Interoperability in CPIMS+
Overview, Rationale and Purpose
The CPIMS+ is built to be interoperable to safely and securely share data with other information management systems. The Primero team has developed extensive guidance to help guide programmes on how to plan for interoperability based on information sharing protocols and reinforcing good practice, need to know princples, do no harm principles and accountablility.
Interoperability is the ability of data systems - like Primero - to exchange information with other systems. For Primero, this may be between modules and/or with other partner systems. Data exchanges may be achieved manually through the exchange of files, or automated using software. Primero does not automatically exchange information with alternative systems or software or between modules. Primero does have APIs (application program interface) available which are access points to a module and its forms and allow for applications to communicate to one another. APIs create a window for data to be exchanged between modules without the need for a developer to share a modules entire code. This video simply describes the functionality of APIs.
Safeguarding the collection and storage of beneficiary information and data security, confidentiality and protection of this information is critical in data sharing. The collection of information and personal data triggers delicate issues regarding what information can be shared, under what circumstances and with whom. As information systems are increasingly linked to services and referral mechanisms, clear protocols for sharing information must be developed. Where systems can become electronically interoperable, measures can be taken to ensure data security is upheld. For example these measures could include automatic triggers which ensure data is only shared with a child’s consent, and/or a set of defined data points where all participating agencies are aware of the information being shared on a need-to-know basis, and/or the use of an audit functionality to know who is permitting the sharing of data.
Expectations & Prerequisites
1Considerations
- Information Sharing Protocol (ISP) to be in place or in development in line with local Standard Operating Procedures for Case Management
- Field-level Child Protection Inter-agency coordination structures in place required to support and maintain interoperability
- Strong interagency collaboration and case management capacity
- ICT considerations including troubleshooting support as needed
- Stable security situation and operational context
- Strong case management capacity
- API available in other IMS system receiving/sending data from Primero
2Identify in-country agency focal points for interoperability
If your programme is interested in interoperability between Primero and another IMS, a clearly defined working group is critical for coordination. The in-country CPIMS+ Users and the other IMS administrators must agree to interoperability. A dedicated system administrator for CPIMS+ must be appointed to oversee the implementation of interoperability, testing, training and on-going support. Typically this would be the CPIMS+ System Administrator or a focal point(s) with a strong understanding of information management systems and child protection who is actively involved with inter-agency child protection case workers and managers. This in-country appointed focal point(s) will be requested to meet with the Primero and other IMS team for 1 hour weekly calls for ~9 weeks for the duration of interoperability implementation and participate in a system administrator training for interoperability. The focal point(s) will support end-to-end testing of data sharing between the 2 systems, and training end-users once the system is ready to go-live. Once interoperability is live, the focal point(s) will also be the user(s) who would support with assigning referrals to the appropriate agency and troubleshoot any issues that end-users may face.
3Approved and Signed Information Sharing Protocol between participating agencies
All data sharing requests should be clearly outlined in the Data Protection Information Sharing Protocol (DPISP) which is a tool that is part of Information Management standards for case management. All child protection agencies are required to agree and sign a DPISP defining what information about children can be shared, when and with whom.
4Configuration Support
The in-country agencies will provide the technical teams from Primero and the other IMS with the following information to implement the interoperability solutions:
- Use cases when data should sent/received
- Workflows of which users and roles should send/receive data
- What data points would be shared and under which circumstances
5Budgeting
Whom ever has accepted responsibility for budgeting and financial resourcing for Primero will receive a single service statement and request for payment each year in the first quarter for Primero. In addition to the Primero subscription, the interoperability solution is a separate cost. OpenFn provides cost effective support services tailored to your needs. OpenFn is the preferred middleware for Primero due to their social impact philosophy and committment to sustainability. OpenFn offers UNICEF enterprise options, but see openfn.org/pricing for standard plans.
Timeline Considerations
All tasks will be led by Primero Lead (UNICEF HQ) and the other IMS technical team and blue tasks include the in-country appointed inter-agency focal point.
1. Signed Data Protection and Information Sharing Protocol
2. Data flow and mapping specifications are finalized
3. Technical Implementation
Note: For any new implementation of interoperability we will replicate this technical process
4. Access is provided to test environments
5. Demonstration and testing by in-country agencies
6. System Administrator training on how to support after go-live, administer and monitor interoperability
7. Training on how to send and receive data between Primero and other IMS as well as refresher training as needed
8. Go-live with interoperability between Primero and partner IMS
Key Considerations
Raised by the Primero Coordination Committee & CPIMS+ Steering Committee
Consent and Assent in Interoperability between Primero’s CPIMS+ and proGres v4 Child Protection Module
What is the purpose of interoperability with other system(s) and what problem are you trying to solve making systems inter-operable?
How will the data shared be used by other system(s) – cf. which products, services, etc?
What is the benefit to end users?
What is the benefit to women and girls or children?
What are the risks for the end user or children?
Define who should be involved in the discussion: What are the decision-making bodies at each organization? Are representatives of these bodies included in the conversation? Is/are user organization(s) involved in the conversation?
Who (which individual(s)/role(s)) have access to Primero records shared with the other system? Can access be limited to certain individual(s) or role(s)?
Beyond actor(s) implementing the other system, do other actor(s) have access to the records shared from Primero?
Do Primero user organization(s) have the right to opt-out on the data sharing with external system?
How is consent collected from beneficiaries for data sharing with other system? Are staff trained to ask for consent specifically for data sharing with external actors? What tools exist (ie. tailored consent form)? What happens if they do not give their consent?
Is interoperability with other system(s) enshrined in the Information Sharing Protocol (ISP)? Has the ISP been developed in a collaborative and inclusive manner with User organization(s)?
How does interoperability with other system(s) affect the inter-agency process of data sharing for the purpose of monitoring and analysis of trends (ie. compilation, reporting and analysis)?
What is/are the scenario(s) in which data needs to be shared with other system(s) – user stories?
What constitutes a referral between Primero/CPIMS+ and Progres4? For what specific service?
Which document defines what constitutes a referral? Is it global or country level?
How do we address challenges that we may encounter when discussing interoperability in specific contexts? (I.e. specific context-related risks and considerations for data sharing among UNICEF/UNHCR, INGOs/Implementing Partners and Governments)
Is development work needed to enable interoperability between systems? If so, how can it be done?
Does UNHCR have a data protection policy?
Does UNICEF have a data protection policy?
© Copyright 2023