Privacy and security issues in a wide area health communications network

Area of Science:

• Health Informatics
• Information Security
• Public Health Policy

Background:

• The first national health information service in New Zealand commenced in 1993.
• It utilizes commercial network services for all health data communications.
• The system connects health personnel, insurers, and government-managed health resources.

Purpose of the Study:

• To detail the implementation and operational framework of New Zealand's national health information service.
• To address the challenges of ensuring privacy, security, and data integrity in a national health network.
• To highlight the mechanisms for managing user access and certifying system compliance.

Main Methods:

• Implementation of a Code of Practice under the New Zealand Privacy Act for health information.
• Development of unique identification systems for individual transaction auditing.
• Establishment of certification processes for user installations to ensure compliance with standard test scripts.

Main Results:

• A secure platform for sharing personalized health data was established, fostering confidence among users.
• Efficient user privilege assignment for large organizations like hospitals was enabled.
• Robust mechanisms were put in place to ensure the integrity of critical health data transfers.

Conclusions:

• The New Zealand national health information service successfully integrates privacy, security, and accessibility for health data.
• The established framework supports efficient healthcare operations and protects sensitive patient information.
• Certification and auditing processes are crucial for maintaining trust and safety in health information exchange.