Legal
TEFCA Individual Access Services
Hubble is an Individual Access Services (IAS) Provider under TEFCA. The full details of how Hubble handles your information are in the Privacy and Security Notice.
What TEFCA is
TEFCA (the Trusted Exchange Framework and Common Agreement) is the federal framework for nationwide health information exchange. Networks that meet the bar become QHINs (Qualified Health Information Networks). Connecting through one lets an organization exchange with the rest under a single common agreement, instead of a separate contract with every network.
TEFCA permits exchange only for a defined set of reasons, called exchange purposes. Most of them, such as treatment and payment, are about organizations sharing data with each other. One is built for the individual.
What Individual Access Services is
Individual Access Services (IAS) is the TEFCA exchange purpose that lets a person access, inspect, and obtain a copy of their own health information through the nationwide network. It is the network-scale expression of the HIPAA right of access. Because the request comes from a person rather than an institution, IAS requires identity proofing to NIST IAL2 and authentication to AAL2, along with transparency to the individual about how their data is used.
How Hubble uses IAS
Hubble uses IAS to request your records on your behalf, only when you ask it to. Before any records are retrieved:
- You verify your identity to IAL2 through a certified identity provider.
- You review the Privacy and Security Notice and give your express, documented consent.
- You decide who receives a copy of your records, per recipient, and you can revoke that consent at any time (see below).
Hubble then gathers your records from the systems you have been seen in and makes them available to you. Hubble only requests records through TEFCA. It does not share your health information with other TEFCA participants.
Learn more: What is Individual Access Services under TEFCA?
Request-Only IAS Provider
Request-Only IAS Provider: Hubble does not provide bidirectional services. You will have the ability to request access to your health information via TEFCA Exchange. You will not be able to use Hubble to share your health information with other participants in TEFCA.
How to revoke your consent
You can revoke your consent at any time, by any of these methods:
- In the app. Open the secure Hubble link you were sent and verify your identity. On the Connections tab, select Remove Access to revoke your consent and stop all sharing, or Disconnect to remove a single connected source.
- By email. Email privacy@hubble.ai with a subject line such as "Revoke Consent Request." In the body, include your First Name, Last Name, Birthdate, Gender, and Address. Clearly state that you are revoking your consent, and describe the scope of your request, including whether you are also requesting deletion of your data or a copy of your information. If we need more information to verify your identity or clarify your request, we will contact you using the email address the request was sent from.
- By phone. Call us toll-free at (888) 512-9028.
Revoking consent does not undo anything we already did in reliance on your consent before you revoked it. After you revoke consent, you will no longer be able to access Hubble's services.