Data security in medical information systems: technical aspects of a proposed legislation.
This paper analyses the results of a recent survey performed among medical establishment personnel in Greece, evaluates information security legislation existing in other countries and incorporates guidelines of international societies to propose principles governing a future legal framework. Furthermore, it presents a design methodology for designing secure information systems and provides an example of the use of this methodology in designing a database oriented secure medical information system with access rights incorporated.
Gritzalis
D
D
Technological Educational Institute of Athens, Department of Informatics, Egaleo, Greece.
Katsikas
S
S
Keklikoglou
J
J
Tomaras
A
A
D016494:Computer Security / Q000295:instrumentation / Q000331:legislation & jurisprudence* / Q000592:standards; D003628:Database Management Systems; D006115:Greece; D007256:Information Systems / Q000331:legislation & jurisprudence*; D016347:Medical Records Systems, Computerized / Q000331:legislation & jurisprudence*; D014584:User-Computer Interface