If the request meets all necessary criteria, non-public data from the Colorado All Payer Claims Database (CO APCD) is available to “state agencies and private entities in Colorado engaged in efforts to improve health care.” These requests are categorized by CIVHC as non-public as the data will go to one person or organization, sometimes more, to answer specific research questions or solve particular problems. The information available in a non-public release of CO APCD always follows HIPAA and other federal privacy standards, and because of this, it comes with restrictions on how it is used and contractual obligations.
There are a number of steps in the process of releasing non-public CO APCD data, ranging from deciding the specifics of the ask to completing the Data Use Agreement and being cleared by the Data Release and Review Committee. The CO APCD is a powerful trove of information, and CIVHC, as administrator, works diligently to safeguard its contents from misuse by ensuring that every requestor completes a thorough application and destruction procedure with each non-public release of data.
Step 1 – Determining the Data
CIVHC releases CO APCD data in different ways, depending on the question(s) the requestor is hoping to answer and their sophistication with data analytics. Health Data Solution Consultants work with them to determine not only the form in which the data will be released but how much personal health information is necessary (if any) to complete the analysis. For stakeholders who would like CIVHC to deliver the data in business intelligence or data visualization tools like Tableau or Excel, Custom and Standard Reports are ideal. When partners are interested in performing their own analyses using tools of their choosing and have a strong data background, the CIVHC team steers them toward a Data Set. Depending on the level of PHI required, the requestor may receive a De-Identified, Limited, or Fully Identifiable Data Set, or one of our Standard Data Sets designed for non-profits, providers, payers and researchers.
Step 2 – The Application
Once the stakeholder and the Health Data Solutions Consultant have narrowed down the request to its final form, they complete an application that is submitted to the CIVHC team for review. CIVHC analysts look over the application to determine the feasibility of answering the research question or solving the stated problem based on what is requested and what is possible with CO APCD data. Estimates of the time and resources required to complete the request are created and are factored into the Data Release Fee documents which are reviewed with the stakeholder.
Step 3 – Final Documentation and the DRRC
If the request progresses through the application stage and the stakeholder signs the Data Release Fee and Data Use Agreement documentation, there are different routes it can take depending on whether it requires PHI. Requests for de-identified and standard CO APCD reports or datasets move on to finalizing mock ups and paperwork prior to moving into delivery with the CIVHC Analyst Team. If the request includes PHI, as in the case of a Limited or Fully-Identifiable data set, the application must be evaluated by Data Release and Review Committee (DRRC). The DRRC is a multi-stakeholder committee of volunteers who review every non-public request of CO APCD data with PHI to ensure that it meets all state criteria for release as well as all federal privacy regulations prior to moving into production.
Once a request has moved into production, new analyses and data sets typically take between 30 to 60 days for the analysis to be integrated into the workflow and completed, while standard reports and data sets can be delivered in a much shorter time frame.