title: Networking in shared care--first steps towards a shared electronic patient record for cancer patients.
abstract: OBJECTIVE
  This paper aims at identifying the data protection and security requirements for a cross-institutional EPR. Three possible models and the first steps towards a cross-institutional EPR for the Thoraxklinik Heidelberg and the Department of Clinical Radiology of the University Medical Center of Heidelberg shall be discussed.
  
  
  METHODS
  A comprehensive analysis of literature and legal documents supplied information for determining the data protection and security requirements. By means of information system analysis, the technical preconditions in both institutions as well as three possible models towards a cross-institutional EPR were identified.
  
  
  RESULTS
  According to the German penal code it is only allowed to reveal patient information to external physicians in cases of so-called "treatment connection". An extension of the written consent, signed by the patient, verifying the patient agreement that his/her patient data will be stored in a cross-institutional EPR is needed. Among the three models that we identified, the model that constitutes of a virtual EPR with distributed data capture in both institutions was favored. By means of SecuRemote software a secure connection between the Thoraxklinik Heidelberg and the Department of Clinical Radiology was established, allowing the physicians to view the complete cross-institutional health information of a jointly treated patient during the weekly consultation on radiotherapy.
  
  
  CONCLUSIONS
  Many requirements listed in this paper are requirements for electronic patient records in general. Besides these general requirements there are specific requirements for a cross-institutional EPR. The legal situation in Germany complicates the development and implementation of a cross-institutional EPR. However, we think that the efforts are reasonable, because a cross-institutional EPR will be able to improve the communication between health institutions, medical disciplines and persons involved in shared care processes. It provides them with more complete health information about the jointly treated patients. A cross-institutional EPR is, therefore, expected to improve the quality of patient care.
authors.affiliation: Department of Medical Informatics, University of Heidelberg, Germany. minne_van_der_haak@med.uni-heidelberg.de
authors.forename: M
authors.initials: M
authors.lastname: van der Haak
authors.forename: V
authors.initials: V
authors.lastname: Mludek
authors.forename: A C
authors.initials: AC
authors.lastname: Wolff
authors.forename: H
authors.initials: H
authors.lastname: Bülzebruck
authors.forename: D
authors.initials: D
authors.lastname: Oetzel
authors.forename: D
authors.initials: D
authors.lastname: Zierhut
authors.forename: P
authors.initials: P
authors.lastname: Drings
authors.forename: M
authors.initials: M
authors.lastname: Wannenmacher
authors.forename: R
authors.initials: R
authors.lastname: Haux
mesh_terms: D000554:Ambulatory Care Facilities / Q000458:organization & administration*; D016494:Computer Security; D003266:Continuity of Patient Care / Q000458:organization & administration*; D005858:Germany; D006785:Hospitals, University / Q000458:organization & administration*; D006801:Humans; D015274:Interdepartmental Relations; D016347:Medical Records Systems, Computerized; D017146:Models, Organizational; D016522:Oncology Service, Hospital / Q000458:organization & administration*; D019982:Organizational Case Studies; D010348:Patient Care Team; D011872:Radiology Department, Hospital / Q000458:organization & administration*; D012637:Security Measures; D018511:Systems Integration