Il regolamento generale sulla protezione dei dati e le principali innovazioni in materia di sanità elettronica

Abstract

[The General Data Protection Regulation and the main innovations in the field of e-health] At a distance of twenty years from the adoption of Directive 95/46/EC, the scenario has been changed. In particular, the use of Information and Communications Technologies has, among others, given: a) the definition of new business organizational models; b) new methods of collecting and usability of the data; c) the spread of digital forms for the storage of sensitive data; d) the increased transfer of personal data across national borders, internal and external. In light of these changes, the European Union has set new goals in terms of protection of personal data in order to establish an atmosphere of trust among consumers.The proposal for a General Data Protection Regulation was officially presented by the European Commission on January 25 th 2012 and is pending approval. With the entry into force of the new regulatory text, also the national health system and the hospitals will be called upon to review methods of organization and internal processes. It is desirable to define new organizational policies that transpose three key elements of the proposed regulation: Privacy by Design, the Data Protection Office, the Privacy Impact Assessment.