Privacy preservation and information security protection for patients' portable electronic health records

Computers in Biology and Medicine

Volumn 39, Issue 9, 2009, Pages 743-750

  Huang, Lu Chou ^a,b   Chu, Huei Chung ^b   Lien, Chung Yueh ^a   Hsiao, Chia Hung ^c   Kao, Tsair ^d  

^a NATIONAL YANG MING UNIVERSITY   (Taiwan)

^b HUAFAN UNIVERSITY   (Taiwan)

^c TZU CHI UNIVERSITY   (Taiwan)

^d HUNGKUANG UNIVERSITY   (Taiwan)

Author keywords

De identification; Portable electronic health record; Privacy; Security

Indexed keywords

DE-IDENTIFICATION; ELECTRONIC HEALTH RECORD; INFORMATION SECURITY; MEDICAL RECORD; PORTABLE ELECTRONIC HEALTH RECORD; PORTABLE ELECTRONICS; PRIVACY; PRIVACY AND SECURITY; PRIVACY PRESERVATION; PRIVATE INFORMATION; SECURITY; STORAGE MEDIA; STORAGE MEDIUM;

HEALTH; RECORDS MANAGEMENT;

HEALTH RISKS;

ARTICLE; COMPUTER SECURITY; DATA STORAGE DEVICE; ELECTRONIC MEDICAL RECORD; HEALTH INSURANCE; INFORMATION PROCESSING; PATIENT INFORMATION; PATIENT SAFETY; PATIENT SELECTION; PORTABLE EQUIPMENT; PRIORITY JOURNAL; PRIVACY; PROTECTION;

COMPUTER SECURITY; COMPUTER SYSTEMS; CONFIDENTIALITY; HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT; MEDICAL RECORDS SYSTEMS, COMPUTERIZED; PATIENT IDENTIFICATION SYSTEMS; SOFTWARE DESIGN; TAIWAN; UNITED STATES;

EID: 67849099103     PISSN: 00104825     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.compbiomed.2009.06.004     Document Type: Article

References (36)

