Managing medical information systems: can patients’ privacy be protected or should we simply give up?

International Journal of Healthcare Technology and Management

Volumn 2, Issue 1-4, 2000, Pages 296-336

  Gattiker, Urs E ^a   Fahs, Rainer ^b   Blaha, Jaroslav ^b  

^a AALBORG UNIVERSITY   (Denmark)

^b NATO Air Command Control Systems Management Agency (NACMA)   (Belgium)

Author keywords

costs benefit analysis; cryptography; digital signature; encryption; health cards; Healthcare; privacy; regulation; secret key cryptography

Indexed keywords

EID: 84951714338     PISSN: 13682156     EISSN: 17415144     Source Type: Journal    
DOI: 10.1504/ijhtm.2000.001074     Document Type: Article

References (53)

1. ‘Coughing up’, (1997) The Economist, p. 94, October 25
2. Szlovits, P., Doyle, J., Long, W. J., Kohane, I. and Pauker, S.G. (1994) May ‘Guardian angel: Patient-centred health information systems’. (http://medg.lcs.mit.edu/project/ga/publications.html) (July 19, 1997).
3. Walsh, G. (1996) The Walsh Report, October, (http://www.efa.org.au/Issues/Crypto/Walsh/Walsh.htm) (August 31, 1997).
4. Privacy International. (1996) The Universal Declaration of Human Rights. URL:http://www.privacy.org/pi/intl_orgs/un/intl-decl-human-rights.txt (February 11, 1998).
5. Doss, E. and Loui, M.C. (1995) ‘Ethics and the privacy of electronic mail’, The Information Society, Vol. 11, pp.223–235.
6. OECD (1980) OECD Guidelines Governing The Protection Of Privacy And Transborder Flows Of Personal Data. November, Paris, Author.
7. Katsh, E. (1994) ‘Privacy and new information technologies’, Paper delivered to 18th Regional Conference the History and Philosophy of Science, University of Colorado, Boulder, Co.
8. Culnan, M.J. (1993) ‘How did they get my name?: an exploratory investigation of consumer attitudes toward secondary information use’. MIS Quarterly, Vol. 17, pp.341–363.
9. ‘The Wassenaar arrangement on export controls for conventional arms and dual-use goods and technologies’ (1995) December 20, (http://ideath.parrhesia.com/wassenaar/wassenaar.html) (March 4, 1998).
10. Swiss police have secretly tracked the whereabouts of mobile phone users via a telephone company computer that records billions of movements going back more than half a year (as reported in a Swiss Sunday newspaper), (Dec 28, 1997). Reuters.
11. Schlossberg (1993) Victims tired of researchers getting away with murder’, Marketing News, August 16, A16, p.1.
12. Giussani, B. (1998) ‘An appraisal or technologies of political control’, February 24, Eurobites, p.1.
13. van Swaay, M. (1995) ‘The value and protection of privacy’, Computer Networks and ISDN Systems, Vol. 26 (Suppl. 4), pp.149–155.
14. Bloom, P.N., Milne, G.R. and Adler, R. (1994) ‘Avoiding misuse of new information technologies: legal and societal considerations’, Journal of Marketing, Vol. 58, pp.98–110.
15. Avrahami, R. (1996) ‘List sale case to the VA Supreme Court’. Computer Privacy Digest, Vol. 9, No. 23, pp.3–4, October 6, ()
16. Spriggs, M.T. and Nevin, J.R. (1996) ‘Negative option selling plans: current forms versus existing regulation’, Journal of Public Policy & Marketing, Vol. 15, pp.227–237.
17. ‘The people vs. AOL’ (1998) Adbusters. Journal of the Mental Environment, Winter, No. 20, p. 60.
18. Gattiker, U.E., Kelb, J., Janz, L., Holsten, H., Greshake, J., Schwenteck, O. and Miller, J. (1997) ‘Direct marketing and privacy for telephone and Internet users: a South African field study’, Global Business in Practice. Proceedings of the Tenth International Bled Electronic Commerce Conference, Bled, Slovenia, pp.604–639.
19. Anderson, R. (1996) ‘Security in clinical information systems’, January 12, (http://www.cl.cam.ac.uk/ftp/users/rja14/policy.txt) (January 23, 1998).
20. Gattiker, U.E. and members of EICAR Working Group 1. (1997) ‘Internet security: strategic and social issues’, Proceedings of the European Institute for Computer Anti-Virus Research (EICAR) 1997 Security Workshop, Hamburg, Germany pp.173–211 (see also http://tim.weburb.dk/index.php3?src=13).
21. Blaze, M., Diffie, W., Rivest, R.L., Schneier, B., Shimomura, T., Thompson, E. and Wiener, M. (1996). ‘Minimal key lengths for symmetric ciphers to provide adequate commercial security’. (ftp://research.att.com/dist/mab/keylength.txt) (July 10, 1997).
22. Denning, D.E., and Baugh, W.E. Jr. (1997) Encryption and Evolving Technologies as Tools of Organized Crime and Terrorism. (http://guru.cosc.georgetown.edu/~denning/crypto/ocabs.html) December 15.
23. McClosky, H. and Brill, A. (1983) Dimensions Of Tolerance: What Americans Believe About Civil Liberties. New York, Russel Sage Foundation.
24. Gattiker, U.E. and Kelley, L. (1999) ‘Morality and computers: attitudes and differences in moral judgments across populations’, Information Systems Research, Vol. 10, pp.223–254.
25. European Commission, Telecommunications, Information Market and Exploitation of Research (1997) Ensuring security and trust in electronic communication, October, Brussels: The Author (COM(97)503.
26. OECD (1997). Report On Background And Issues Of Cryptography Policy. Paris: The Author.
27. Bundesministerium fuer Bildung, Wissenschaft, Forschung und Technologie (1997) October 8, Verordnung zur digitalen Signatur (Signaturverordnung – SibV). (Regulation for digital signatures) (http://www.iid.de/rahmensigv.html) (1998) February 28, (unofficial English translation can be found at (http://ourworldcompuserve.com/homepages/ckuner).
28. Loi No. 90-1170 (1997) December 29, Article No. 28. ‘Telecommunications law’, (http://www.legifrance.fr) (Accessed March 1, 1998). This law is currently being modified according to Loi No. 96-659, 26.7.96 de réglementation des télécommunications art 17; (http://www.telecom.gouv.fr/francais/activ/telecom/nloi17.htm) (December 17, 1997)
29. Thorel, J. (1997) ‘Frenchy Cryptosoap #123578’. Lambda, December, 18, Vol. 3.08, p.1 (see also http://www.freenix.fr/netizen/chiffre/avis-cssp.html).
30. Council of Ministers (1997) Schema Di Regolamento Atti, Documenti E Contratti In Forma Elettronica (regulatory framework for electronic documents and contracts in electronic form). Approved by the Italian Council of Ministers, August 5.
31. ‘Towards a European framework for digital signatures and encryption’ (1997) October 8, European Internet Forum Policy Papers (http://www.ispo.cec.be/eif/policy) (October 13, 1997).
32. Freeman, R.E. (1984) Strategic Management: A Stakeholder Approach, Boston, MA, Pitman.
33. Donaldson, T. and Preston, L. (1995) The Stakeholder Theory of the Corporation: Concepts, Evidence and Implications. Academy of Management Review, Vol.20, No. 1, pp.65–91.
34. Ulhøi, J.P. (1997) ‘A stakeholder approach to green innovation’, In Proceedings of The Fourth International Meeting of the Decision Science Institute, pp.74–77, Sydney.
35. Ulhøi, J.P. and Madsen, H. (1998) ‘Greening of industry in a push-pull stakeholder perspective: theory, experiences and implications’, Working Paper, Aarhus School of Business.
36. March, J.G. and Simon, H.A. (1958) Organizations. New York, John Wiley.
37. Mitchell, R.K., Agle, B.R. and Wood, D.J. (1997) ‘Toward a theory of stakeholder identification and salience: defining the principle of who and what really counts’, Academy of Management Review, Vol. 22, pp.853–886.
38. ‘Striking the right balance. Access to health information’ (1996) December 5, (http://www.health.gov.ab/access.htm) (July 21, 1997).
39. Pitchford, R.A. and Kay, S. (1995) ‘GP practice computer security survey’, Journal of Informatics and Primary Care, September, pp.6–12.
40. Gostin, L.O., Lazzarini, Z. and Flaherty, K.M. (not dated) ‘Legislative survey of state confidentiality laws, with specific emphasis on HIV and immunization’, (http://epic.org/privacy/medial/cdc_survey.htm), July 18, 1997.
41. ‘Sequoia Software chosen to link US patient records’ (1997) October 24, (http://www.microsoft.com/industry/health/press/Sequoiapr.htm) (January 23, 1997).
42. NCSA (National Computer Security Association) (July 1997) ‘Firewall user profile’, An NCSA Focus Report. Carlisle, PA, The Author.
43. Abelson, H., Anderson, R., Bellovin, S.M. Beneloh, J., Blaze, M., Diffie, W. Gilmore, J., Neumann, P.G., Rivest, R.L., Schiller, J.I. and Schneider, B. (1997) ‘The risks of key recovery, key escrow, and trusted third-party encryption’. (ftp://research.att.com/dist/mab/key_study.txt) (July 1, 1997).
44. ‘Government introduces draft legislation to protect the privacy of health information’ (June 11, 1997). (http://www.gov.ab.ca/~pab/4984.html), October 28, 1997.
45. Harley, D. (1998) ‘Re-floating the Titanic: dealing with social engineering attacks’, Proceedings of the European Institute for Computer Anti-Virus Research (EICAR) 1998 Conference on ‘Web-Safety’ Munich, Germany, pp.1–27.
46. ‘Strategic partner selected to develop a blueprint for an Alberta health information system’, (1997) July 14, (http://www.gov.ab.ca/~pab/5130.html) (October, 28, 1997).
47. Bill 68 (1993) Chap. 17 (1993) ‘An act respecting the protection of personal information in the private sector’. Gazette Officielle du Québec, Vol. 125, pp. 4253–4279, August 4,
48. Information Policy Committee, National Information Infrastructure Task Force (1997) ‘Options for promoting privacy on the national information infrastructure’, April, (http://www.iitf.nist.gov/ipc/ipc-pub.html), July 22, 1997.
49. Directive of the European Parliament and the Council (adopted by the Council on 24th of July, 1995) On the protection of individuals with regard to the processing of personal data and on the free movement of such data (final). Bruxelles: The Author.
50. Council Regulation (EC) 3381/94, (1994) December 19, ‘Setting up a community regime for the control of exports of dual-use goods’, OJ L 367/1, 31.12.94. Council Decision 94/942/CFSP, 19.12.94 establishes the lists of dual-use goods covered by the Regulation, OJ L 367/8, 31.12.94.
51. DTI (1997). Licensing of TTPs for the provision of encryption services – DTI. Public Consultation Paper # 3. Brussels, The Author, (http://www.dti.gov.uk/pubs/), December 17.
52. Akdeniz, Y. (1998) ‘No chance for key recovery: Encryption and international principles of human and political rights’. Working Paper, University of Leeds, UK.
53. ‘Cryptographic algorithms’ (not dated). (http://www.cs.hut.fi/ssh/crypto/algorithms.html) (Accessed July 15, 1997).