Brannigan V M
University of Maryland at College Park 20742.
Proc Annu Symp Comput Appl Med Care. 1994:392-6.
"Need to Know" systems which restrict access to computerized data to those with a specified need for the data have been described as part of the solution to the problem of privacy in health care information systems. However, no operational "need to know" system is described in the medical literature. Recent legal developments in constitutional privacy protection make a "need to know" system mandatory, not optional. In sophisticated information systems users can utilize the unique characteristics of the system itself to implement a high level "need to know" system, based on the institution's own patient treatment pattern. This article provides an analytical tool for helping to define a "need to know" system with reference to the specific problems of health care institutions.
“需要知晓”系统将计算机化数据的访问权限限制在对这些数据有特定需求的人员，这被视为解决医疗保健信息系统隐私问题的部分方案。然而，医学文献中并未描述任何可实际操作的“需要知晓”系统。宪法隐私保护方面最近的法律进展使“需要知晓”系统成为强制性要求，而非可选项。在复杂的信息系统中，用户可以根据机构自身的患者治疗模式，利用系统本身的独特特性来实施高级“需要知晓”系统。本文提供了一种分析工具，有助于参照医疗机构的具体问题来定义“需要知晓”系统。
