title: Data security in medical information systems: technical aspects of a proposed legislation.
abstract: This paper analyses the results of a recent survey performed among medical establishment personnel in Greece, evaluates information security legislation existing in other countries and incorporates guidelines of international societies to propose principles governing a future legal framework. Furthermore, it presents a design methodology for designing secure information systems and provides an example of the use of this methodology in designing a database oriented secure medical information system with access rights incorporated.
authors.affiliation: Technological Educational Institute of Athens, Department of Informatics, Egaleo, Greece.
authors.forename: D
authors.initials: D
authors.lastname: Gritzalis
authors.forename: S
authors.initials: S
authors.lastname: Katsikas
authors.forename: J
authors.initials: J
authors.lastname: Keklikoglou
authors.forename: A
authors.initials: A
authors.lastname: Tomaras
mesh_terms: D016494:Computer Security / Q000295:instrumentation / Q000331:legislation & jurisprudence* / Q000592:standards; D003628:Database Management Systems; D006115:Greece; D007256:Information Systems / Q000331:legislation & jurisprudence*; D016347:Medical Records Systems, Computerized / Q000331:legislation & jurisprudence*; D014584:User-Computer Interface