期刊
INTERNATIONAL JOURNAL OF MEDICAL INFORMATICS
卷 80, 期 2, 页码 E26-E31出版社
ELSEVIER IRELAND LTD
DOI: 10.1016/j.ijmedinf.2010.10.001
关键词
Electronic health records; Disclosure of personal data to third parties; Usage control
资金
- German Federal Ministry of Education and Research (BMBF) [01IS08016C]
- German Academic Exchange Service (DAAD)
Patients' medical data have been originally generated and maintained by health professionals in several independent electronic health records (EHRs). Centralized electronic health records accumulate medical data of patients to improve their availability and completeness; EHRs are not tied to a single medical institution anymore. Nowadays enterprises with the capacity and knowledge to maintain this kind of databases offer the services of maintaining EHRs and adding personal health data by the patients. These enterprises get access on the patients' medical data and act as a main point for collecting and disclosing personal data to third parties, e. g. among others doctors, healthcare service providers and drug stores. Existing systems like Microsoft HealthVault and Google Health comply with data protection acts by letting the patients decide on the usage and disclosure of their data. But they fail in satisfying essential requirements to privacy. We propose a privacy-protecting information system for controlled disclosure of personal data to third parties. Firstly, patients should be able to express and enforce obligations regarding a disclosure of health data to third parties. Secondly, an organization providing EHRs should neither be able to gain access to these health data nor establish a profile about patients. (c) 2010 Elsevier Ireland Ltd. All rights reserved.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据