ACR–AAPM–SIIM PRACTICE PARAMETER FOR ELECTRONIC MEDICAL INFORMATION PRIVACY AND SECURITY

PREAMBLE

INTRODUCTION

II.

POLICY STATEMENTS

III.

PROCEDURES

Administrative Safeguards

III.

PROCEDURES

Physical Safeguards

III.

PROCEDURES

Technical Safeguards

IV.

SECURITY AND PRIVACY TOOLS USED

IV.

SECURITY AND PRIVACY TOOLS USED

Deidentification

IV.

SECURITY AND PRIVACY TOOLS USED

Authentication

IV.

SECURITY AND PRIVACY TOOLS USED

Authorization (access controls)

IV.

SECURITY AND PRIVACY TOOLS USED

Auditing (HIPAA, Other Requirements)

IV.

SECURITY AND PRIVACY TOOLS USED

Application Availability

IV.

SECURITY AND PRIVACY TOOLS USED

Confidentiality

IV.

SECURITY AND PRIVACY TOOLS USED

Data Availability

IV.

SECURITY AND PRIVACY TOOLS USED

Data Integrity

IV.

SECURITY AND PRIVACY TOOLS USED

Nonrepudation

IV.

SECURITY AND PRIVACY TOOLS USED

Use Cases

RESEARCH, EDUCATIONAL, AND MARKETING USES OF PATIENT DATA; INSTITUTIONAL REVIEW BOARD, AND PRIVACY REQUIREMENTS

VI.

MEDICAL-LEGAL CONSIDERATIONS

ACKNOWLEDGEMENTS

REFERENCES

1. International Organization for Standardization. Application of risk management for IT-networks incorporating medical devices — Part 1: Roles, responsibilities and activities ;. 2016.
2. National Electrical Manufactures Association. HIMSS/NEMA Standard HN 1-2013: Manufacturer disclosure statement for medical device security (MDS2); . 2013.
3. Federal Committee on Statistical Methodology. Subcommittee on disclosure limitation methodology, Federal Committee on Statistical Methodology. Report on statistical disclosure limitation methodology. Statistical Policy Working Paper2, Office of Management and Budget – PDF. May 1994. Revised by the Confidentiality and Data Access Committee 2005; Available at: https://www.hhs.gov/sites/default/files/spwp22.pdf.
4. FetzerDavid TDTDepartment of Diagnostic and Interventional Imaging, The University of Texas Health Science Center at Houston Medical School, 6431 Fannin Street, MSB 2.100, Houston, TX 77030, USA., WestO ClarkOC. The HIPAA privacy rule and protected health information: implications in research involving DICOM image databases. Acad Radiol 15:390-5, .
5. FreymannJohn BJBSAIC-Frederick, Inc., Rockville, MD 20892, USA. freymannj@mail.nih.gov, KirbyJustin SJS, PerryJohn HJH, ClunieDavid ADA, JaffeC CarlCC. Image data sharing for biomedical research--meeting HIPAA requirements for De-identification. J Digit Imaging 25:14-24, .
6. MonteiroErikssonE0000-0001-6201-1977University of Aveiro, DETI/IEETA, Aveiro, Portugal. eriksson.monteiro@ua.pt., CostaCarlosCUniversity of Aveiro, DETI/IEETA, Aveiro, Portugal., OliveiraJosé LuísJLUniversity of Aveiro, DETI/IEETA, Aveiro, Portugal.. A De-Identification Pipeline for Ultrasound Medical Images in DICOM Format. J Med Syst 41:89, .
7. MooreStephen MSMFrom the Mallinckrodt Institute of Radiology, Washington University School of Medicine, 510 S Kingshighway Blvd, St Louis, MO 63110 (S.M.M., D.R.M., K.E.S., K.W.C., B.A.V., L.R.T., F.W.P.); and Leidos Biomedical Research, Bethesda, Md (J.S.K., J.B.F.)., MaffittDavid RDR, SmithKirk EKE, et al. De-identification of Medical Images with Retention of Scientific Research Value. Radiographics 35:727-35, .
8. NewhauserWayneWDepartment of Physics and Astronomy, Medical Physics Program, Louisiana State University, 202 Nicholson Hall, Baton Rouge, LA 70803, USA; Department of Medical Physics, Mary Bird Perkins Cancer Center, 4950 Essen Lane, Baton Rouge, LA 70809, USA. Electronic address: newhauser@lsu.edu., JonesTimothyTDepartment of Physics and Astronomy, Medical Physics Program, Louisiana State University, 202 Nicholson Hall, Baton Rouge, LA 70803, USA; Department of Medical Physics, Mary Bird Perkins Cancer Center, 4950 Essen Lane, Baton Rouge, LA 70809, USA., SwerdloffStuartSELEKTA Impac Software, 100 South Mathilda Avenue, Sunnyvale, CA 94086, USA., et al. Anonymization of DICOM electronic medical records for radiation therapy. Comput Biol Med 53:134-40, .
9. NoumeirRitaREcole de Technologie Supérieure, 1100 Notre-Dame West, Montreal, QC, Canada H3C 1K3. noumeir@ele.etsmtl.ca, LemayAlainA, LinaJean-MarcJM. Pseudonymization of radiology data for research purposes. J Digit Imaging 20:284-95, .
10. OnkenMichaelMOFFIS - Institute for Information Technology, 26121 Oldenburg, Germany. onken@offis.de, RiesmeierJörgJ, EngelMarcelM, YabanciAdemA, ZabelBernhardB, DesprésStefanS. Reversible anonymization of DICOM images using automatically generated policies. Stud Health Technol Inform 150:861-5, .
11. SilvaJorge MiguelJMDETI/IEETA, University of Aveiro, Portugal. Electronic address: jorge.miguel.ferreira.silva@ua.pt., PinhoEduardoEDETI/IEETA, University of Aveiro, Portugal., MonteiroErikssonEBMD Software, Portugal., SilvaJoão FigueiraJFDETI/IEETA, University of Aveiro, Portugal., CostaCarlosCDETI/IEETA, University of Aveiro, Portugal.. Controlled searching in reversibly de-identified medical imaging archives. J Biomed Inform 77:81-90, .
12. National Institute of Standards and Technology. De-identification of personal information. 2015; Available at: https://nvlpubs.nist.gov/nistpubs/ir/2015/nist.ir.8053.pdf.
13. IHE International I. IHE infrastructure handbook. 2014; Available at: https://www.ihe.net/uploadedFiles/Documents/ITI/IHE_ITI_Handbook_De-Identification_Rev1.1_2014-06-06.pdf.
14. Bazzell M, Carroll J. The Complete Privacy and Security Desk Reference. Vol I. San Bernadino, CA; 2016.

Appendix A

Appendix B