Da Vinci - Member Attribution (ATR) List
1.0.0 - STU 1 Publication

This page is part of the Risk Based Contracts Member Attribution List FHIR IG (v1.0.0: STU 1) based on FHIR R4. This is the current published version in its permanent home (it will always be available at this URL). For a full list of available versions, see the Directory of published versions

Detailed Specification

This section of the implementation guide defines the specific conformance requirements for systems wishing to conform to this Member Attribution List implementation guide. The bulk of it focuses on the implementation of the Bulk Data IG to meet attribution list use-cases. It also describes the use of SMART on FHIR Backend Services Authorization and provides guidance on privacy, security and other implementation requirements.

Context

Pre-reading

Before reading this formal specification, implementers should first familiarize themselves with two other key portions of the specification:

  • The Use Cases & Overview page provides context for what this formal specification is trying to accomplish and will give a sense of both the business context and general process flow enabled by the formal specification below.

  • The Technical Background page provides information about the underlying specifications and indicates what portions of them should be read and understood to have necessary foundation to understand the constraints and usage guidance described here.

Conventions

This implementation guide uses specific terminology to flag statements that have relevance for the evaluation of conformance with the guide:

  • SHALL indicates requirements that must be met to be conformant with the specification.

  • SHOULD indicates behaviors that are strongly recommended (and which may result in interoperability issues or sub-optimal behavior if not adhered to), but which do not, for this version of the specification, affect the determination of specification conformance.

  • MAY describes optional behaviors that are free to consider but where the is no recommendation for or against adoption.

Systems

This implementation guide sets expectations for two types of systems:

  • Producer systems are typically Payer systems but could theoretically be any system responsible for producing a Member Attribution List. These systems typically act as servers.

  • Consumer systems are typically Provider systems that act on behalf of provider organizations who retrieve the attribution list from Producer. These systems typically act as clients.

The requirements and expectations described here are not intended to be exhaustive. Producers and Consumers could potentially support additional resources and extensions, etc. The purpose of this implementation guide is to establish a baseline of expected behavior and data elements that communication partners can rely on and then build from. Future versions of this specification will evolve based on implementer feedback.

Claiming Conformance

Producers and Consumers asserting conformance to this implementation guide have to implement the requirements outlined in Producer Capability Statement and Consumer Capability Statement respectively. The following definition of MUST SUPPORT is to be used in the implementation of the requirements.

MUST SUPPORT Definition
  • Producers SHALL be capable of populating all data elements as specified by the profiles and are returned using the specified APIs in the capability statement.
  • Consumers SHALL be capable of processing resource instances containing the MUST SUPPPORT data elements without generating an error or causing the application to fail. In other words Consumers SHOULD be capable of displaying the data elements for human use or storing it for other purposes.
  • In situations where information on a particular data element is not present and the reason for absence is unknown, Producers SHALL NOT include the data elements in the resource instance returned from executing the API requests.
  • When accessing Member Attribution Lists, Consumers SHALL interpret missing data elements within resource instances as data not present in the Producer’s system.

Profiles

This specification makes significant use of FHIR profiles, search parameter definitions and terminology artifacts to describe the content to be shared as part of Member Attribution List interactions. The implementation guide is based on FHIR R4 and profiles are listed for each interaction.

The full set of profiles defined in this implementation guide can be found by following the links on the FHIR Artifacts page.

US Core

This implementation guide also leverages the US Core set of profiles defined by HL7 for sharing non-veterinary EMR individual health data in the U.S. Where US Core profiles exist, this Guide either leverages them directly or uses them as a base for any additional constraints needed to support the member attribution list use cases. If no constraints are needed, this IG doesn’t define any profiles.

Where US Core profiles do not yet exist (e.g. for Coverage, Group), profiles have been created that try to align with existing US Core profiles in terms of elements exposed and terminologies used.

Bulk Data IG

This section outlines how the Bulk Data IG will be leveraged by this implementation guide.

Producer systems SHALL support the [base]/Group/[id]/$export operation for member attribution list implementation.

Producer systems SHALL support the reading and searching of Group resources per the capability statement expectations outlined below.

Producer systems SHALL support Patient, Related Person, Practitioner, PractitionerRole, Location, Organization, Coverage, Group resource types for the [base]/Group/[id]/$export?_type parameter.

Producer systems SHALL support the Bulk Data Kick-off Request as defined in the Bulk Data IG specification.

Producer systems MAY support the Bulk Data Delete Request as defined in the Bulk Data IG specification.

Producer systems SHALL support the Bulk Data Status Request as defined in the Bulk Data IG specification.

Producer systems SHALL set the requireAccessToken to true within the Bulk Data Status Request response body as defined in the Bulk Data IG specification.

Producer systems SHALL require Consumer systems to provide valid access token to access the member attribution list files.

Producer systems SHALL support the Bulk Data File Request as defined in the Bulk Data IG specification.

When the Consumer systems do not have appropriate authorization to the data requested, the Producer systems SHALL return OperationOutcome with appropriate error message.

When the Consumer systems do not have appropriate access token to access the data requested, the Producer systems SHALL return OperationOutcome with appropriate error message.

SMART on FHIR Backend Services Authorization

This section outlines how the SMART on FHIR Backend Services Authorization guide will be used by this implementation guide.

Producer systems SHALL advertise conformance to SMART Backend Services by hosting a Well-Known Uniform Resource Identifiers (URIs) as defined in the Bulk Data IG specification.

Producer systems SHALL include token_endpoint, scopes_supported, token_endpoint_auth_methods_supported and token_endpoint_auth_signing_alg_values_supported as defined in the Bulk Data IG specification.

Consumer systems SHALL share their JWKS with the Producer systems using URLs as defined in the Bulk Data IG specification.

Consumer systems SHALL obtain the access token as defined in the Bulk Data IG specification.

Producer systems SHALL support system/Patient.read, system/Practitioner.read, system/PractitionerRole.read, system/Coverage.read, system/Organization.read, system/RelatedPerson.read, system/Location.read, system/Group.read scopes.

During Consumer registration, the Producer system MAY collect the NPI and Tax Identification Numbers applicable for a specific contract along with the specific contract information. This information MAY be used by the Producer to create the necessary Member Attribution List and provide an API that will allow the Consumer to retrieve the Member Attribution List. Producers MAY follow other OAuth best practices for Consumer registration.

When the Consumer is trying to discover the specific Group resource that represents the Member Attribution List for a specific contract, the Producer SHALL verify that the Consumer credentials provided allow the Consumer to access the requested specific Group Resource. NOTE: This verification is for a specific Group instance and not just the Group Resource type which is controlled by the scopes.

Capability Statements

This section lists the capability statements for Producer and Consumer systems.

Producer Systems

The Producer specific requirements for REST interactions, operations, profiles and search parameters to be supported are outlined in the Producer Capability Statement.

Consumer Systems

The Consumer specific requirements for REST interactions, operations, profiles and search parameters to be supported are outlined in the Consumer Capability Statement.

Member Attribution List Data Model requirements

The section outlines specific requirements that need to be followed in creating the Member Attribution List.

Representing Contracts

  • Producers SHALL create one Member Attribution List represented by an instance of Group Resource. There will be exactly one Group Resource instance per Contract between a Payer and a Provider.

  • Producers SHALL ensure the combination of Member Identifier, Payer Identifier, Contract Identifier and Plan Identifier are unique.

  • Producers SHALL include the Contract Identifier within the Group.identifier element during the creation of the Member Attribution List.

  • Producers SHALL make available the Group resource for Consumers for at least the duration of the contract in compliance with applicable regulations and policies.

  • Producers SHALL create new versions of Group resource instances as data in the Group (Members, Attributed periods, coverage references, attributed providers) change. Producers may or may not retain older versions of the Group based on their instance version scheme. In some instances Producers may choose a version scheme based on agreements with Consumers. When queried by the Consumers, Producers SHALL return the latest version of the Group resource instance unless a specific version is queried.

