we require the verification of each user within our system and perform regular compliance checks to ensure the security of all patient information. You are required to review all listed users from your organization to determine whether or not they should maintain access to CRISP tools. The User Admin Portal is a tool designed to allow authorized CRISP users to approve or deny access to CRISP tools for current users on your staff and add new users.
Click here to access the portal.
Point of Contact
A health care organization agrees to certain obligations when it enters into an agreement to participate with CRISP. The nature of the relationship between a participating organization and CRISP are spelled out in the CRISP Participation Agreement and its policies and procedures, which are regularly updated on our website.
As a designated Point of Contact (POC) for CRISP, your organization has asked you to be responsible for some or all of its obligations. Examples of which include:
- Verifying the employment or contractual status of an individual CRISP user and confirming that the user is permitted access to CRISP under the organization’s own policies and procedures.
- Notifying CRISP when an individual user is no longer employed by the organization or the user’s role has changed such that access to CRISP should be terminated.
- Providing and/or receiving a notice to CRISP in the event that an individual user has been found by the organization to have violated the terms of the CRISP participation agreement or any applicable laws.
- Receiving formal written notice of any changes to CRISP’s policies and procedures.
*There may be additional points of contact who will be required to approve user access to different CRISP applications once a user is provided with initial access.
A delegator is ultimately responsible for and approves access to a patient’s clinical data for non-physicians/NPs. Confirms access to clinical data on their behalf upon user registration via e-mail. Must be a Nurse Practitioner or Physician (MD/DO).
To ensure that CRISP accurately reflects your active patient roster, do not forget to share your patient panel at least every 90 days. We strongly encourage you to upload directly on the portal with the Self-Service Panel Loader or you can send it through Direct, SFTP file, ADT/SIU feed to CRISP. Please contact our outreach team at firstname.lastname@example.org if you have any question about this process. Unfortunately, failure to submit timely panels may result in termination of user access to CRISP services.