Foundational knowledge LP 5: Advancing security and privacy of EHR in the present day
A series of measures are currently being taken in order to standardize the development and use of EHR in the present days. The authorities responsible for developing standards for HER development and use have also developed different tools to help EHR producers and users. Some examples include:
Health Level Seven International (HL7) developed some implementation guides aimed to help organizations to properly implement the HL7 standards.
GDPR also established an European Data Protection Board (EDPB) is an independent European body which shall ensure the consistent application of data protection rules throughout the European Union. The EDPB is composed of the representatives of the national data protection authorities of the EU/EEA countries and of the European Data Protection Supervisor. The EDPB tasks consist primarily in providing general guidance on key concepts of the GDPR and the Law Enforcement Directive, advising the European Commission on issues related to the protection of personal data and new proposed legislation in the European Union, and adopting binding decisions in disputes between national supervisory authorities. The GDPR tool also offers a checklist that helps organizations to be more secure, protect customers’ data, and avoid costly fines for non-compliance.
HIIPA developed a Security Risk Assessment Tool for assisting small and medium-sized health care practices and business associates as they perform a risk assessment. The tool helps organizations ensure they are compliant with HIPAA’s administrative, physical, and technical safeguards. A risk assessment also helps reveal areas where the organization’s protected health information (PHI) could be at risk. A HIPAA Security Toolkit Application also exists, which is self-assessment survey intended to help organizations better understand the requirements of the HIPAA Security Rule (HSR), implement those requirements, and assess those implementations in their operational environment. A comprehensive user guide and instructions for using the application are available along with the HSR application.