  • Producers SHALL represent the validity period of the contract in the Group.contractValidityPeriod extension.

Representing Plans and Coverage

  • Producers SHALL include the Plan Identifier in Coverage.class data element during the creation of the Member Attribution List.

  • Producers SHALL include the Coverage that is associated with the member in the Member Attribution List as part of the Group.member.anyReference data element.

Handling Identifiers

  • Producers SHALL include settlement entity names, ACO identifiers in Group.identifier during the creation of the Member Attribution List. This is helpful for Consumers to discover the Group using a single settlement entity name and/or an ACO identifier.

  • Producers SHALL include the provider NPI and/or TIN in Group.identifier field during the creation of the Member Attribution List. These identifiers are used by Consumers to discover the Group Resource using their own NPI and/or TIN.

  • When Member Identifiers are present, Producers SHALL include the Member Identifier in the Coverage.identifier.

Handling Attribution Period and Attributed Providers

  • Producers SHALL include the attribution period in the Group.member.period data element. This indicates the period over which the member is attributed to the provider.

  • When members get attributed to different providers during the same contract for different providers, Producers SHALL include the member multiple times in the Member Attribution List, once for each provider with whom the member is attributed including their attribution period.

  • When members are not attributed to a provider or an organization, Producers MAY attribute the member to the Settlement Entity organization which is responsible for the contract. Producers SHALL include the attribution period in the Group.member.period element.

  • Producers SHALL include the contract validity period in Group.extension (membershipValidityPeriod) data element.

  • Producers SHALL set Group.member.inactive = true when the member is no longer attributed.

  • Producers SHALL set Group.member.extension.ext-changeType = dropped when the member is no longer attributed.

  • Producers SHALL set Group.member.extension.ext-changeType = new` when a member is added to the attribution list for the first time.

  • Producers SHOULD set Group.member.extension.ext-changeType = changed` when a members information has changed.

  • Producers SHOULD set Group.member.extension.ext-changeType = nochange` when a members information has not changed from the previous version of the attribution list.

Security and Privacy considerations on Identifiers

  • Producers SHOULD exchange Provider NPI and TIN only as needed and when the NPIs and TINs belong to providers associated with the receiving organization.

  • Consumers SHOULD NOT be sharing the NPI and TIN information amongst providers unless required for PTO.

Member Attribution List Exchange Interactions Details and APIs

Consumer identifies relevant Member Attribution List in Producer’s system (Discovery of Group Resource)

This interaction outlines the APIs for a Consumer (for example, Provider organization) to discover the Group Resource in a Producer’s system ( for example, Payer organization).This Group resource represents the Member Attribution List that has been created by the Producer based on a contract between the Producer and the Consumer. For example, Multicare a Provider Organization would like to identify the Member Attribution List that a Payer organization (e.g Cambia Health Systems) has created based on a contract between Cambia and Multicare.

Precondition:

In order to discover the appropriate Group Resource (Member Attribution List) the Consumer is expected to know its own NPI and/or Tax Identification Number or Contract Identifier or Settlement Entity Identifiers. Producers and Consumers may exchange this information during the contract establishment. Similarly Producers may provide the name of the Group resource representing the Member Attribution List that can be retrieved by the Consumer. Note: Producers and Consumers MAY have a predetermined cadence on exchanging member attribution lists and this API could be invoked based on the cadence.

API: Discover Group using NPI and TIN


GET <Server Base URL>/Group?identifier=http://terminology.hl7.org/CodeSystem/v2-0203|NPI|<ExampleNPI>&identifier=http://terminology.hl7.org/CodeSystem/v2-0203|TAX|<ExampleTIN>

In the above API, notice the use of “oftype” modifier on the search to allow searching based on type which includes a CodeSystem and a Value. In addition the “" and "” will be substituted with the values that represent the Consumer organization.

