New Technology in the Medical Field - Essay Example

New Technology in the Medical Field Privacy and security is very important in all areas including healthcare settings. Rogerson (2000) s that in healthcare, privacy and security range from physical security for the patients to patient records and organization’s confidential information. With the increased adoption of information technologies (ITs) there has been increased efficiency in the operation of healthcare organizations as well as privacy and security risks related to the use of IT. According to Computer Science and Telecommunications Board, National Research Council (1997), many healthcare organizations have come up with privacy and security policies that govern the access, use and exposure of organization’s information in order to minimize such risks.

Obvious themes common in the policies of Mayo, Beth and Georgetown healthcare centersAn analysis of the privacy and security policies of three recognized healthcare organizations namely Beth Israel Deaconess Medical Center (BIDMC), Mayo Foundation and Georgetown University Medical Centers reveals some themes that are among them. For all the three healthcare organisations unauthorised access of the organisation’s information is not allowed. This could be those that are stored in computers or those produced as hard copies.

In relation to this, there is no unauthorised alteration, revision, transmission or modification of the organisations information or other information within the organisation’s system (Georgetown University Medical Centers, 2007, Mayo Foundation, 2002 and BIDMC Technology Resources Policy, 2007). For all confidential information or programs installed in the organisation’s computers, the staff must get authority from the organisations information officer or office in order to access, delete or modify them.

All information deemed to be confidential is protected from external access and their release or exposure constitutes a breach of the security and privacy policies. All staff are not allowed to use the organisations IT for activities that are not related to the organisation’s business activities so as to limit the availability of the network resources to other people. Remote access to organisation’s information is not allowed except for selected workstations or persons authorised by the chief information officer.

Policies that differ significantly between organizations There are some security and privacy policies that differ significantly between the three healthcare organizations. An example are policies relating to personal privacy when using the organization’s computer information or technology resources. In Mayo Foundation, no one has the permission to access a computer using another person’s password hence staff are granted individual privacy as well (Mayo Foundation, 2002). In BIDMC, the users of the hospitals IT should not expect any personal privacy.

The hospital retains right to access them with or without informing the user (Beth Israel Deaconess Medical Technology Resources Policy, 2007). Key security principles and elements that are most important The key security elements and principles that are most important in the privacy and security policies for the three organizations are those relating to the protection of access to confidential information and material from within and outside organization. These include granting organization’s staff the rights of privacy when using the organization’s IT and denying remote aces to organization’s network.

It also includes the formulation of a protocol to be followed when one wants to access, delete or modify some confidential and important information or programs or information rooms. Staffs have to get permission from the chief information officer. Without these principles and elements, confidential information and other organization information can be accessed, modified, deleted or exposed by unauthorized user or malicious workers. ReferencesBeth Israel Deaconess Medical Technology Resources Policy (2007).

HIMSS: Managing Information Privacy & Security. Online: http://www.himss.org/content/files/CPRIToolkit/version6/v6%20pdf/D39a_Beth_Israel_Deaconess_Medical_Center_Technology_Resources_Policies.pdf. Viewed on 8th September, 2011. Computer Science and Telecommunications Board, National Research Council (1997). For the Record: Protecting Electronic Health Information. Washington, DC. National Academy Pr. Georgetown University Medical Centers (2007). HIMSS: Managing Information Privacy & Security. Online. http://www.

georgetown.edu/policy/hipaa/privacy.html. Viewed on 8th September, 2011. Mayo Foundation (2002). HIMSS: Managing Information Privacy & Security. Online: http://www.himss.org/content/files/CPRIToolkit/version6/v6%20pdf/D39e_Mayo_Foundation_Information_Security_Policies.pdf. Viewed on 8th September, 2011. Rogerson Simon (2000). Electronic Patient Records. IMIS Journal (5) pp 56-62.