| Chapter 49 –  | 
                                          Medical Records Security | 
                                        
                                     
                                        
                                    Paul J. Brusil, Ph.D 
                                        
                                    
  Chapter Contents:
 
 
                                       
                                          |    | 
                                          49.1 | 
                                             | 
                                          INTRODUCTION
                                                 
                                           | 
                                        
                                       
                                          |    | 
                                          49.1.1 | 
                                             | 
                                          Information Is Key to Healthcare
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.1.2 | 
                                             | 
                                          Why Security and Privacy Are Important to Healthcare Information
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.1.3 | 
                                             | 
                                          Impacts of Information Technology
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.1.4 | 
                                             | 
                                          Information and IT Security Challenges
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.1.5 | 
                                             | 
                                          Core Security Model in the Healthcare Context
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.2 | 
                                             | 
                                          EXTERNAL DRIVERS
                                                 
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.1 | 
                                             | 
                                          Political Pressure
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.2 | 
                                             | 
                                          Media Pressure
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.3 | 
                                             | 
                                          Public Pressure
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.4 | 
                                             | 
                                          Patient Expectations
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.4.1 | 
                                             | 
                                          Expectation in the United States
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.4.2 | 
                                             | 
                                          Expectations in the United Kingdom
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.5 | 
                                             | 
                                          Legal Pressure
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.5.1 | 
                                             | 
                                          Protection Legislation
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.5.2 | 
                                             | 
                                          Laws and Regulations in the United States
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.5.3 | 
                                             | 
                                          Laws and Regulations in the United Kingdom
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.5.4 | 
                                             | 
                                          Laws and Regulations in Other Countries
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.6 | 
                                             | 
                                          Government Policies
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.6.1 | 
                                             | 
                                          Government Policies in the United Kingdom
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.6.2 | 
                                             | 
                                          Government Policies in the United States
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.7 | 
                                             | 
                                          Consortia and Standards Organizations
                                                   
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.7.1 | 
                                             | 
                                          Forum on Privacy and Security in Healthcare
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.7.2 | 
                                             | 
                                          Other Consortia
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.2.7.3 | 
                                             | 
                                          Nonmandatory (External) Imperatives-BS7799/ISO 17799
                                                     
                                           | 
                                        
                                       
                                          |    | 
                                          49.3 | 
                                             | 
                                          INTERNAL DRIVERS
                                                 
                                           | 
                                        
                                       
                                          |    | 
                                          49.4 | 
                                             | 
                                          DIFFICULTIES IN IMPLEMENTING COUNTERMEASURES
                                                 
                                           | 
                                        
                                       
                                          |    | 
                                          49.6 | 
                                             | 
                                          NOTES
                                                 
                                           | 
                                        
                                       
                                          |    | 
                                          49.7 | 
                                             | 
                                          UNITED KINGDOM RESOURCES
                                                 
                                           | 
                                        
                                       
                                          |    | 
                                          49.8 | 
                                             | 
                                          UNITED STATES RESOURCES
                                                 
                                           | 
                                        
                                     
  | 
                            
                         
                      | 
                  
                  
                      |