OpenEHR and General Data Protection Regulation: Evaluation of Principles and Requirements

• Tipo: Artigo em Revista Científica Internacional
• Data: 2019

Autores

Goncalves Ferreira, D (Autor) Outra; Mariana Sottomayor (Autor) FCUP; Bacelar Silva, G (Autor) Outra; Frade, S (Autor) Outra; antunes, l (Autor) FCUP; Beale, T (Autor) Outra; Ricardo Cruz Correia (Autor) FMUP

Revista

A Revista está pendente de validação pelos Serviços Administrativos.

Título: JMIR MEDICAL INFORMATICS

Vol. 7

ISSN: 2291-9694

Indexação

ISI Web of Knowledge - 11 Citações

Scopus - 14 Citações

Outras Informações

ID Authenticus: P-00Q-DNS

DOI: 10.2196/medinform.9845

Abstract (EN): Background: Concerns about privacy and personal data protection resulted in reforms of the existing legislation in the European Union (EU). The General Data Protection Regulation (GDPR) aims to reform the existing directive on the topic of personal data protection of EU citizens with a strong emphasis on more control of the citizens over their data and in the establishment of rules for the processing of personal data. OpenEHR is a standard that embodies many principles of interoperable and secure software for electronic health records (EHRs) and has been advocated as the best approach for the development of hospital information systems. Objective: This study aimed to understand to what extent the openEHR standard can help in the compliance of EHR systems to the GDPR requirements. Methods: A list of requirements for an EHR to support GDPR compliance and also a list of the openEHR design principles were made. The requirements were categorized and compared with the principles by experts on openEHR and GDPR. Results: A total of 50 GDPR requirements and 8 openEHR design principles were identified. The openEHR principles conformed to 30% (15/50) of GDPR requirements. All the openEHR principles were aligned with GDPR requirements. Conclusions: This study showed that the openEHR principles conform well to GDPR, underlining the common wisdom that truly realizing security and privacy requires it to be built in from the start. By using an openEHR-based EHR, the institutions are closer to becoming compliant with GDPR while safeguarding the medical data.

Idioma: Inglês

Tipo (Avaliação Docente): Científica

Nº de páginas: 12