Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

Tail of e-health must not wag the dog of personal health care: report

Protection of the individual is the primary function of personal health care data, says APF

The protection of the individual is the primary function of personal health care data and the tail of health administration and research must not be permitted to wag the dog of personal health care, according to an Australian Privacy Foundation (APF) policy position document.

The document, eHealth Data and Health Identifiers, sets out the APF principles for assessing eHealth initiatives and eHealth regulatory measures.

“Calls for a general-purpose national health record are for the benefit of tertiary users (administration, insurance, accounting, research, etc), not for the benefit of personal health care,” the document reads.

"The tail of health and public health administration and research must not be permitted to wag the dog of personal health care."

Among the specific criteria in the document:

  • The health care sector must remain a federation of islands
  • Consolidated health records must be the exception not the norm
  • Identifiers must be at the level of individual applications
  • Pseudo-identifiers must be widely-used
  • Anonymity and persistent pseudonyms must be actively supported
  • All accesses must be subject to controls
  • All accesses of a sensitive nature must be monitored
  • Personal data access must be based primarily on personal consent
  • Additional authorised accesses must be subject to pre- and post-controls
  • Emergency access must be subject to post-controls
  • Personal data quality and security must be assured
  • Personal access and correction rights must be clear, and facilitated

The AFP has a particular focus on e-health. Last year, it awarded the NSW Department of Health the Most Invasive Technology prize in is Big Brother Awards, the ‘Orwells’. The department won for introducing its electronic health record system Health-e-Link with only an opt-out for patients instead of the opt-in requirement of the Health Privacy Law.

“The failure to allow partitioning of sensitive health information, the lack of controls on authorised users, and failure to pilot both opt-in as well as opt-out systems could threaten public trust in what could be an immensely valuable tool for improving both individual and population health,” said Orwells judge, Associate Professor at the Faculty of Law, University of Sydney, Dr Roger Magnusson.

Nominations are now open for this year’s Big Brother awards at www.privacy.org.au.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: Brother, Department of Health, NSW Department of Health, NSW Department of Health, Privacy Foundation, University of Sydney, University of Sydney
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: AFP, data privacy, e-health, government, privacy, security
Latest Blog Posts
Whitepapers
  • A Governance Guide for Hybrid SharePoint Migrations
    Cloud-based computing represents a powerful new option for managing enterprise content, offering increased flexibility, efficiency, and reduced cost for IT infrastructure, data storage, and applications. However, for a variety of business and technical reasons, most organisations will take a phased approach to adopting cloud-based services, which will require them to continue to maintain their on-premises SharePoint environments during the transition. This white paper, written by Chris Beckett from SharePoint Bits, discusses some of the benefits and risks of hybrid SharePoint deployments, and presents governance considerations that are essential for ensuring a successful migration.
    Learn more »
  • INFORMATION FOR SUCCESS - Customers Achieve Extreme Performance at Lowest Cost with Oracle Exadata Database Machine
    How do you prioritize IT investments to ensure support for growing volumes of data and still meet your business users’ evolving requirements—such as competing more effectively, reducing IT costs, meeting compliance requirements, or anticipating changing market conditions? Read on.
    Learn more »
  • Protecting Against the Leading Causes of Data Breach
    This whitepaper was written for the organisation that wants to focus on prevention of data loss and doesn’t have millions to spend, but needs affordable solutions that can be implemented today to protect millions of sensitive records and dollars worth of intellectual property. This whitepaper addresses: - What organisations can do to prevent the four leading causes of data breaches - Why dedicated (pure-play) DLP solutions may not protect you from all four leading causes of data breaches - How to get prevent sensitive data leaving your organisation
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments