Security in the Dutch electronic patient record system

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2010, Pages 21-31

  Van't Noordende, Guido ^a  

^a UNIVERSITY OF AMSTERDAM   (Netherlands)

Author keywords

design; electronic medical records; security

Indexed keywords

AUTHENTICATION AND AUTHORIZATION; CENTRAL COMPONENT; ELECTRONIC MEDICAL RECORD; ELECTRONIC PATIENT RECORD SYSTEM; HEALTH PROFESSIONALS; HIGH LEVEL DESCRIPTION; MEDICAL RECORD; NETHERLANDS; PATIENT RECORD; SECURITY; SECURITY AND PRIVACY; SECURITY ARCHITECTURE;

AUTHENTICATION; HEALTH RISKS; MEDICAL COMPUTING;

DESIGN;

EID: 78650182279     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1866914.1866918     Document Type: Conference Paper

References (30)

1. Nictiz. AORTA Documentation Release. http://www.infoepd.nl/informatiepunt com/ aorta-documentatierelease 2008 totaal.php, October 2008.
2. U.K. National Health Service (NHS). SPINE - NHS Connecting for Health. http://www.connectingforhealth.nhs.uk/systemsandservices/spine.
3. J.C.J. Dute et al. Rapport Evalutatie WGBo. 2003.
4. Working Party Article 29. Working Document 131 regarding the processing of personal data relating to health in electronic health records (EHR). http://ec.europa.eu/justice home/fsj/ privacy/workinggroup/wpdocs/2007 en.htm, February 2007.
5. Marie-José Bonthuis. Privacy en het Landelijk Electronisch Patientendossier (EPD), Universiteit Groningen. 2007.
6. Dutch ministry of health, welfare and sports (VWS). Wet op de Geneeskundige BehandelingsOvereenkomst (WGBO). http://www.hulpgids.nl/wetten/ wgbo.htm, 1994.
7. Sectorale Berichten Voorziening in de Zorg (SBV-Z). http://www.sbv-z.nl/, 2009.
8. Wijziging van de Wet gebruik burgerservicenummer in de zorg in verband met de electronische informatieuitwisseling in de zorg (31-466). Eerste Kamer 31 466, A, SDU publishers, 2008-2009.
9. Nictiz. Programma van Eisen aan een GBZ (PvE GBZ). http://www. aortarelease.nl/content/inf/ Programma van Eisen GBZ.html, 2007.
10. Health Level 7 standards for interoperability of health information technology. http://www.hl7.org/.
11. D. Cappelli, A. Moore, R. Trzeciak, T. Shimeall. Common Sense Guide to Prevention and Detection of Insider Threats, 3d edition - v3.1. CERT Report, Carnegie-Mellon University, January 2009.
12. Ross Anderson. Security Engineering, 2nd edition. Wiley, 2008.
13. Ken Thompson. Reflections on Trusting Trust (Turing award Lecture). Communications of the ACM Vol.27(8), August 1984.
14. Ministerie van VWS. Informatie en bezwaarschrift EPD. 2008.
15. Nictiz. Personal communication. 2010.
16. European Parliament and the Council. Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data. http://ec.europa.eu/justice home/fsj/ privacy/docs/95-46-ce/dir1995-46 part1 en.pdf, October 1995.
17. Nictiz. Memo behandelrelatie en additionele GBZ-eisen. april 2009.
18. Minister A. Klink. Memorie van antwoord bij de Wijziging van de Wet gebruik burgerservicenummer in de zorg in verband met de electronische informatieuitwisseling in de zorg (31-466). Eerste kamer der staten-Generaal, September 2009.
19. Stenographic report of the EPD Roundtable meeting in the Dutch Senate. Eerste Kamer der Staten-Generaal, March 2010.
20. M. Katzenbauer. Te vroeg voor landelijk EPD. medisch contact 64 nr.20, pages 880-883, May 2009.
21. Stenographic report of the EPD Expertmeeting in the Dutch Senate. Eerste Kamer der Staten-Generaal, December 2009.
22. CSC - Internal protection of the Dutch LSP. Talk at the Dutch Organization of Hospitals (NVZ), Dec. 2009.
23. B. Jacobs, S. Nouwt, A. de Bruijn, O. Vermeulen, R. van der Knaap, C. de Bie. Beveiligingseisen ten aanzien van identificatie en authenticatie voor toegang zorgconsument tot het Electronisch Patientendossier (EPD). Report by PriceWaterhouseCoopers, Radboud Universiteit Nijmegen, and Universiteit van Tilburg, December 2008.
24. Google Health. https://www.google.com/health.
25. Microsoft Health Vault. http://www.healthvault.com/.
26. R. Anderson, I. Brown, T. Dowty, P. Inglesant, W. Heath, A. Sasse. Database State. Report commissioned by the J. Rowntree Reform Trust, 2010.
27. T. Greenhalgh, K. Stramer, T. Bratan, E. Byrne, J. Russell, S. Hinder, H. Potts. The devil's in the detail: Final report of the independent evaluation of the Summary Care Record and HealthSpace programmes. University College London, May 2010.
28. R. Anderson. A Security Policy Model for Clinical Information Systems. IEEE Symposium on Security and Privacy, Oakland, 1996.
29. Office of the Auditor General of British Columbia. The PARIS System for Community Care Services: Access and Security. On: http://www.bcauditor.com/, 2010.
30. Niels Sijm. Onderzoeksrapport LSP. https://www.os3.nl/ media/2007-2008/courses/rp2/ns-report.pdf, 2008.