Comprehensive Opioid Abuse Program logo and home link BJA Logo

PDMP Data Sharing Hub Connectivity

 

Beginning with the FY 2018 Hal Rogers Prescription Drug Monitoring Program (PDMP) grant awards, the U.S. Department of Justice, Office of Justice Programs, Bureau of Justice Assistance (BJA), has introduced two new grant conditions to support movement toward a nationally interoperable PDMP network. The full text of these grant conditions can be found in the COAP PDMP Special Conditions document.

These grant conditions affirm BJA’s commitment to support the principle of state choice when it comes to selecting a pathway to support PDMP interstate data sharing and integration. The conditions also ensure that affordable nonproprietary solutions are available for states that want to develop innovative new technical solutions to address their PDMP integration needs.

MILESTONES FOR CONNECTION

TIME TO COMPLETION

milestone graphic

Immediate

Click here to schedule questions related to documents and software.

Initiate internal processes for completing and authorizing MOU; return signed MOU to IJIS Institute.

Mobile mou bg Mou graphic

#2

Specific to state's internal processes

Click here to schedule technical assistance on account setup, internal network preparation, SOAP service implementation, application install and SRS configuration, all testing phases, and connection.

Complete pre-installation checklist; return to IJIS Institute.

Mobile mou bg Mou graphic

#3

2 hours

Click here to schedule technical assistance on account setup, internal network preparation, SOAP service implementation, application install and SRS configuration, all testing phases, and connection.

Submit a request using the PDMP TTA Request Form for the RxCheck console account setup.

Mobile mou bg Mou graphic

#4

2-6 weeks

Click here to schedule questions related to documents and software.

Begin internal network preparation as prescribed by the documentation. Begin implementing SOAP-based service based on SIP_WS_1.2_Trusted WSDL.

Mobile MOU background MOU graphic

#5

2 hours

Click here to schedule questions related to documents and software.

Submit a request using the PDMP TTA Request Form for install application and SRS configuration on the RxCheck console.

Mobile mou bg Mou graphic

#6

2 hours

Click here to schedule questions related to documents and software.

Submit a request in the PDMP TTA Request Form to initiate inbound and outbound testing.

Mobile mou bg Mou graphic

#7

3 hours

Click here to schedule questions related to documents and software.

State connected.

Mobile mou bg Mou graphic

#8

Immediate

Specific to state's internal processes

2 hours

2 hours

2–6 weeks

2 hours

3 hours

right marker
right marker

Click here to schedule questions related to documents and software.

Click here to schedule technical assistance on account setup, internal network preparation, SOAP service implementation, application install and SRS configuration, all testing phases, and connection.

rcheck graphic
rcheck graphic

Frequently Asked Questions

Questions About the PDMP Data Sharing System Special Condition

What is the Bureau of Justice Assistance’s (BJA) designated Prescription Drug Monitoring Program (PDMP) data sharing system?
At this time, BJA’s designated PDMP data sharing system is the RxCheck hub.
What is the RxCheck hub?
The RxCheck hub is a fully operational data sharing system that enables states to securely and efficiently share PDMP data between states or with a Health Information Exchange/Electronic Health Record (HIE/EHR) system. The RxCheck hub was developed with support from BJA using the Prescription Monitoring Information Exchange (PMIX) National Architecture specifications. The RxCheck hub was designed with the involvement of state PDMP administrators, private industry, and the federal government. The RxCheck system infrastructure has been tested and validated and includes the latest design improvements to meet the needs of state PDMPs. The RxCheck hub is governed by the RxCheck Governance Board, which is composed of states that are connected to the hub or have expressed interest in connecting to the hub. The RxCheck hub is funded by BJA.
I currently use another hub for interstate data sharing. Does the grant condition restrict me to using the RxCheck hub for interstate data sharing?
The grant condition allows each state to determine its preferred hub for initiating interstate data sharing with another state or states. The grant condition requires a state to receive and respond to requests received using the preferred hub of the initiating state.
What do I need to do to demonstrate compliance with the PDMP data sharing system special condition?
The IJIS Institute will be responsible for notifying BJA in writing when a state is connected to the RxCheck hub and able to respond to live requests for interstate data sharing. Upon receipt of this written notification, the BJA program staff will initiate a request to remove any financial hold associated with this special condition.
When do I need to be connected to the RxCheck hub to comply with the special condition?
Per the special condition, grantees have 90 days from the point of grant acceptance to comply with the special condition related to data sharing.
How long do I have to accept the grant award?
Grantees have 45 days from the award date to accept the award. The grantee should notify the Program Office if the organization is unable to accept the award within this time. Grantees’ failure to accept the award within 45 days may result in the awarding agency deobligating funds. See U.S. Department of Justice, Office of Justice Programs, Grants Financial Guide, Chapter 2.2: Acceptance of Award and Award Conditions.
What if we are taking steps to connect to the PDMP hub but cannot meet the 90-day connection deadline?
Per the Office of Justice Programs (OJP) Financial Guidelines, failure to comply with special conditions may result in withholding of funds, suspension, or termination, as appropriate.
What does "software, data, or other intangible property" in Special Condition 46 include?
Condition 46 should not be read to require a grantee to disclose Personally Identifiable Information (PII)/PDMP data in contravention to applicable federal, state, or local law. Condition 46 is intended to prevent a "walled-garden" approach to the IT solutions to PDMP data sharing systems. Any software (or other intangible property) paid for under this award must be portable (in case a new vendor is chosen in the future) and interoperable with other systems and must be provided, upon request, to OJP. If you have questions about how this grant condition applies to any proposed expense in your grant budget for software, data, or intangible property, please feel free to reach out to the BJA Policy Advisor directly.

