Getting Your Data to the Right Place at the Right Time

CRISP gives your healthcare providers a view into your medical history, thus giving you a more efficient, safer, and quicker patient experience.

What is CRISP?

CRISP is the designated Health Information Exchange (HIE) in Maryland. An HIE is a way of instantly sharing health information among doctors’ offices, hospitals, labs, radiology centers, and other healthcare organizations. CRISP allows providers and organizations coordinating your care to view your medical history. For example, providers can review recent lab results or see information about your recent hospital encounters through CRISP tools. CRISP sharing information allows organizations to provide safer, more timely, and efficient patient-centered care. Security of all your health information is our top priority at CRISP.

Our Mission

How does it work?

How is my data kept safe?

What is the value of a Health Information Exchange (HIE)?

What are the risks of a Health Information Exchange?

Your Health Info

What Kinds of Information Does CRISP Have About Me?

Healthcare providers will share information about you through CRISP that they believe is vital knowledge for your other healthcare providers. CRISP may have access to Health Records from your doctors, hospitals, and pharmacies that you have visited. Providers may share your test results, radiology images, notes, or other information about your care. They may also share a summary containing critical health information.

CRISP connects to all 48 hospitals in Maryland and shares hospital information such as discharge paperwork and labs with your other providers. Certain sensitive information, such as addiction treatment details, can only be shared with your written consent.

If your healthcare provider shares information with or views information in CRISP, they must inform you through their Notice of Privacy Practices; a document you receive upon appointment check-ins.

How is My Data Used?

CRISP follows all federal and state laws and will only share your data for the following purposes: healthcare treatment, care coordination, quality improvement, public health, and research. CRISP does not share any of your information for payment or marketing purposes.

CRISP only allows providers to use healthcare information the CRISP Clinical Advisory Committee believes will help improve healthcare. The approved purposes for using data are listed below. Future uses of your information approved by the Clinical Advisory Board will be added to the list below.

How does CRISP protect my sensitive health information?

CRISP follows all state and federal privacy laws to keep your healthcare information safe. Providers using CRISP promise to protect your data and only share it with people who are allowed to see it. Everyone who accesses your data must follow these privacy laws, including HIPAA, the main law that controls how health information is shared. You can learn more about HIPAA on the CDC’s website. 

Keeping your data secure is one of CRISP’s top priorities. We use advanced tools to protect your information, like regular system checks, security tests, and monitoring to ensure everything stays safe. We also work with a group of experts and patients who help guide how we handle privacy and security.

CRISP is regularly reviewed and certified to meet the highest security standards so your data stays private and is only used to help improve your care.

You read more on how CRISP Protects your data in this FAQ document. 

Health Information Resources

Treatment

Care Coordination

Public Health

Quality Improvement

Research

Hospital Reports

Your Rights

What Health Information Rights Do I Have?

State and federal laws give you specific rights about your health data and whether it is shared through CRISP. You have the right to:

  • Request a list of people who have viewed your healthcare information. To make the request, use the online form or download the PDF.
  • Opt-out of CRISP. To make the request, use the online form.
  • Be notified if your information has been viewed by an unauthorized person.

Can I Opt-Out of CRISP?

If you do NOT want CRISP to share your health information, you can opt-out of CRISP at any time. If you opt-out, doctors and nurses will not be able to search for your Health Records through the HIE, and your information will not be available in the event of an emergency. Your records will not be used for research or quality improvement. Any information a doctor may have seen in CRISP and entered into your medical record before you opted out will stay in your medical record with that doctor but will not be shared through CRISP. You can also choose to opt-out of having your data used for research only. If you choose the “Research Only” opt-out option, your data will still be shared through the HIE for uses related to your clinical care, but it will not be available to researchers for approved clinical studies as part of the CRISP Research Initiative.

Your doctors will still have the option to select CRISP to get your data sent directly to them from labs. Also, Maryland law does not allow you to opt-out of public health reporting, such as reporting specific diseases to public health officials. CRISP is required to make these reports even if you have opted out.

