Implementing data privacy and security (the Slovenian experience)

Data protection is carried out in two steps. The legislation covers data privacy in general as well as its projection in health care. Its purpose was to leave no personal data undefined within the national health care system. The regulations deal with procedures and anticipated corrective actions, rendering a so-called "organisational prescription". Its purpose was to assure data security through an appropriate information system.