E-health: privacy, security questioned
SECURITY| Feb. 7, 2013, 6:20 a.m.
By Issa Sikiti da Silva, in Dakar, Senegal
Although they would not say it in public, many professionals in Africa, as well as in the developed world, have admitted that e-health implementation could be affected by privacy and security issues, an analyst told Biztechafrica in Dakar.
“There will be a lot of data sharing in e-health systems among various healthcare providers and professionals, meaning people’s medical records will be out there in the open, moving from John to Paul to Mary, and that it’s making many professionals very uncomfortable,” IT consultant Ibrahima Ndoye said.
“The big question now is will these systems through which this data will move be safe, secure and effective? This is EPR we’re talking about here, and it’s not only a sensitive issue, but also confidential.”
EPR stands for electronic patient records, and basically consists of digitised paper-based records. Some however call it EHR, electronic health records.
“People shouldn’t just jump of joy about this e-health thing, it’s a very complicated situation that needs a strong legal framework, and in places such as Africa where chaos and inconsistency reign every day in the governance of these systems, the worries and concerns are justified.”
Ndoye’s sentiments seemed to be echoed by Naipeng Dong, Hugo Jonker and Jun Pang, of the Faculty of Sciences, Technology and Communication at the University of Luxembourg.
They said: “E-health systems have to deal with a far more complex constellation of roles: doctors, patients, pharmacists, insurance companies, medical administration, etc.
“Each of these roles has access to different private information and different privacy concerns. As existing privacy approaches from other domains are not properly equipped to handle such a diverse array of roles, privacy must be tailored to the health-care domain.”
Ndoye said each and every system will have to be fitted with strong monitoring mechanisms to ensure that medical data that goes through is not tampered with. “I don’t think e-health will move forward if the privacy and safety concerns are properly addressed,” he said.
Privacy in e-health has been recognised as one of the paramount requirements necessary for adoption by the general public, according to Dong, Jonker and Pang wrote.
The issue of privacy and security of e-health records sparked a heated debate in Australia last year, with various experts and political parties urging the government to amend some sections of Personally Controlled E-Health Record Bills (PCEHR) before passed into law.
One such party was the Greens, who recommended that the government make five amendments to the proposed legislation to include greater privacy protections.
“The issue of privacy and security is an ongoing debate, even in the countries where e-health has supposedly been adopted. There is still some pockets of resistance out there who fear the unknown, and their fears are truly justified.”
MORE SECURITY NEWS
Cisco report predicts next generation of ransomwareCisco’s 2016 Midyear Cybersecurity Report predicts the next generation of ransomware and new tactics emerging to maximise profit. Read More
Arbor Networks releases global DDoS attack data for first half of 2016Arbor Networks Inc., the security division of NETSCOUT, has released global distributed denial-of-service (DDoS) attack data for the first six months of 2016, which shows a continuing escalation in both the size and frequency of attacks. Read More
F5 introduces standalone security products to defend against targeted attacksF5 DDoS Hybrid Defender provides superior infrastructure protection by combining multilayered DDoS defence across network, session, and application layers. Read More
Ethical Hacking students can’t get a heck of a jobBotswana ethical hacking students report that they are failing to break into the local job market. Read More
Pokémon GO: Sophos warns against malicious copycatsResearchers at IT security company Sophos have warned mobile users to be cautious when downloading augmented reality (AR) mobile games. Read More
New PCI multifactor authentication rules: Is it too late?The PCI (Payment Card Industry) Security Council has extended its requirements for multi-factor authentication to anyone who has access to credit card data. Read More
Web apps, a leading cause of security breachesWeb applications are the leading cause of security incidents for financial services, according to the 2016 Verizon Data Breach Investigation Report; this is up from 31 percent from last year’s report. Read More
Analyst firm Ovum publishes SWOT analysis of Arbor Networks Spectrum v2.1Arbor Networks has announced that leading global telecoms analyst firm, Ovum, had published a strengths, weaknesses, opportunities and threats (SWOT) analysis of version 2.1 of Arbor Networks Spectrum. Read More
New RSA Via solution innovations strengthen identity assurance and governanceRSA, The Security Division of EMC, has announced new, innovative identity assurance and identity governance capabilities in RSA Via, designed to help organisations effectively balance security and user convenience as they assure identities and better govern and manage privileged access. Read More
FEATURED STORYFirst-ever Africa Barclays Accelerator programme concludes
Ten fintech companies have concluded the first-ever Barclays Accelerator, powered by Techstars in Africa.
BEST READ NEWS
IN DEPTHEthical Hacking students can’t get a heck of a job
Botswana ethical hacking students report that they are failing to break into the local job market.