Connection Questions

With whom will my state work to connect to RxCheck?
The IJIS Institute currently supports the RxCheck hub on BJA’s behalf. The IJIS Institute will coordinate and manage your state’s connection to the RxCheck hub. At any point in the process, you may schedule a time to talk to the IJIS Institute staff.
What are the steps I need to follow to connect to the RxCheck hub?
Please see the graphic above.
My state uses a third-party solution provider to operate its PDMP. How will this work?
States that use a third-party solution provider to operate their PDMPs should notify their vendors of this special condition as soon as possible and request their assistance in meeting the requirement. It is the responsibility of the named project director listed on the grant award to ensure that all of the special conditions are met. If the project director would like to authorize the third-party solution provider to represent the state’s effort to connect to the RxCheck Hub, the project director must advise the IJIS Institute via written notice and provide the authorized solution provider with points of contact. At each step in the process, it is the grantee’s responsibility to schedule the work, not the IJIS Institute’s. If a grantee believes that the IJIS Institute is being nonresponsive to the state’s needs, the state should contact the BJA policy advisor listed on the grant award immediately.

Security Questions

I have concerns about security. Does the RxCheck hub or the U.S. Department of Justice (DOJ) have access to my state’s data at any point in the transmission?
Neither the RxCheck hub nor, by extension, DOJ, has access to your state’s data. Neither does the IJIS Institute. Each state maintains ownership and complete control over access to its PDMP data at each step of the process. Data is encrypted using x509 digital certificates to sign and encrypt messages. The message is encrypted at the source network before the message is submitted to the RxCheck hub. Only the receiving PDMP can decrypt the message.
Is there a message audit trail in RxCheck?
Yes, all PMIX header fields and message IDs from WS-Addressing are logged within the RxCheck hub. The authorized PDMP administrator can access audit logs via the console.
Is any data stored on the cloud?
No patient data can be accessed by the IJIS Institute; therefore, no patient data can be maintained by the IJIS Institute in the cloud. The data that is backed up on the Azure Government Cloud is specific to the following four items: user credentials, State Routing Service (SRS) configuration, certificates, and event logs.

Technical Questions

Where can I find the technical documentation needed to connect to the RxCheck hub?
The documentation and software for connecting to RxCheck can be downloaded using the following links:
What is the SRS?
The SRS provides PMIX-compliant service hosting, request/response message validation, role-based site authorization, and full message routing and has been certified via the PMIX Springboard Conformance Test process to ensure full interoperability with RxCheck.
Will my PDMP staff members have Web portal access to RxCheck?
Yes, the RxCheck console provides state-authorized PDMP administrators with access to configure the SRS and monitor event logs.
Can staff members change the server ports?
Yes, authorized PDMP administrators can change the SRS listen ports. The procedure is documented in the install and setup guide.
Can staff members change the server certificate?
Yes, authorized PDMP administrators can change or regenerate certificates. The procedure is documented in the install and setup guide.
Which programming language is used for RxCheck?
RxCheck uses Java, .NET, and Angular4.
Can the disclosing PDMP determine whether a request originated from a state PDMP or an HIE/EHR?
Yes, state PDMPs can determine whether a request originated from a state PDMP or an HIE/EHR. There is a difference in naming convention for the SiteIDs that helps identify the requesting site.
In the future, my state will want to integrate with our HIE/EHR. How will RxCheck translate to the National Council for Prescription Drug Programs (NCPDP) if the payload is encrypted?
The NCPDP message is translated at the source in the outbound SRS before the message is encrypted and sent to the RxCheck hub.
Is the level of encryption the same for PDMPs and HIEs/EHRs?
Yes, the level of encryption is the same for both PDMPs and HIEs/EHRs. We use x509 digital certificates to sign and encrypt the message.
Is the RxCheck hub console configurable to limit PDMP data access based on applicable state data sharing laws, statutes, or policies?
The RxCheck hub console is configurable by each state's PDMP staff to restrict access in alignment with state law and regulations. Regular time slots are available each month for demonstrations of the RxCheck hub and for questions and answers related to the functionality of the RxCheck hub. Your state may sign up for a demo or schedule time to speak with technical staff members here.
Can my state join the RxCheck Governance Board?
Yes. Send an email to rxcheckhub@pdmpassist.org stating your interest to connect to the RxCheck hub, and the Governance Board will vote to admit your state as a member.
These FAQs are very helpful, but where can I go for assistance if I have other questions or need further explanation?
A Web page has been developed for recipients to submit questions online and to reserve a time slot for a conference call, if necessary. Also, through this Web page, recipients can access additional resources (technical specifications, memorandum of understanding [MOU], etc.) and recordings of webinars to assist in the connection process. The URL is https://www.coapresources.org/PDMP/RxCheck.