Policies

The Interstate Commission for EMS Personnel Practice adopts policies to guide its operations and the administration of the United States EMS Compact. This page collects the Commission's adopted policies, including the policies that govern access to, security of, and management of the National EMS Coordinated Database (NEMSCD).

Activation of the Compact Policy

Activation Date Policy (adopted September 29, 2022). Defines the date for the term "activation of the Compact," establishing the activation date as March 15, 2020, and setting a deadline of March 15, 2025, for each participating state to comply with the criminal background check requirement. For background, see the announcement: EMS Compact Commission sets activation date.

Database Policies

The Commission, in collaboration with the National Registry of Emergency Medical Technicians (NREMT), the contractual technology partner of the Commission and the designated Database Administrator, developed the policies governing access to, security of, and management of the National EMS Coordinated Database (NEMSCD). Each policy below is provided as an adopted PDF.

NEMSCD Database Access Policy

Limits access to NEMSCD to official use by authorized individuals, on a need-to-know basis, under permissions regulated by the Database Administrator.

NEMSCD Level of Access Policy

Defines the three levels of NEMSCD access, State User, State Data Manager, and State Administrator, and how participating states assign them to their personnel.

NEMSCD Data Use Policy

Describes the allowed use of data submitted to and derived from NEMSCD, and affirms that submitted data remains the property of the submitting participating state.

NEMSCD Accuracy of Data and Correction of Records Policy

Sets out the process for challenges to the accuracy of submitted data, with corrections, additions, and removals made by the participating state that owns the data.

NEMSCD Information Security Policy

Describes the data security controls for NEMSCD information, aligned with the National Registry's information security program and NIST SP 800-171.

NEMSCD Management of Suspected or Realized Cyber Breach Policy

Provides for notification and coordinated management of any suspected or realized cyber breach involving NEMSCD information, including prompt notice to the Commission.

NEMSCD Changing Member State Access Policy

Details the roles and responsibilities for adding, changing, suspending, and reinstating a participating state's access to NEMSCD.

NEMSCD Access Procedures

Outlines the process by which a participating state requests NEMSCD access for its personnel and how access levels are changed.

NEMSCD User Access Agreement Form

The agreement each NEMSCD user signs, setting the conditions for responsible and authorized use of the database.