# SMART Health Links Vaccination Use Case

2/28/2022 Meeting notes
(AIRA, MITRE, AINQ)
* Applicable scenarios include where records are requested by a third-party entity that is not a vaccinator who submits data to the IIS or has a DUA in place: schools, camps, out of state providers
* Current pathways for third-party access
* ~30 IISs have consumer access, all one-off solutions provided by vendors. Consumer can display or print a PDF version of vaccination records from portal or app.
* Some jurisdictions allow schools to register as IIS users and get access to records for a specific cohort of students
* Audit requirement, schools may need to provide proof that they checked students vaccine records (ie copies of student records)
* Data requirements
* Unlikely to need specialized IG in this case as no need for data minimization and privacy risk is minimal. US Core or IPS might be options.
* Some states/school systems have official forms they use for records, however these will not generally include data that is not already available in existing FHIR Patient/Immunization profiles
* Dynamic data would be preferable to capture new vaccinations over time without consumer having to generate a new link
* Including recommendation/evaluation in the payload would be useful so schools do not have to make a clinical judgement on whether student is up-to-date on vaccines or not
* Overall seems more technically involved than SHC, would expect IIS to rely on their vendors for implementation rather than DIY route
* Identity verification will be a major real-world consideration, need to allow parent access to child records and have stable long-term access for revocation of long-term links if needed. Current SHC implementations using email or cell phone might be adequate for links as well but need backup access method for parents who lost access to phone/email.