The roles of policy and professionalism in the protection of processed clinical data: a literature review.
BACKGROUND
Routinely collected clinical data is increasingly used for health service management, audit, and research. Even apparently anonymised data are subject to data protection. The relevant principles were set out in a treaty of the Council of Europe and subsequent policy has been based on these. However, little has been written about implementing policy and the role of health informaticians in this process.


OBJECTIVE
To define the elements of an effective implementation policy; the role of the health informatician in protecting processed clinical data.


METHODS
We performed a literature review of bibliographic databases, a manual search of the major medical informatics associations' websites, relevant working groups and an affiliated journal. Fifty-four papers relevant to implementation were identified.


RESULTS
The effective implementation of policy requires consideration of technical, organisational, personnel and professional issues. However, there is no clearly defined formula for successful implementation of data protection policy.


CONCLUSIONS
Patients and professionals need a system they can trust, and processes that can be easily incorporated into everyday practice. The lack of a core generalisable theory or strong professional code in health informatics limits the ability of the health informaticians to implement policy.
de Lusignan
Simon
S
Primary Care Informatics, Division of Community Health Sciences, Hunter Wing, St. George's Hospital Medical School, London SW17 0RE, UK. slusigna@sgul.ac.uk
Chan
Tom
T
Theadom
Alice
A
Dhoul
Neil
N
D003219:Confidentiality; D008490:Medical Informatics; D016347:Medical Records Systems, Computerized; D011050:Policy Making; D024382:Professional Role; D006113:United Kingdom