The Maryland Prescription Drug Monitoring Program (PDMP) is also required by law, so information about your prescriptions will still be shared on the CRISP HIE network even if you have opted out.

How Do I Opt-Out?

Opting out of the CRISP HIE network is easy. You can do it three ways:

Can I access my health data?

CRISP has partnered with Carequality to enable access to your health information from your different providers while giving you a choice in personal health applications (PHA) to use once your identity is confirmed.

CRISP patient records from participation health care organizations can be accessed by an Personal Health Application of your choosing that is connected to Carequality.

Carequality—a national healthcare data exchange network—recently developed a process to enable patients, using a validated mobile or web-based PHA connected to Carequality, to access any of their own health data available on the exchange, including data in CRISP. By partnering with Carequality for patient access, patients can use apps or services of their choice that are connected to Carequality to get their health records from providers that work with CRISP as well as the entire Carequality National Network.

Using a Personal Health Application (PHA)

This approach enables you to access your health data from all your providers while giving you a choice in PHAs. To check if a PHA can connect to your health information in CRISP, visit Carequality.

Personal Health Application Vendor Example: Selfiie

Please visit: Frequently Asked Questions on Selfiie’s website and navigate to “How Do I Sign Up.”
To get started: Go to app.selfiie.com, click “Sign Up,” and follow the steps. To search for your records, you’ll need to verify your identity. You will need a cellphone with a camera and the ability to be verified through CLEAR so the patient will also need a valid gov’t issued ID driver’s license, passport, U.S. Visa etc.

*** CRISP does not endorse any specific patient health data access vendor. Selfiie is provided as an example of a patient facing application with identity validation that could be used to access your consolidated health data through Carequality.

Why We Chose This Solution

CRISP relies on Carequality as the access point for personal health applications (PHAs) because the network sets consistent rules that all PHAs must follow to exchange data. As a result, CRISP only allows an application to access your information if the application has agreed to follow Carequality’s requirements, including requirements around identity verification. Looking for help reviewing apps that connect you to your health information? The CARIN Alliance works to ensure healthcare consumers and their authorized caregivers can securely access health data digitally. CARIN has created a trust framework and code of conduct for PHAs. You can find a list of participating PHA companies and details about the code of conduct on the CARIN Alliance website.

Click here to download this information.

Creating and Sharing Your Advance Directive

Regardless of health status, everyone over the age of 18 is encouraged to think about and document their values and treatment preferences to guide future medical decisions about their care. This includes appointing a health care agent. Thinking about the types of treatment you would or wouldn’t like to receive and potential outcomes is important before a medical crisis occurs. Start the conversation with people you trust. Document your preferences in an advance directive, and then talk to your health care provider about securely storing a copy in their electronic health record system. You can also consider creating and storing your advance directive in an online service like MyDirectives.com.

Pursuant to Maryland regulations (COMAR § 10.25.19), the Maryland Health Care Commission maintains rigorous criteria, including privacy and security standards, for recognizing advance directive services that are authorized to connect to CRISP, the Maryland-designated Health Information Exchange.  Currently, the following services have been recognized by the Maryland Health Care Commission and vetted through its criteria (COMAR 10.25.19).

By clicking on the above link, you are being routed to a state-recognized electronic advanced directive service that may share your advance directive with the state-designated Health Information Exchange.

More information about how to get started with your advance directive, including sample forms, is available on the Maryland Attorney General’s website.

Frequently Asked Questions

Can I control who sees my information in CRISP?

If I have opt-ed out, can I opt back into CRISP?

Does CRISP share my health information with employers?

Can my information be seen in an emergency?

How will my information be shared in a statewide emergency?

Is my information shared with doctors outside of Maryland?

Does CRISP share information about my addiction treatment?

How do I know if my doctor participates with CRISP?

How far back will my online records go?

How is my health information protected from unauthorized users?

What do I do if I think an unauthorized person viewed my records?

Can I see the information CRISP has about me?

What can I do if there is a mistake in the information CRISP has about me?

Do health insurance companies have access to my data?

Do my providers know if I have opted-out?

Can a person under the age of 18 opt-out of CRISP?