The healthcare industry is gearing up for an innovation in data interoperability standards, with TEFCA (Trusted Exchange Framework and Common Agreement) at the helm to guide the shift toward nationwide data exchange. As part of TEFCA’s implementation of a trusted policy framework, secure and scalable data-sharing protocols are critical. FAST (FHIR at Scale Taskforce), in collaboration with The Sequoia Project and HL7, is leading the charge with an exclusive virtual Education Event related to FHIR Over TEFCA Security on January 13, 2025.
This complimentary event is designed to give healthcare organizations the insights they need to adopt and comply with the latest standards for secure data exchange, focusing on the FAST HL7 UDAP Security for Scalable Registration, Authentication, and Authorization (FAST Security IG) FHIR Implementation Guide (IG). The FAST Security IG will become mandatory within TEFCA by January 1, 2026, making this session an essential resource for those looking to prepare. Here, we’ll explore what the event covers, why it’s critical to attend, and how the upcoming Connectathon offers a hands-on opportunity to put your learning into practice.
Why This Event Matters: Understanding TEFCA’s Security Requirements
On July 1, 2024, the Recognized Coordinating Entity (RCE) unveiled the Facilitated FHIR Implementation Standard Operating Procedure (SOP), a comprehensive guide that sets the standard for secure FHIR (Fast Healthcare Interoperability Resources) implementation under the TEFCA framework. The SOP highlights the necessity for all TEFCA-aligned organizations to adopt the FAST Security IG by January 1, 2026. This IG, developed by FAST, addresses the core security requirements for registration, authentication, and authorization, ensuring that sensitive health data is protected at every step of the exchange process.
The RCE’s SOP outlines a two-phase implementation timeline, each with distinct security requirements:
- Pre-January 1, 2026: A Flexible Transition Period
- During this phase, organizations may adopt one of several security frameworks, including the FAST Security IG, SMART on FHIR, or another framework that meets the Qualified Health Information Network (QHIN) Technical Framework (QTF) requirements.
- Implementers MAY use FAST Security IG’s Section 3 Registration protocols and are required to resolve manual registration requests within five business days. This flexibility allows organizations time to familiarize themselves with the FAST Security IG while meeting minimum requirements.
- Post-January 1, 2026: Full FAST Security IG Compliance is required
- By this deadline, all FHIR Implementers within the TEFCA framework must fully comply with the security requirements outlined in the FAST Security IG’s Sections 2, 3, 4, and 5. This phase solidifies the IG’s adoption, ensuring that TEFCA’s security framework is consistent and standardized across all organizations.
This education event will delve deeply into the SOP’s specifics, helping attendees understand the requirements, prepare for each phase, and build a roadmap for successful FAST Security IG implementation.
What to Expect at the FHIR Over TEFCA Security Education Event
During this half-day session, you’ll hear directly from subject matter experts about the background, benefits, and implementation strategies for adopting the FAST Security IG. The agenda includes:
- In-depth SOP review: An overview of the RCE’s FHIR Implementation SOP, detailing the requirements for secure FHIR exchanges within TEFCA.
- FAST Security IG essentials: A close look at the key security requirements, including step-by-step guidance on implementing secure registration, authentication, and authorization.
- Practical timelines and milestones: How to prepare for the transition period, comply with interim options, and fully meet the January 2026 deadline.
The education event will equip attendees with the knowledge and resources needed to integrate FAST Security IG’s protocols into their operations, paving the way for secure FHIR interoperability within the TEFCA framework.
Take Your Learning to the Next Level: The FAST Security Track at the January Virtual Connectathon
As a companion to the January 13 education event, FAST is hosting a dedicated Security Track during the HL7 Connectathon later in January. This special track is a must for TEFCA implementers who want to test their FAST Security IG implementations in a collaborative, hands-on setting.
The Connectathon’s FAST Security Track offers:
- Real-world testing opportunities: Implementers can test their security protocols, ensure they meet TEFCA requirements, and validate their FAST Security IG setups alongside peers.
- Direct support from security experts: Subject Matter experts will be on hand to offer guidance, answer questions, and address any implementation challenges that arise.
- Networking and collaboration: Join other implementers navigating similar challenges, fostering an environment where ideas and solutions can be shared and tested in real-time.
Implementers interested in this track can reach out to FAST at fast@hl7.org to learn more.
Why Secure FHIR Implementation Matters
The FAST Security IG represents more than just a compliance checkbox; it’s a transformative security model that enables a secure, nationwide data-sharing ecosystem to enable FHIR to scale. With defined standards for client registration, authentication, and authorization, the FAST Security IG enables FHIR exchanges that protect patient privacy and data integrity while supporting seamless interoperability across health information networks.
Implementing the FAST Security IG not only aligns organizations with TEFCA’s requirements but also positions them at the forefront of secure health data exchange. By attending the education event and participating in the Connectathon Security Track, organizations can prepare for the January 2026 compliance deadline and be equipped to leverage FHIR securely within TEFCA’s structure.
Don’t miss this critical opportunity to get up to speed with TEFCA’s security requirements and ensure your organization is ready for the future of health data interoperability. Register for the FHIR Over TEFCA Security Education Event today and take the first step toward a secure, compliant future!
