Which groups participate in configuring and governing Care Everywhere data-sharing policies?

• A. The sending and receiving organizations' Epic administrators, privacy/data governance roles, and site policies
• B. Individual clinicians
• C. External researchers
• D. Regulatory agencies

Answer: (A)

Configuring and governing data-sharing policies in Care Everywhere is a governance-driven, collaborative effort that sits at the intersection of system administration and organizational policy. Both the sending and receiving organizations rely on their Epic administrators to implement the technical and configuration aspects of data sharing within the platform. Privacy and data governance roles ensure the policies reflect patient consent, access controls, data minimization, and compliance with applicable laws. Site policies capture institution-specific rules, workflows, and exceptions that tailor how data is shared in practice. Together, these elements define who can share which data, with whom, under what circumstances, and how those rules are monitored and updated.

Clinicians use the policies but don’t set them. External researchers may request data subject to approvals, but they don’t configure the policies themselves. Regulatory agencies influence the framework through laws and requirements, but ongoing configuration and governance are performed by the organizations through their Epic administrators and governance teams.