A new milestone for the National eHealth ID (INS)!
Innovation
10/06/2021
A new order has just been published in the Journal Officiel of 08/06/2021 in order to approve the amendments to the standard relating to the "French National eHealth ID" (INS), initially approved by a previous order of 24 December 2019.
It is a major step in accelerating the deployment of the INS.
These guidelines define the methods for implementing the obligation to list health data with the INS as provided for in Article R. 1111-8-1 of the Public Health Code. This obligation for professionals, facilities, services and organisations to list the health data they process with the INS took effect on 1 January 2021.
The deployment of the listing operation has been accompanied since 2019 by the Ministry of Health, with the support of the Agence du Numérique en Santé, on the one hand, and by the National Health Insurance Fund, with the support of GIE Sesam Vitale, on the other.
In order to take into account the needs of the field, as identified by several pilot sites, it was necessary to make adjustments to the first version of the standard.
This decree therefore makes three structural documents enforceable:
- The INS v2 standard, which includes the main amendment that allows facilities and services that wish to use an alternative method to the nominative professional card in order to log in to call the "INS" teleservice to do so, using a "server" type software certificate
- Two appendices to this standard
- Two appendices to this standard
- The national reference document pertaining to good INS security practices aimed at health and social care professionals and establishments. This standard was developed in collaboration with players in the field who specialise in identity security and was put out for public consultation. The RNIV is currently composed of 5 components, which are adapted to take into account the specific features of each relevant player in the field:
- RNIV 0 - Compendium of key points
- RNIV 1 - Principles of user identification common to all health care providers
- RNIV 2 - Implementation of identity security in health care facilities
- RNIV 3 - Implementation of identity security in non-hospital settings
- RNIV 4 - Implementation of identity security by providers in private practice
- The Implementation Guide for INS identity in software, intended for software publishers whose tools are made for professionals and facilities involved in health or social care. This guide, which was developed in collaboration with the ANS, is similar to the detailed functional specifications of the methods of calling the INS teleservice and the methods of listing health data with the INS. It aims to homogenise and secure the implementation of data listing nationwide by defining common management rules and recommendations.
These reference documents concern the entire health and social care ecosystem. In particular, publishers must abide by them, especially in the context of Ségur certification.