title: Managing security and privacy concerns over data storage in healthcare research.
abstract: OBJECTIVE
  Issues surrounding data security and privacy are of great importance when handling sensitive health-related data for research. The emphasis in the past has been on balancing the risks to individuals with the benefit to society of the use of databases for research. However, a new way of looking at such issues is that by optimising procedures and policies regarding security and privacy of data to the extent that there is no appreciable risk to the privacy of individuals, we can create a 'win-win' situation in which everyone benefits, and pharmacoepidemiological research can flourish with public support. We discuss holistic measures, involving both information technology and people, taken to improve the security and privacy of data storage.
  
  
  METHODS
  After an internal review, we commissioned an external audit by an independent consultant with a view to optimising our data storage and handling procedures.
  
  
  RESULTS
  Improvements to our policies and procedures were implemented as a result of the audit.
  
  
  CONCLUSIONS
  By optimising our storage of data, we hope to inspire public confidence and hence cooperation with the use of health care data in research.
authors.affiliation: Medicines Monitoring Unit (MEMO), University of Dundee, Dundee, UK. i.s.mackenzie@dundee.ac.uk
authors.forename: Isla S
authors.initials: IS
authors.lastname: Mackenzie
authors.forename: Brian J
authors.initials: BJ
authors.lastname: Mantay
authors.forename: Patrick G
authors.initials: PG
authors.lastname: McDonnell
authors.forename: Li
authors.initials: L
authors.lastname: Wei
authors.forename: Thomas M
authors.initials: TM
authors.lastname: MacDonald
mesh_terms: D016494:Computer Security; D016208:Databases, Factual / Q000592:standards*; D057286:Electronic Health Records / Q000592:standards; D006302:Health Services Research / Q000458:organization & administration / Q000592:standards*; D006801:Humans; D008490:Medical Informatics / Q000379:methods; D017891:Pharmacoepidemiology / Q000458:organization & administration / Q000592:standards*; D018907:Privacy