Consumer Mobile Health Application Functional Framework

Description

This project will define security, privacy and data standards for secure mobile health applications (apps). The intent is to provide industry guidance and common methods to enable the development of mobile health smartphone apps targeted to consumers/citizens that use protected health information (PHI) and personally identifiable information (PII). These standards will not address the content of such apps, but will provide a framework for security, privacy and trusted integration of data generated from apps into Personal Health Record (PHR) and Electronic Health Record (EHR) systems as well as into other types of data repositories (e.g., personal data stores, population care systems). This project will reuse conformance criteria already available within the HL7 PHR-S and EHR-S Functional Models, augmenting with new conformance criteria specific to mobile platforms (e.g., use of geolocation services, accelerometers, cameras, microphones). In particular, standards will address the following areas: - Privacy policy, terms of use, and in-app disclaimers - User, device, and cross-system authentication - Authorization to content and features - Proxy designations - Use of location services, camera, accelerometers and other smartphone services - Security of data at rest (local and cloud) - Security of data in transit (wired and wireless) - Minimum data standards for device generated and device transmitted information - Record system reliability; record authenticity (it is what it represents to be) - Data provenance - Audit - Standards related to discontinuation of use of an app

Misc Notes
2026 September: Normative notification submitted 2026 March: TSC approved an STU Extension Request HL7 consumer Mobile Health Application Functional Framework (cMHAFF) Release 1, STU Release 2 2025 April: TSC approved STU Extension Request for HL7 consumer Mobile Health Application Functional Framework (cMHAFF) Release 1, STU Release 2 for 6 months 2025 Jan WGM: GDatta/MGraham: Targeting to ballot 2025 Sept. PMO: Since the project has been stagnant for years, MH WG should create a new PSS in Jira so as to provide updated information. Once the new PSS is created in Jira, it will be tied back to PID 1182, as that is what the ballot system connects to for CMHAFF STU. PID 1452 can be closed/archived as 1182 will be the PID tracking this specification going forward. Additionally, the STU (from PID 1182) ends in April 2025, so MH WG should request an extension prior to the Normative ballot. 2020 July: M. Grahame: preparing for STU2 ballot May 2021 2020 May: TSC approved STU Extension Request for HL7 Consumer Mobile Health Application Functional Framework (cMHAFF), Release 1 for 24 months. 2025 Jan: PMO emailed MH WG asking them to submit an STU extension request. 2023 March: TSC approved STU Publication Request for Consumer Mobile Health Application Functional Framework 2018 June: The TSC approved the STU Publication Request for HL7 Consumer Mobile Health Application Functional Framework (cMHAFF), Release 1 at TSC Tracker 17290 thru June 26, 2019 2016 October:D. Tao: Updated target dates