1. Code of Federal Regulations (US), Title 45, Part 164, 2002.
2. Sadan B. Patient data confidentiality and patient rights. Int. J. Med. Inf. 62 (2001) 41-49
3. Fowles J.B., Kind A.C., Craft C., Kind E.A., Mandel J.L., and Adlis S. Patients' interest in reading their medical record: relation with clinical and sociodemographic characteristics and patients' approach to health care. Arch. Intern. Med. 164 (2004) 793-800
4. A.K. Abdullah, Protecting your good name: identity theft and its prevention, in: Proceedings of the First Annual Conference on Information Security Curriculum Development, Kennesaw, Georgia, October 2004, pp. 102-106.
5. Yang C.M., Lin H.C., Chang P., and Jian W.S. Taiwan's perspective on electronic medical records' security and privacy protection: lessons learned from HIPAA. Comput. Meth. Prog. Bio. 82 (2006) 277-282
6. I.L. Horowitz, Privacy, publicity and security: the American context: privacy is not only a right but also an obligation, EMBO Report, vol. 7 (SI) 2006, pp. S40-S44.
7. Hassol A., Walker J.M., Kidder D., Rokita K., Young D., Pierdon S., Deitz D., Kuck S., and Ortiz E. Patient experiences and attitudes about access to a patient electronic health care record and linked web messaging. J. Am. Med. Inform. Assoc. 11 (2004) 505-513
8. Barrows Jr. R.C., and Clayton P.D. Privacy, confidentiality, and electronic medical records. J. Am. Med. Inform. Assoc. 3 (1996) 139-148
9. Serour G.I. Confidentiality, privacy and security of patients' health care information: FIGO Committee for the Ethical Aspects of Human Reproduction and Women's Health. Int. J. Gynecol. Obstet. 93 (2006) 184-186
10. Ball E., Chadwick D.W., and Mundy D. Patient privacy in electronic prescription transfer. IEEE Security & Privacy 1 (2003) 77-80
11. Mandl K.D., Szolovits P., and Kohane I.S. Public standards and patients' control: how to keep electronic medical records accessible but private. Brit. Med. J. 322 (2001) 283-287
12. Mandl K.D., Simons W.W., Crawford W.C.R., and Abbett J.M. Indivo: a personally controlled health record for health information exchange and communication. BMC Med. Inform. Decis. Making 7 (2007) 25 10.1186/1472- 6947-7-25
13. Gritzalis S., Lambrinoudakis C., Lekkas D., and Deftereos S. Technical guidelines for enhancing privacy and data protection in modern electronic medical environments. IEEE Trans. Inf. Technol. Biomed. 9 (2005) 413-423
14. Liu C.T., Yang P.T., Yeh Y.T., and Wang B.L. The impacts of smart cards on hospital information systems-an investigation of the first phase of the national health insurance smart card project in Taiwan. Int. J. Med. Inf. 75 (2006) 173-181
15. Kim M.I., and Johnson K.B. Personal health records: evaluation of functionality and utility. J. Am. Med. Inform. Assoc. 9 (2002) 171-180
16. Churches T. A proposed architecture and method of operation for improving the protection of privacy and confidentiality in disease registers. BMC Med. Res. Methodol. 3 (2003) 1 10.1186/1471-2288-3-1
17. Car J., and Sheikh A. Email consultations in health care: 1-scope and effectiveness. Brit. Med. J. 329 (2004) 435-438
18. Car J., and Sheikh A. Email consultations in health care: 2-acceptability and safe application. Brit. Med. J. 329 (2004) 439-442
19. Gobuty D.E., Leetz W., Horn R.J., and Moehrke J.F. Allocating basic security rules for use in medical imaging information technology. Acad. Radiol. 11 (2004) 779-786
20. Meux E. Encrypting personal identifiers. Health Serv. Res. 29 (1994) 247-256
21. Szolovits P., and Kohane I. Against simple universal health-care identifiers. J. Am. Med. Inform. Assoc. 1 (1994) 316-319
22. Agrawal R., and Johnson C. Securing electronic health records without impeding the flow of information. Int. J. Med. Inf. 76 (2007) 471-479
23. Miller R., Boitnott J.K., and Moore G.W. Web-based free-text query system for surgical pathology reports with automatic case deidentification. Arch. Pathol. Lab. Med. 125 (2001) 1011
24. Berman J.J. Concept-match medical data scrubbing: how pathology text can be used in research. Arch. Pathol. Lab. Med. 127 (2003) 680-686
25. Douglass M., Clifford G.D., Reisner A., Moody G.B., and Mark R.G. Computer-assisted de-identification of free text in the MIMIC II database. Comput. Cardiol. 31 (2004) 341-344
26. Gupta D., Saul M., and Gilbertson J. Evaluation of a deidentification (De-Id) software engine to share pathology reports and clinical documents for research. Am. J. Clin. Pathol. 121 (2004) 176-186
27. Beckwith B.A., Mahaadevan R., Balis U.J., and Kuo F. Development and evaluation of an open source software tool for deidentification of pathology reports. BMC Med. Inform. Decis. Making 6 (2006) 12 10.1186/1472-6947-6-12
28. H. Müller, J. Heuberger, A. Geissbuhler, Logo and text removal for medical image retrieval, in: German Workshop on Medical Image Retrieval (BVM), Springer Informatik Aktuell, Heidelberg, 2005.
29. Newton E.M., Sweeney L., and Malin B. Preserving privacy by de-identifying facial images. IEEE Trans. Knowl. Data Eng. 17 (2005) 232-243
30. K. Pommerening, M. Reng, Secondary use of the electronic health record via pseudonymisation, Medical and Care Compunetics 1, Studies in Health Technology and Informatics, vol. 103, IOS Press, Amsterdam, The Netherlands, 2004, pp. 441-446.
31. Noumeir R., Lemay A., and Lina J.M. Pseudonymisation of radiology data for research purposes. Proc. SPIE 5748 (2005) 298-305
32. D. Appleman, Regular expressions with NET, Desaware Inc., 〈http://www.desaware.com〉, 2002.
33. Watt A. Beginning Regular Expressions (Programmer to Programmer) (2005), Wrox Press, Wiley, Indianapolis, IN
34. American College of Radiology, National Electrical Manufacturers Association, ACR-NEMA Digital Imaging and Communications Standard: DICOM 2008 Part 15 Security Profiles, NEMA, Rosslyn, VA, USA.
35. Weiss N. E-mail consultation: clinical, financial, legal, and ethical implications. Surg. Neurol. 61 (2004) 455-459
36. ASTM International (ASTM), ASTM E2369-05 Standard Specification for Continuity of Care Record (CCR).