ACR–AAPM–SIIM PRACTICE PARAMETER FOR ELECTRONIC MEDICAL INFORMATION PRIVACY AND SECURITY

PREAMBLE

I. INTRODUCTION

II. POLICY STATEMENTS

III. PROCEDURES

A. Administrative Safeguards

III. PROCEDURES

B. Physical Safeguards

III. PROCEDURES

C. Technical Safeguards

IV. SECURITY AND PRIVACY TOOLS USED

A. Deidentification

IV. SECURITY AND PRIVACY TOOLS USED

B. Authentication

IV. SECURITY AND PRIVACY TOOLS USED

C. Authorization (access controls)

IV. SECURITY AND PRIVACY TOOLS USED

D. Auditing (HIPAA, Other Requirements)

IV. SECURITY AND PRIVACY TOOLS USED

E. Application Availability

IV. SECURITY AND PRIVACY TOOLS USED

F. Confidentiality

IV. SECURITY AND PRIVACY TOOLS USED

G. Data Availability

IV. SECURITY AND PRIVACY TOOLS USED

H. Data Integrity

IV. SECURITY AND PRIVACY TOOLS USED

I. Nonrepudation

IV. SECURITY AND PRIVACY TOOLS USED

J. Use Cases

V. RESEARCH, EDUCATIONAL, AND MARKETING USES OF PATIENT DATA; INSTITUTIONAL REVIEW BOARD, AND PRIVACY REQUIREMENTS

VI. MEDICAL-LEGAL CONSIDERATIONS

ACKNOWLEDGEMENTS

REFERENCES

Appendix A

Appendix B