title: [A guide to good practice for information security in the handling of personal health data by health personnel in ambulatory care facilities].
abstract: The appearance of electronic health records has led to the need to strengthen the security of personal health data in order to ensure privacy. Despite the large number of technical security measures and recommendations that exist to protect the security of health data, there is an increase in violations of the privacy of patients' personal data in healthcare organizations, which is in many cases caused by the mistakes or oversights of healthcare professionals. In this paper, we present a guide to good practice for information security in the handling of personal health data by health personnel, drawn from recommendations, regulations and national and international standards. The material presented in this paper can be used in the security audit of health professionals, or as a part of continuing education programs in ambulatory care facilities.
authors.affiliation: Departamento de Informática y Sistemas, Universidad de Murcia, Murcia, España. Electronic address: anasanchez@um.es.
authors.forename: Ana
authors.initials: A
authors.lastname: Sánchez-Henarejos
authors.affiliation: Departamento de Informática y Sistemas, Universidad de Murcia, Murcia, España.
authors.forename: José Luis
authors.initials: JL
authors.lastname: Fernández-Alemán
authors.affiliation: Departamento de Informática y Sistemas, Universidad de Murcia, Murcia, España.
authors.forename: Ambrosio
authors.initials: A
authors.lastname: Toval
authors.affiliation: Enfermería, Servicio de Urgencias, Hospital General Universitario Reina Sofía, Murcia, España.
authors.forename: Isabel
authors.initials: I
authors.lastname: Hernández-Hernández
authors.affiliation: Enfermería, Servicio de Urgencias, Hospital General Universitario Reina Sofía, Murcia, España.
authors.forename: Ana Belén
authors.initials: AB
authors.lastname: Sánchez-García
authors.affiliation: Departamento de Informática y Sistemas, Universidad de Murcia, Murcia, España.
authors.forename: Juan Manuel
authors.initials: JM
authors.lastname: Carrillo de Gea
mesh_terms: D000554:Ambulatory Care Facilities; D016494:Computer Security / Q000592:standards*; D017408:Guidelines as Topic; D006282:Health Personnel; D055991:Health Records, Personal; D006801:Humans
keywords: Buenas prácticas de seguridad; Confidencialidad; Confidentiality; Datos personales de salud; Formación en seguridad de la información; Good security practices; Information security training; Personal health data; Privacidad; Privacy