System and Data Protection

Abstract

System reliability and security data integrity and confidentiality are universally recognized patient computer-based record (CPR) system attributes (Bleich et al. 1987). Originating in the ethical relationship between patient and physician and in the legal and professional policies and standards applicable to medical practitioners, these essential elements of a sound—that is, a properly (and only properly) structured, maintained, and used—CPR SYSTEM have evolved in other settings throughout history and most recently in the computer context. Requirements that these essential elements be present have been extended throughoutU.S. health care, regardless of setting, by current federal and state legislation, as well as by institutional and professional association policy. The scope of these related terms encompasses programs within hospitals and other health care organizations that use paper medical record systems (Lavere 1982; Privacy Protection Study Commission 1977; Waters and Murphy 1982). Organizations using CPR systems face these same problems, but at a higher level of complexity. Basic methods used to maintain patient information reliability, security, and integrity, and safeguard confidentiality are therefore folded into formal goals and objectives for organizations, regardless of the system they use. Health records are used to provide a medium of communication for current and future patient care.... the patient must be assured that the information shared with health care professionals will remain confidential. Without such assurance, the patient may withhold critical information which could affect the quality of care provided, the relationship with the provider, and the reliability of the information maintained (American Medical Association 1985).