Stanberry B
Seafarers International Research Centre, Cardiff, UK.
J Telemed Telecare. 1998;4(1):18-24. doi: 10.1258/1357633981931236.
The electronic record may be subject to abuses that can be carried out on a large scale and cause great damage. A wide range of data protection and information security measures will need to be taken to ensure the quality and integrity of such records. A European Union directive was formally adopted in 1995 which sets the obligations of those responsible for data processing as well as a number of important rights for individuals. The responsible teleconsultant or medical officer, as the data controller, must make sure these measures are enforced. In the case of the transmission of medical records to another location, the original data controller may remain liable for abuses. But as different elements of the records are spread throughout the different departments of a hospital or across different geographical locations, it may become difficult to ascertain who is responsible for protecting and controlling what. To this end, the designation of liability by contractual means, between the hospital and remote users of a telemedicine network, would be the clearest and most straightforward way of achieving uniformity and predictability in terms of the distribution of responsibility for data protection and security.
电子记录可能会遭受大规模的滥用，并造成巨大损害。需要采取广泛的数据保护和信息安全措施，以确保此类记录的质量和完整性。1995年正式通过了一项欧盟指令，该指令规定了数据处理负责人的义务以及个人的一些重要权利。作为数据控制者的责任远程会诊医生或医务人员必须确保这些措施得到执行。在将医疗记录传输到其他地点的情况下，原始数据控制者可能仍需对滥用行为负责。但是，由于记录的不同部分分布在医院的不同部门或不同地理位置，可能难以确定谁负责保护和控制哪些内容。为此，通过合同方式在医院和远程医疗网络的用户之间指定责任，将是在数据保护和安全责任分配方面实现一致性和可预测性的最清晰、最直接的方式。
