Data Protection Issues of Integrated Electronic Health Records (EHR)

An Electronic Health Record (EHR) of a patient in perspective maintains the medical history of the citizen electronically in medical databanks serviced locally or is cloud based. The ownership and the access control should belong to the citizen and this should be done under the supervision of his personal doctor. Audit trails and security measures must be implemented for making sure that EHR systems properly collect, store, retain and use the patient health information for the better service of the citizen when in need of medical treatment. EU and other countries are determined to find solutions, impose policies and standards as to implement EHR at national level and international levels. In this article the main security issues are presented, the EU directives and legislations in data protection and privacy from the use of EHR are considered, and proposed solutions are analyzed. Finally, it is explained why EHR can and should remain a safe tool.