HealtheConnections is the SHIN-NY RHIO serving Central New York — a region that includes Onondaga, Oswego, Madison, Cayuga, Cortland, Jefferson, Lewis, and surrounding counties. For home health agencies serving the Syracuse metropolitan area and surrounding Central New York communities, HealtheConnections manages CSPP review, SCPA execution, and ongoing compliance monitoring. Understanding the specific submission process, review timeline, and content expectations for HealtheConnections — which differ in several practical respects from the Healthix process for NYC and Long Island agencies — ensures that your renewal is completed without avoidable delays.
HealtheConnections CSPP Overview and Template Access
HealtheConnections provides a CSPP template to participating organisations upon request through the participant services portal. Unlike Healthix, which has a highly structured template with specific section sequences, the HealtheConnections template is more flexible — it provides content area headings and guidance notes but allows organisations to present their programme information in a format that reflects their actual operational structure. This flexibility can be either an advantage or a complication: agencies that write a clear, well-organised narrative submission find the HealtheConnections review process straightforward; agencies that interpret the flexibility as a license to submit a minimal document frequently receive requests for additional information.
Contact your HealtheConnections participant services representative to confirm the current template version before beginning your CSPP development or update. HealtheConnections makes technical assistance available to participating organisations during the CSPP development process — a resource that is underutilised by most home health agencies and that can significantly reduce the revision cycles required to reach approval.
Required Content Areas for HealtheConnections Submission
Organisational Security Programme Description
HealtheConnections requires a description of the organisation's overall information security programme — the governance structure (who is responsible for security oversight), the policy framework (what written policies govern ePHI handling), and the risk management approach (how the organisation identifies and addresses security risks). The Security Officer designation, the risk assessment process and most recent completion date, and the workforce training programme should all be addressed in this section.