Lets be clear.
Each record of a patient is a unique traversal of the health and care system 
over time and therefor very much identifying the patient.

What we talk about is: the right to be forgotten and the circumstance that 
after a legal period the medical data must be destroyed in some countries.
The EHR 13606 is designed based on a set of medical-legal requirements.
I’m of the opinion that that set does not need an update because of the new 
privacy law.
When I’m mistaken I would like to be pointed at those missing requirements.



Gerard   Freriks
+31 620347088
  gf...@luna.nl

Kattensingel  20
2801 CA Gouda
the Netherlands

> On 5 Sep 2018, at 17:12, Bert Verhees <bert.verh...@rosa.nl> wrote:
> 
> On 05-09-18 11:15, GF wrote:
>> Thomas,
>> 
>> The record can stay where it was.
>> Only the connection of identifying patient data and the Record-ID needs to 
>> be encrypted.
>> De-encryption can take place using a key owned and provided by a notary 
>> public.
> 
> I don't think that is enough, Gerard, if the record contains DNA material, or 
> other identifying material.
> 
> A 1997 study showed that up to 87% of the U.S. population could be identify 
> with just zip code, birthdate and gender.
> A researcher was able to identify William Weld (Massachusetts Gov.) from 
> anonymous hospital discharge records.
> 
> Today this numbers will be much higher because clinical actions will be on 
> cell-phones and internet-browsers, and there is much more linked-information 
> about individuals.
> 
> Read this, very interesting:
> 
> https://www.forbes.com/sites/adamtanner/2013/04/25/harvard-professor-re-identifies-anonymous-volunteers-in-dna-study/#41635a6892c9
>  
> <https://www.forbes.com/sites/adamtanner/2013/04/25/harvard-professor-re-identifies-anonymous-volunteers-in-dna-study/#41635a6892c9>
> 
> An organization which has no business with your medical data should not have 
> access to them, not even historical clinical data.
> GDPR, were we all talk about, which is the thread of this message, is mainly 
> build around consent, but what is consent?
> 
> There should be more discussion about to get the understanding landing at 
> normal people:
> Click on the image, I found yesterday, to see more images:
> https://twitter.com/ianmthompson/status/1037276071002038272 
> <https://twitter.com/ianmthompson/status/1037276071002038272>
> 
> Bert

Attachment: signature.asc
Description: Message signed with OpenPGP

_______________________________________________
openEHR-technical mailing list
openEHR-technical@lists.openehr.org
http://lists.openehr.org/mailman/listinfo/openehr-technical_lists.openehr.org

Reply via email to