The Producer verifies the client credentials according to the SMART Backend Services Authorization protocols and in addition verifies that the Consumer is allowed to access the specific Member Attribution List and returns one or more Group Resources representing the Member Attribution Lists for each contract between the Producer and the Consumer.

API: Discover Group using NPI or TIN


GET <Server Base URL>/Group?identifier=http://terminology.hl7.org/CodeSystem/v2-0203|<NPI or TAX>|<ExampleNPI or ExampleTIN>

API: Discover Group using Identifiers (Contract Identifier or Settlement Entity Identifier)


GET <Server Base URL>/Group?identifier=http://example.org|<Identifier Value>

API: Discover Group using Name


GET <Server Base URL>/Group?name=myorg

Expected Result:

Consumer receives one or more Group Resources from the above API call(s). Each Group Resource represents a specific Member Attribution List between the Producer and the Consumer. To narrow down the specific Member Attribution List for a specific contract the Consumer has to examine the Group.identifier and Group.contractValidityPeriod element and compare the contract information. An example resource retrieved by the above discovery APIs can be found at Group Example.

Consumer requests Member Attribution List from Producer’s system (Member Attribution List Export Request - Bulk Data Request)

This interaction outlines the APIs for a Consumer (Provider) organization to request the full Member Attribution List that is applicable to their specific organization for a specific contract. Note: The request has to be accepted by the Payer and eventually a Member Attribution List would be made available. This is an asynchronous request following Bulk Data IG specifications.

For example, Multicare would like to request the Member Attribution List details from Cambia Health Systems for a specific contract.

Precondition:

Provider Organization knows the specific Group Resource for the specific contract that represents the Member Attribution List from executing the discovery of group resource API outlined previously.

API:


GET or POST <Server Base URL>/Group/[Group id]/$export?_type=Patient,Practitioner,PractitionerRole,Organization,Location,Coverage,RelatedPerson


Expected Results: Request is accepted by the Producer and a Content Location is received as part of the Response. Detailed examples for Bulk Data Request can be found in the Bulk Data IG.

Consumer polls the Content Location for Request Completion and Member Attribution List data location (Member Attribution List Export Request Polling - Bulk Data Poll Request)

This interaction outlines the APIs for a Consumer (Provider) organization to poll the Content Location received as part of Member Attribution List Export Request outlined previously. This polling is required to determine completion status of the export request. This would be repeated until the request is complete or cancelled following the Bulk Data IG specifications.

For example, Multicare would poll the content location received from Cambia as part of the Member Attribution List Export Request.

Preconditions:

  • Consumer has requested the Member Attribution List export which has been accepted by the Producer.
  • Consumer organization has the URL for the Content Location where the request status can be polled.

API


GET <Content Location from Member Attribution List Export Request>

Expected Results:

  • The completion status of the Member Attribution List Export Request.
  • Once the request is completed, a 200 HTTP code is returned along with the Response Body containing the URLs for the files representing the Member Attribution List.
  • At least one URL is returned for each of the resource types specified using the _type parameter in the Member Attribution List Export Request which are Patient,Practitioner,PractitionerRole,Organization,Location,Coverage and RelatedPerson resources.
  • Detailed examples for content polling can be found in the Bulk Data IG.

Consumer retrieves Member Attribution List from Producer (FHIR Request)

AThis interaction outlines the APIs for a Consumer (Provider) organization to retrieve each of the files that represent the Member Attribution List.

For example, Multicare retrieves each of the NDJSON files representing the Member Attribution List.

Precondition:

Consumer has the URLs to retrieve the files representing the Member Attribution List from a successfully completed Member Attribution List Export Request. These URLs are obtained by executing the Member Attribution List Export Request Polling interaction until the request is completed.

API:


GET <File URL for each Resource identified in Member Attribution List Export Request completion response>

Expected Results:

  • Retrieve the NDJSON files for each of the following resources.
  • One or more NDJSON files for Patient,Practitioner,PractitionerRole,Organization,Location,Coverage and RelatedPerson
  • Detailed examples for NDJSON file retrieval can be found in the Bulk Data IG.