Abstract
The digital revolution has transformed the way health records are kept and communicated. Electronic health records (EHR) have improved integration of patient data and increased their accessibility for both patients and healthcare providers. A drawback is the danger of a data breach and thus of patient confidentiality. This article provides an overview of patient data security in the digital era. It examines the different challenges and concerns related to data security and suggests potential solutions to protect patients’ sensitive data. Additionally, we discuss the ethical and legal implications of data security in the healthcare sector and the probable impact on patient trust.
Keywords
Get full access to this article
View all access options for this article.
References
1.
Keshta
I
Odeh
A.
Security and privacy of electronic health records: concerns and challenges . Egypt Inform J 2021 ; 22 : 177 –183 .
2.National Cybersecurity Authority . Cybersecurity quarterly bulletin , https://www.nca.gov.sa/files/qb2020q4_en.pdf (2020 , accessed 9 November 2024 ).
3.
Ross
RS
Feldman
L
Witte
GA.
Rethinking security through systems security engineering . ITL Bulletin , https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=922469 (accessed 1 November 2024 ).
4.
Tariq
RA
Hackert
PB.
Patient confidentiality . In: StatPearls . Treasure Island, FL : StatPearls Publishing , 2023 .
5.
Butler
PW
Middleman
AB.
Protecting adolescent confidentiality: a response to one state’s “Parents’ Bill of Rights” . J Adolesc Health 2018 ; 63 : 357 –359 .
6.
Hunt
M
Pal
NE
Schwartz
L
, et al . Ethical challenges in the provision of mental health services for children and families during disasters . Curr Psychiatry Rep 2018 ; 20 : 60 .
7.
Cramer
R
Loosier
PS
Krasner
A
, et al . State laws related to billing third parties for health care services at public sexually transmitted disease clinics in the United States . Sex Transm Dis 2018 ; 45 : 549 –553 .
8.
Minen
MT
Stieglitz
EJ
Sciortino
R
, et al . Privacy issues in smartphone applications: an analysis of headache/migraine applications . Headache 2018 ; 58 : 1014 –1027 .
9.
Berwick
DM
Gaines
ME.
How HIPAA harms care, and how to stop it . JAMA 2018 ; 320 : 229 –230 .
10.Center for Internet Security . Data breaches: in the health sector , https://www.cisecurity.org/insights/blog/data-breaches-in-the-healthcare-sector (2016 , accessed 1 November 2024 ).
11.
Watson
RM
. Healthcare data breach statistics . The HIPPA Guide , https://www.hipaaguide.net/healthcare-data-breach-statistics/ (2024 , accessed 9 November 2024 ).
12.
Thomas
J.
Medical records and issues in negligence . Indian J Urol 2009 ; 25 : 384 –388 .
13.
Seh
AH
Zarour
M
Alenezi
M
, et al . Healthcare data breaches: insights and implications . Healthcare (Basel) 2020 ; 8 : 133 .
14.Verizon . 2019 Data Breach Investigations Report , https://enterprise.verizon.com/resources/executivebriefs/2019-dbir-executive-brief.pdf (2019 , accessed 28 October 2024 ).
15.The International Business Machines Corporation (IBM) . Cost of a data breach report 2023 , https://www.ibm.Com/security/data-breach (2023 , accessed 28 October 2024 ).
16.The International Business Machines Corporation (IBM) . 2019 Cost of a data breach report , https://www.ibm.com/downloads/cas/ZBZLY7KL (2019 , accessed 28 October 2024 ).
17.
Schneier
B.
Secrets and lies . 2nd ed. Hoboken, NJ : John Wiley and Sons , 2000 .
18.
Bhuyan
SS
Bailey-DeLeeuw
S
Wyant
DK
, et al . Too much or too little? How much control should patients have over EHR data? J Med Syst 2016 ; 40 : 174 .
19.
Allen
KT
Barton
EL
Bazan
D
, et al . Risk management handbook for healthcare professionals . 3rd ed. San Francisco, CA : Jossey-Bass ; 2001 .
20.AHA, American Hospital Association . Top six actions to manage hospital cybersecurity risks , https://www.aha.org/guidesreports/2014-10-01-top-six-actions-manage-hospital-cybersecurity-risks (2018 , accessed 28 October 2024 ).
21.National Institute of Standards and Technology . Cybersecurity framework , 2018 ; https://www.nist.gov/cyberframework (accessed 28 October 2024 ).
22.
Bell
G
Ebert
M.
Health care and cyber security: increasing threats require increased capabilities . KPMG , 2015 ; https://assets.kpmg.com/content/dam/kpmg/pdf/2015/09/cyber-health-care-survey-kpmg-2015.pdf (accessed 28 October 2024 ).
23.Institute for Critical Infrastructure Technology . Hacking healthcare in 2016: lessons the healthcare industry can learn from the OPM breach , 2016 ; https://www.medicaldesignandoutsourcing.com/hacking-healthcare-it-in-2016-lessons-the-healthcare-industry-can-learn-from-the-opm-breach/ (accessed 28 October 2024 ).
24.
Muncaster
P.
NHS Trust suspends operations after a major cyber incident . Infosecurity , 2016 ; http://www.infosecurity-magazine.com/news/nhs-trust-suspends-operations/ (accessed 28 October 2024 ).
25.
Millman
R.
Nine in 10 NHS trusts still use Windows XP . ITPro , https://www.itpro.com/public-sector/27740/nine-in-10-nhs-trusts-still-use-windows-xp (2016 , accessed 28 October 2024 ).
26.
Mansfield-Devine
S.
Ransomware: taking businesses hostage . Netw Secur 2016 ; 2016 (10 ): 8 –17 .
27.US Department of Health and Human Services . Health care industry cybersecurity task force , https://www.aha.org/news/headline/2017-06-05-hhs-cybersecurity-task-force-issues-recommendations-congress (2017 , accessed 28 October 2024 ).
28.Etactics . The ultimate list of celebrity HIPAA violations , https://etactics.com/blog/celebrity-hipaa-violations (2020 , accessed 18 October 2024 ).