Implementation and use of a web-based interface for confidential communication of data between the clinical and research environments

Policies and regulations in the current health care environment have impacted the manner in which patient data - especially protected health information (PHI) - are handled in the clinical and research settings. Specifically, it is now more challenging to obtain de-identified PHI from the clinic for use in research while still adhering to the requirements dictated by the new policies and regulations. To meet this challenge, we have designed and implemented a novel web-based interface that uses a workflow model to manage the communication of data (for example, biopsy results) between the clinic and research environments without revealing PHI to the research team or associated research identifiers to the clinical collaborators. At the heart of the scheme is a web application that coordinates message passing between researchers and clinical collaborators by use of a protocol that protects confidentiality. We describe the design requirements of the messaging/communication protocol, as well as implementation details of the web application and its associated database. We conclude that this scheme provides a useful communication mechanism that facilitates clinical research while maintaining confidentiality of patient data.