Security architecture for multi-site patient records research.

Area of Science:

• Health Informatics
• Data Security
• Clinical Research Management

Background:

• Developing secure patient records databases is crucial for local and multi-site research.
• Ethical and legal considerations necessitate robust security measures in health data management.
• Existing security systems may not fully address the complexities of multi-site research protocols.

Purpose of the Study:

• To develop and implement a comprehensive security system for a patient records research database.
• To ensure compliance with ethical foundations and legal requirements for both local and multi-site studies.
• To evaluate the adequacy of commercial database security features for enforcing research protocols.

Main Methods:

• Conducted a thorough review of ethical and legal frameworks relevant to patient data.
• Designed a security system integrating administrative policies and computer-based tools.
• Implemented the security system at two academic medical centers for multi-site studies.
• Assessed the security enforcement capabilities of commercial database systems.

Main Results:

• A functional security system was successfully developed and implemented.
• Institutional Review Board (IRB) approval processes and Principal Investigator (PI) responsibilities were addressed.
• Commercial database systems demonstrated adequate capabilities for enforcing basic research protocol requirements.
• The implemented system facilitated secure data management for multi-site research.

Conclusions:

• The developed security system effectively addresses the needs of patient records research databases, particularly for multi-site studies.
• Commercial database security features are sufficient for the fundamental enforcement of approved research protocols.
• Integrating administrative policies with technological tools enhances data security and research integrity.