Getting Your Data to the Right Place at the Right Time
CRISP gives your healthcare providers a view into your medical history, thus giving you a more efficient, safer, and quicker patient experience.
CRISP gives your healthcare providers a view into your medical history, thus giving you a more efficient, safer, and quicker patient experience.
CRISP is Maryland’s Health Information Exchange (HIE). A Health Information Exchange is a secure way for healthcare providers to share health information when caring for you. Through CRISP, doctors, hospitals, labs, and other healthcare organizations involved in your care can see important health information, such as recent lab results or hospital visits. This helps your care team make informed decisions and provide safer, faster care. CRISP also works with Electronic Medical Record Systems in Maryland and other state Health Information Exchanges through CRISP Shared Services (CSS). In addition, CRISP participates in National Health Information Networks, which allow health information to be shared securely with healthcare providers outside of Maryland when appropriate. Keeping your health information private and secure is very important to CRISP. All information shared through CRISP, CSS, and National Networks follows strict state and federal privacy and security laws.


Healthcare providers will share information about you through CRISP that they believe is vital knowledge for your other healthcare providers. CRISP may have access to Health Records from your doctors, hospitals, and pharmacies that you have visited. Providers may share your test results, radiology images, notes, or other information about your care. They may also share a summary containing critical health information.
CRISP connects to all 48 hospitals in Maryland and shares hospital information such as discharge paperwork and labs with your other providers. Certain sensitive information, such as addiction treatment details, can only be shared with your written consent.
If your healthcare provider shares information with or views information in CRISP, they must inform you through their Notice of Privacy Practices; a document you receive upon appointment check-ins.


CRISP follows all federal and state laws and only allows your health information to be used for specific purposes, including healthcare treatment, care coordination, quality improvement, public health, and research. CRISP does not allow your information to be used for payment or marketing purposes. These same rules apply when information is shared through CRISP Shared Services (CSS) or National Health Information Networks. Your information may only be used for the approved purposes listed above.
CRISP only allows healthcare providers to use information that the CRISP Clinical Advisory Committee has approved as helpful for improving care. If new uses of health information are approved by the CRISP Clinical Advisory Committee in the future, they will be added to this list.
CRISP follows all state and federal privacy laws to keep your healthcare information safe. Providers using CRISP promise to protect your data and only share it with people who are allowed to see it. Everyone who accesses your data must follow these privacy laws, including HIPAA, the main law that controls how health information is shared. You can learn more about HIPAA on the CDC’s website.
These same privacy and security rules apply when information is shared through CRISP Shared Services (CSS) or National Health Information Networks.
Keeping your data secure is one of CRISP’s top priorities. We use advanced tools to protect your information, like regular system checks, security tests, and monitoring to ensure everything stays safe. We also work with a group of experts and patients who help guide how we handle privacy and security.
CRISP is regularly reviewed and certified to meet the highest security standards so your data stays private and is only used to help improve your care.
You can read more about how CRISP protects your data in this FAQ document.

State and federal laws give you specific rights related to your health information and how it is shared through CRISP, CRISP Shared Services (CSS), and National Health Information Networks. You have the right to:


You may choose to opt-out of health information sharing at any time. If you opt out, your health information will not be shared through CRISP, other Maryland Health Information Exchanges, HIEs that partner with CRISP Shared Services (CSS), or National Health Information Networks.
If you opt out, doctors, nurses, and other healthcare providers will not be able to search for your health information through these systems. Your information will also not be available through the HIE in an emergency.
Your health information will not be used for research or quality improvement purposes if you opt out.
Any information a provider viewed through the HIE before you opted out and added to your medical record will remain in that provider’s record. However, your information will not be shared again through CRISP, CSS, or National Networks after you opt out. You may also choose a Research-Only Opt-Out. If you select this option, your information may still be shared for treatment and care coordination, but it will not be used by researchers for approved studies through the CRISP Research Initiative.
Even if you opt out, your doctors may still receive lab results directly from laboratories outside of the HIE, if they have a separate connection.
Maryland law does not allow patients to opt out of required public health reporting. CRISP must still report certain information—such as specific diseases—to public health officials, even if you opt out.
Maryland Prescription Drug Monitoring Program (PDMP) is also required by law. Information about controlled substance prescriptions will still be shared through the PDMP, even if you opt out of other HIE sharing.
Opting out of health information sharing is easy. One opt-out applies to CRISP, other Maryland Health Information Exchanges, HIEs that partner with CRISP Shared Services (CSS), and National Health Information Networks. You can do it three ways:


CRISP has partnered with Carequality to enable access to your health information from your different providers while giving you a choice in personal health applications (PHA) to use once your identity is confirmed.
CRISP patient records from participation health care organizations can be accessed by an Personal Health Application of your choosing that is connected to Carequality.
Carequality—a national healthcare data exchange network—recently developed a process to enable patients, using a validated mobile or web-based PHA connected to Carequality, to access any of their own health data available on the exchange, including data in CRISP. By partnering with Carequality for patient access, patients can use apps or services of their choice that are connected to Carequality to get their health records from providers that work with CRISP as well as the entire Carequality National Network.
Using a Personal Health Application (PHA)
This approach enables you to access your health data from all your providers while giving you a choice in PHAs. To check if a PHA can connect to your health information in CRISP, visit Carequality.
Personal Health Application Vendor Example: Selfiie
Please visit: Frequently Asked Questions on Selfiie’s website and navigate to “How Do I Sign Up.”
To get started: Go to app.selfiie.com, click “Sign Up,” and follow the steps. To search for your records, you’ll need to verify your identity. You will need a cellphone with a camera and the ability to be verified through CLEAR so the patient will also need a valid gov’t issued ID driver’s license, passport, U.S. Visa etc.
*** CRISP does not endorse any specific patient health data access vendor. Selfiie is provided as an example of a patient facing application with identity validation that could be used to access your consolidated health data through Carequality.
Why We Chose This Solution
CRISP relies on Carequality as the access point for personal health applications (PHAs) because the network sets consistent rules that all PHAs must follow to exchange data. As a result, CRISP only allows an application to access your information if the application has agreed to follow Carequality’s requirements, including requirements around identity verification. Looking for help reviewing apps that connect you to your health information? The CARIN Alliance works to ensure healthcare consumers and their authorized caregivers can securely access health data digitally. CARIN has created a trust framework and code of conduct for PHAs. You can find a list of participating PHA companies and details about the code of conduct on the CARIN Alliance website.
Regardless of health status, everyone over the age of 18 is encouraged to think about and document their values and treatment preferences to guide future medical decisions about their care. This includes appointing a health care agent. Thinking about the types of treatment you would or wouldn’t like to receive and potential outcomes is important before a medical crisis occurs. Start the conversation with people you trust. Document your preferences in an advance directive, and then talk to your health care provider about securely storing a copy in their electronic health record system. You can also consider creating and storing your advance directive in an online service like MyDirectives.com.
Pursuant to Maryland regulations (COMAR § 10.25.19), the Maryland Health Care Commission maintains rigorous criteria, including privacy and security standards, for recognizing advance directive services that are authorized to connect to CRISP, the Maryland-designated Health Information Exchange. Currently, the following services have been recognized by the Maryland Health Care Commission and vetted through its criteria (COMAR 10.25.19).
By clicking on the above link, you are being routed to a state-recognized electronic advanced directive service that may share your advance directive with the state-designated Health Information Exchange.
More information about how to get started with your advance directive, including sample forms, is available on the Maryland Attorney General’s website.
