The comprehensive assessment will look at health information exchange in both public- and private-sector health-care entities and will consider such factors as business policies and state laws that affect health information exchange, best practices and barriers to those practices, privacy and security issues, and information exchange with regional and national networks.