After the gradual implementation of electronic medical records, in addition to the benefits they provide, many people have concerns about how personal health data can be protected. In fact, the Department of Health has taken this issue into account while promoting electronic medical records. Therefore, privacy protection measures, in addition to electronic signatures, are another major focus of implementing electronic medical records.
Current personal data protection laws and regulations related to electronic medical records contain detailed provisions on how to protect individuals' privacy from infringement.
Our hospital, in accordance with electronic medical record regulations, has established a strict personal privacy protection control mechanism; we also underwent an electronic medical record inspection commissioned by the Department of Health to the Hospital Association in November of year 99.
In fact, our hospital places great importance on protecting patients' personal privacy rights, and lists the following important personal privacy protection measures
Privacy Protection Measures:
International Security Certification:
For the data center equipment and hardware/software facilities that store electronic medical records, our hospital has established comprehensive construction and monitoring standard operating procedures. Moreover, this SOP received international ISO‑27001 information security management certification in October of year 99.
Patient Consent:
With the patient's consent, the patient's health insurance IC card, the attending physician's staff card, and the patient consent form are required to carry out inter‑hospital electronic medical record exchange.
Proactive Lock Control:
For highly sensitive medical records, our hospital has regulations that require a strict review process before they can be accessed. Additionally, in inter‑hospital exchanges, self‑pay items are not exchanged to protect personal privacy.
Proactive Lock Control:
For users of electronic medical records, whether adding, deleting, modifying, or reviewing records, the system retains logs and the original version prior to modification for later tracking.
