title: The roles of policy and professionalism in the protection of processed clinical data: a literature review.
abstract: BACKGROUND
  Routinely collected clinical data is increasingly used for health service management, audit, and research. Even apparently anonymised data are subject to data protection. The relevant principles were set out in a treaty of the Council of Europe and subsequent policy has been based on these. However, little has been written about implementing policy and the role of health informaticians in this process.
  
  
  OBJECTIVE
  To define the elements of an effective implementation policy; the role of the health informatician in protecting processed clinical data.
  
  
  METHODS
  We performed a literature review of bibliographic databases, a manual search of the major medical informatics associations' websites, relevant working groups and an affiliated journal. Fifty-four papers relevant to implementation were identified.
  
  
  RESULTS
  The effective implementation of policy requires consideration of technical, organisational, personnel and professional issues. However, there is no clearly defined formula for successful implementation of data protection policy.
  
  
  CONCLUSIONS
  Patients and professionals need a system they can trust, and processes that can be easily incorporated into everyday practice. The lack of a core generalisable theory or strong professional code in health informatics limits the ability of the health informaticians to implement policy.
authors.affiliation: Primary Care Informatics, Division of Community Health Sciences, Hunter Wing, St. George's Hospital Medical School, London SW17 0RE, UK. slusigna@sgul.ac.uk
authors.forename: Simon
authors.initials: S
authors.lastname: de Lusignan
authors.forename: Tom
authors.initials: T
authors.lastname: Chan
authors.forename: Alice
authors.initials: A
authors.lastname: Theadom
authors.forename: Neil
authors.initials: N
authors.lastname: Dhoul
mesh_terms: D003219:Confidentiality; D008490:Medical Informatics; D016347:Medical Records Systems, Computerized; D011050:Policy Making; D024382:Professional Role; D006113:United Kingdom