Authors : Zuraimeen Othman, Nsafie and Khaldoon Aliway
Abstract: Electronic Health Records (EHRs) created by health care organizations that provide health care services (clinics and hospitals). Electronic health records are required due to the growth of information exchange among the healthcare providers. Although, the EHR implementation is expanding in worldwide, research has revealed that security is so critical that major deployments require security to be part of the solution besides functionality, interoperability and utility. This study therefore analyzed security as an integral factor in electronic health records development. By using the content analysis method, five security standards and model were qualitatively analyzed and reviewed. The analysis include the Personal Data Protection Act 2010 (“Act PDP”), the Health Insurance Portability and Accountability Act (HIPAA), Information Security Management System (ISMS), Confidentiality, Integrity and Availability (CIA) Triad Model and also Malaysia IHE (MyHIX). The findings from the reviews were combined and used to form the recommended framework. It is found that, even though there is a framework developed by earlier researchers but it seems to be more on general framework and to the best knowledge of the searchers, no one has focused on the security and privacy of data in particular. This framework can be used as a guide by health care organizations or government agencies to produce an action plan for the development of the electronic health records system security and comply with higher standards. On the whole, this should lead to better patient health outcomes and improve safety in electronic health records.
Zuraimeen Othman, Nsafie and Khaldoon Aliway, 2018. Security-Based Framework for Electronic Health Records (EHRS) Development: A Preliminary Review. Journal of Engineering and Applied Sciences, 13: 7271-7276.