Technical Documentation

All API vendor/partners are expected to adhere to the following data sharing policy/procedure guidelines:

1. Security Risk Analysis:
   • Compliance to ISD/HIT Security assessments, establish county software business operating agreement, and audit reviews as determined to be needed.
2. Risk and Notification:
   • If a determination is made that continued access or security is deemed unacceptable, Mariposa County Behavioral Health and Recovery Services will notify the third-party application provider of the decision and remove access temporarily or permanently.
   • Remediation is to be reviewed at the discretion of Mariposa County Behavioral Health and Recovery Services ISD/HIT governance.
3. Decision to Deny/Discontinue:
   • If, after security reassessment, Mariposa County Behavioral Health and Recovery Services reasonably determines that the security risks remain unacceptable, proceed with the decision to deny or discontinue the third-party application’s connection to the API.
4. Notification of Decision:
   • Notify vendor and Mariposa County Behavioral Health and Recovery Services partners/stakeholders, including affected users, healthcare providers, and the organization’s internal IT and security teams, about the decision to deny or discontinue API access for the specific third-party application.
5. Documentation:
   • Documentation of all policy and procedure decisions to enable, remove, or terminate data share agreements are documented for HIPAA retention requirements.
6. Compliance:
   • Adherence to privacy and security to Mariposa County Behavioral Health and Recovery Services privacy guidelines in regard to data sharing should be mirrored in FHIR API standards. Vendor compliance ensures that sensitive patient information is shared securely and in accordance with consent guidelines mandated by federal and state regulation: meeting the highest standards of confidentiality and data protection. Our policy emphasizes the responsible use of FHIR API, safeguarding mental health and SUD data through member consent and against unauthorized access and ensuring a trusted and interoperable healthcare environment.

Provider Directory

The Provider Directory Application Program Interface (API) is a recent development aimed at delivering current details regarding healthcare providers and facilities to beneficiaries of the Centersfor Medicare & Medicaid Services (CMS). Through this API, beneficiaries can explore healthcare providers and facilities based on various factors such as location, specialty, and other criteria.

This API emerged as a response to the CMS Interoperability and Patient Access Final Rule. This regulation mandates health plans to furnish beneficiaries with access to precise and promptly updated provider directory information through an API. The rule's objective is to enhance access to care and guarantee that beneficiaries possess the necessary information to make well-informed decisions concerning their healthcare.

Mariposa Behavioral Health and Recovery services partners with InSync/Qualifacts for their electronic health records.

Qualifacts API’s allow the external developer community to create applications that provide Patient engagement across the Internet of Things (IoT). Your apps will be able to make read only data requests for patient health information (specific data category or all data) for a specific date, date range or all data.

Our API feature is providing more options for electronic health information exchange for the consumer (patient). It will also serve as another option for consumers (patients), particularly those who will request information through a mobile device or tablet.

Get started today!

Click here for information about FHIR API documentation. 

InSync: You can access these steps to begin development of an application with the InSync EMR/PM API.