High level security policies for health: from theory to practice

• Published in: Studies in health technology and informatics Vol. 103; p. 416
• Main Authors: Defteraios, Spyros, Lambrinoudakis, Costas, Gritzalis, Dimitris
• Format: Journal Article
• Language: English
• Published: Netherlands 2004
• Subjects: Access to Information; beta-Thalassemia - therapy; Computer Communication Networks - organization & administration; Computer Communication Networks - standards; Computer Security - standards; Confidentiality - standards; Humans; Information Systems - organization & administration; Information Systems - standards; Medical Record Linkage - standards; Medical Records Systems, Computerized - organization & administration; Medical Records Systems, Computerized - standards
• ISSN: 0926-9630
• DOI: 10.3233/978-1-60750-946-2-416

The design and implementation of a security policy for a healthcare organisation is by no means trivial but it is, at least, feasible, taking into account the wide range of information security and privacy enhancing technologies that are currently available. Considering, however, a shared care environment with the participation of many independent healthcare organisations and the requirement for exchanging electronic healthcare records, the situation becomes much more complex since the implementation of global security policy may turn out to be an over ambitious task. This paper aims to highlight the main sources of complexity and to provide pointers for managing or/and resolving them.