Interoperability (Access your Health Information)

Interoperability and Patient Access

The Centers for Medicare and Medicaid Services (CMS) created a federal rule called the Interoperability and Patient Access Rule. Using a health app that you choose, the rule lets you see your own medical claim information using a phone, tablet or a computer.

South Dakota IOX is South Dakota Medicaid’s tool that follows this rule.

Information you can see

• Your Medicaid Data
• Provider Directory- A list of available providers in your area
• Preferred drug list- Medications covered by South Dakota Medicaid

What you actually see may differ depending on the app you choose.

To Register

South Dakota IOX Interoperability Portal

Steps to register and authorize data sharing with your app

To access your health information on an app, you must follow these simple steps:

Step 1:

• Visit South Dakota IOX Interoperability Portal. Now click on New Member? Register here, accept the security banner, and select MySD. You can create a new account to begin or login with your existing account.
• Enter the verification code that you’ll get on your email. Enter the required information correctly to confirm your authorization. Once your details are submitted, system verifies your identity.
• Select the correct medical visit from the list provided to verify your records. You have one attempt; if incorrect, you must wait 24 hours to try again. Once successful, your registration is complete, and you can grant data access to your app.

Step 2:

• Begin with a Third-Party Health App. The app will ask for your consent to allow the app to access your Medicaid information. Read the information carefully before you authorize your data to be shared. After you accept, you can view your South Dakota Medicaid information.

Detailed steps are explained in the portal under South Dakota IOX Member Registration

The following apps are currently registered with South Dakota IOX. Additional apps may register in the future. App developers are not sponsored nor paid for by DSS.

b.well Connected Health

• For support with log in or access, email at support@icanbwell.com

Flexpa

• For support with log in or access, email My Flexpa at support@flexpa.com

Learn more
For more about the federal rule and CMS:

• Interoperability and Patient Access Final Rule
• CMS Interoperability and Patient Access Policies fact Sheet
• CMS Policies and Technology for Interoperability

For HIPAA information and your privacy rights:

• HIPAA for Individuals
• South Dakota DSS HIPAA page

Frequently Asked Questions

Q. What does “interoperability” mean?

A. It means different computer systems can safely share information with each other. For health care, it means your Medical records can move from one system to another so you can see them on a phone with the app you choose.

Q. What is an API?

A. An API is a secure tool that lets different computer systems talk to each other. Here, it allows Medicaid to safely send your health information to a mobile app you’ve chosen to use.

Questions to ask before choosing a third-party app to receive your health data.

Before you agree to share your health data, you want to make sure an app’s privacy policy answers these questions.

• What health information will the app collect?
• Will this app collect non-health data from my phone, such as my location?
• How will the app use your data?
• Will the app sell your data or share it for advertising or research?
• How does this app protect your data?
• How does the app tell you if its privacy rules change?
• What is the app’s policy for removing your data once you end the access?
• If you stop using the app, will your data be removed or can you take away the app’s access to your health data?

Q. Is sharing your information online safe?

A. To stay safe with your health data, only use apps you can trust, read the privacy policy of the app carefully, use strong username and password and never share your login information with anyone. You can change or revoke your consent at any time.

Q. Which apps can I use?

A. Only use trusted apps. The apps you use to see your information are not owned or controlled by South Dakota Medicaid or the State of South Dakota. They are independent third-party apps. You choose the app you want to use, read their app’s privacy policy, terms of use and you decide whether to share your information with it.

South Dakota Medicaid has no control over how your app will use or share your health data.

Q. How many years of medical records will be available?

A. South Dakota Medicaid provides data dating back to January 1, 2016, in compliance with federal CMS Patient Access Rule. The amount of historical information available in a third-party app may differ depending on the app you use.

Q. How do I find an approved third-party app?

A. See which apps you can use. Always check that the app is on our registered list before sharing your Medicaid information with it.

Download the app. Most apps are available in the Google Play Store (Android) or the App Store (iOS). Some apps also offer a website version you can use on a computer. Follow the app’s instructions to create your account and connect your South Dakota Medicaid information.

If you have trouble downloading the app or setting up your account, South Dakota Medicaid may not be able to fix problems inside the third-party app, please check the app’s Help or Support section.

Q. What is HIPAA?

A. The Health Insurance Portability and Accountability Act (HIPAA) is a federal law. This law protects personal health information from being disclosed without consent. The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) enforces the HIPAA Privacy, Security, and Breach Notification Rules, and the Patient Safety Act and Rule.

You can find HIPAA FAQs for Individuals

Q. Are third-party apps covered by HIPAA?

A. Most third-party apps are not covered by HIPAA. Your app will have access to your health data once you authorize. You must carefully read the app’s privacy policy before you agree to share your data.

Q. What if the data is misused without your permission?

A. If you think an app used your health data in a way you did not agree to, report it to the Federal Trade Commission (FTC) at reportfraud.ftc.gov

If a HIPAA covered group (your doctor, hospital or Medicaid) was involved , file a complaint with the Office of Civil Rights at HIPAA

Need more information?

If it is about the app, you will need to contact the app’s support.

If it is about login issues with South Dakota IOX Interoperability Portal, you can reach at 605.773.3011.

Contact South Dakota Department of Social Services: dss.claimspecialists@state.sd.us