Security requirements and solutions in electronic health records: Lessons learned from a comparative study

Journal of Medical Systems

Volumn 34, Issue 4, 2010, Pages 629-642

  Farzandipour, Mehrdad ^a   Sadoughi, Farahnaz ^b   Ahmadi, Maryam ^b   Karimi, Iraj ^b  

^a KASHAN UNIVERSITY OF MEDICAL SCIENCES   (Iran)

^b IRAN UNIVERSITY OF MEDICAL SCIENCES   (Iran)

Author keywords

Electronic health records; Information security; Security model; Security requirements

Indexed keywords

ARTICLE; COMPUTER SECURITY; INFORMATION PROCESSING; MEDICAL INFORMATION SYSTEM; MEDICAL RECORD; AUSTRALIA; CANADA; COMPARATIVE STUDY; ELECTRONIC MEDICAL RECORD; HUMAN; INFORMATION SYSTEM; STANDARDS; UNITED KINGDOM; UNITED STATES;

AUSTRALIA; CANADA; COMPUTER SECURITY; ELECTRONIC HEALTH RECORDS; ENGLAND; HUMANS; INFORMATION MANAGEMENT; UNITED STATES;

EID: 77956057059     PISSN: 01485598     EISSN: None     Source Type: Journal    
DOI: 10.1007/s10916-009-9276-7     Document Type: Article

References (27)

1. National Electronic Health Records taskforce [Internet]. A health information Network for Australia. 2000 July-[cited 2006]. Available from: http://www.health.gov.au/internet/hconnect/publishing.nsf/content/ 7746B10691FA666CCA257128007B7EAF/$File/ehrrept.pdf.
2. R. Lyons C. Payne M. McCabe C. Fielder 1998 Legibility of doctor's hand writing: quantitative comparative study BMJ 317 863 864
3. B. Woodward 1995 The computer-based patient record and confidentiality N. Engl. J. Med. 333 1419 1422 10.1056/NEJM199511233332112
4. Aspen Reference Group, Health information management manual, 1st ed. Aspen: Maryland, 1999, p. 5:1.
5. M. Van der Haak, et al. 2003 Data security and protection in cross institutional electronic patient records Int. J. Med. Inform. 70 117 130 10.1016/S1386-5056(03)00033-9
6. Zahedifar, R., Study rate of respect for patients Rights in Medical Records Units of Isfahan University of Medical Sciences [Thesis]. Medical Information Management Faculty, Tehran: Iran University of Medical Sciences, 2002.
7. Salahi, M., An Investigation on Conditions of Storage and Retrieval of Patients' Medical Records in Teaching Hospitals of Iran University of Medical Sciences and Their Comparison with National Standards and Standards in the US. [Thesis]. Medical Information Management Faculty, Tehran: Iran University of Medical Sciences, 1998.
8. HIMSS [Internet], 2004 HIMSS National health information infrastructure survey; 2004 July-[cited 2006]. Available from http://www.himss.org/content/ files/2004.
9. Canada Health infoway [Internet], Infoway pan-Canadian EHR survey phase. I. Results and Analysis; 2003 January-[cited 2006]. Available from: http://www.canadahealthinfoway.ca/pdf/EHR-survey-phaseI.pdf.
10. Bitaraf, E., Riazi, H., and Fathi Roodsari, B., Comparative study of Electronic Health in the word, 2/2 ed. Ministry of Health and Medical Education: Tehran, 2007, p. 398.
11. Riazi, H., Fathi Roodsari, B., and Bitaraf, E., Electronic health record, concepts, standards and development approaches, 1st ed. Ministry of Health, and Medical education: Tehran, 2007, p. 125.
12. Cornwall, A. [internet]. Electronic health Records: An international perspective; 2002-[cited 2006]. Available from: http://www.home.vicnet.net.au.
13. Gupta, A. K. [Internet]. How to protect Your Data when you are on the web. 2008 Apr-[cited 2009]. Available from: http://www.aafp.org/fpm/20080400/ 29howt.html-.
14. Itiran [Internet], Looking to progress path of electronic health records. 2008 Oct-[cited 2009]. Available from: http://itiran.com/?type=article&id= 9999.
15. Commonwealth Department of Health and Aged Care [Internet], The benefits and difficulties of introducing a national approach to electronic health records in Australia; 2002 April-[cited 2006]. Available from: http://www.health.gov. au.
16. Commonwealth of Australia [Internet], International approaches to the electronic health record; 2003 January-[cited 2006]. Available from: http://www.healthconnect.gov.au/internet/hconnect/publishing.nsf/Content/ 43598FE37A3E7270CA257128007B7EB7/$File/v3-1.pdf.
17. National committee on vital and Health statistics [Internet]. Information for health; 2001 November-[cited 2006]. Available from http://www.ncvhs.hhs. gov/nhiilayo.pdf.
18. Behnam, S., A Comparative Study of Accessibility levels and confidentiality of Medical Records in Selected Countries [Thesis]. Medical Information Management Faculty, Tehran: Iran University of Medical Sciences; 2005.
19. CIHI [Internet]. Privacy and Confidentiality of health information at Canadian institute for health information; 2002-[cited 2006]. Available from: http://www.secure.cihi.ca/cihiweb/en/downloads/privacy-policy-priv2002-e.pdf.
20. Department of Health and Human Services [Internet]. 45CFRparts 160,162 and 164 Health Insurance Reform: security standard; Final Rule; 2003 February-[cited 2009]. Available from: http://www.hipaa.org.
21. Canada Health infoway [Internet]. Electronic Health Record privacy and security Requirements; 2005-[cited 2006]. Available from: http://www. canadahealthinfoway.ca.com.
22. ABC pty Ltd IT Services [Internet]. Information Security Controls and procedures manual; 2006-[cited 2006].Available from: http://www.maralan.com.au.
23. NHS [internet]. IM &T security policy; 2004 Nov-[cited 2006]. Version 1.1. Available from: http://www.northumberlandcaretrust.nhs.uk.
24. Mohammad pour A. A Comparative Study on the Hospital Standards of Ministry of Health and International Standards of Joint Commission on Accreditation of Hospital [Thesis]. Medical Information Management Faculty, Tehran: Iran University of Medical Sciences; 2006.
25. AHIMA [Internet]. The state of HIPAA privacy and security compliance. 2006 April-[cited 2009]. Available from: http://www.ahima.org/emerging-issues/ 2006statefHIPAAcompliance.pdf.
26. Schaectel, D., How to build safety management system, 1st ed. Professional Safety: USA, 1997.
27. Schackow, E., Palmer, T., Epperly, T. [Internet]. How to protect your patient Data. 2008 Jun-[cited 2009]. Available from: http://www.aafp.org/fpm/ 20080600/a3ehrm.html-.