PATIENT DATA PRIVACY AND IMPACT TO E-HEALTH POLICY (EHP) – SRI LANKAPostgraduate Diploma in Information Systems Management 2015/2016PgDISM 501 - Information Policy - Group Assignment

Conducted by Dilshan Ranasinghe

CONTENT• Introduction

• “National E- Health Policy” and framework

• Cost of “Patient Data Privacy” breached ?

• How to strengthen “Patient Data Privacy “

• Benefits of Empowerment

‘Public health is the arena in which clinical medicine, epidemiology, management, politics, and the law all meet or perhaps more accurately, collide.‘ 

- International Journal of Epidemiology Volume 30, Issue 6Pp. 1221-1225 (2001)

INTRODUCTION The Government evolved need of National E- Health Policy

due rapid development and adoption of E-Government and as new trends in health services all over the world because digitizing health information has helped to improve the quality of health care services.

How ever attempt to evangelize the Heath Care Sector to incorporate and adopt E-Health Policy which felicitate long term benefits to National Health Policy, has resulted severe challenges in Patient Data security, privacy and confidentiality of patient’s information.

“Computerized medical records will enable statistical analysis to be used to determine which treatments are most effective.”- Temple Grandin

“NATIONAL E- HEALTH POLICY” AND FRAMEWORK

• Gives the guiding principal, aimed at implementation of Information and Communication Technology in the healthcare sector of Sri Lanka

Vision

• To streamline the adoption and use of ICT in the Healthcare Sector of Sri Lanka.

Mission

• To adopt ICT solutions appropriately in the healthcare sector of Sri Lanka to improve the quality, efficiency, patient safety, and cost effectiveness of health care thus contributing to achieve the goals set out in the National Health Policy.

NATIONAL E- HEALTH POLICY” AND FRAMEWORK HEALTH METRICS NETWORK ASSESSMENT- 2010

Resources Data Sources Data Managemnt Dissemination & Use

0%

10%

20%

30%

40%

50%

60%

70%

80%

90%

Overall HIS

Source: Sri Lanka Journal of Bio-Medical Informatics 2010;1(2):90-6

HOW "PATIENT DATA PRIVACY "BREACHED AND COST ?

HOW ?

• Unauthorized disclosure of sensitive data.

• Lack of investments in Organizational/System level privacy protection and identity management.

COST ?

• Loss of public trust on Healthcare.

• Reliability of the data to analyses and decision making by the Government in relation to achieve “National Health Policy” objectives are inaccurate.

HOW TO STRENGTHEN “PATIENT DATA PRIVACY “?• Unified conformance to “E- Health Policy” by State Health Sector

and Private Health Sector.

• Strengthening legal cover on patients’ privacy protection, security of patients.

(ex : Health Insurance Portability and Accountability Act-HIPAA of 1996 / Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009 – USA and Data Protection Act of 1998 in the UK)

• Creation of the role data controller (Health Informatician) and stakeholder involvement and compliance.

• Laying down a clear framework in which personal health data can be shared, defining the criteria when using data for research.

BENEFITS OF EMPOWERMENT• Comprehensive and concise structured and retrieval of

health information.

• User friendly to all medical professionals in different disciplines.

• Empower patient by providing relevant health information and ability to diagnose.

• Felicitate and support to meet National Health Policy objectives of Sri Lanka