Skip to main content

New ISO Guidelines for Protecting Electronic Health Records

BayBiotech.NET

Two ISO documents recently published provide harmonized principles and guidelines for the security of electronic health records.

ISO/TS 21547:2010, Health informatics – Security requirements for archiving of electronic health records – Principles covers the basic principles needed to securely preserve health records in any format for the long-term. In the document, a holistic process covering records maintenance, retention, disclosure and eventual destruction has been extensively covered.

Additional guidance for implementing ISO/TS 21547 is included in technical report ISO/TR 21548:2010, Health informatics – Security requirements for archiving of electronic health records – Guidelines. This report provides complementary guidelines to ISO/TS 21547, as well as a practical method and tools for the development and management of eArchives.

Main features include the retention and records maintenance for a patient for entire lifespan reaching to 100+ years regardless of time and place. The two ISO documents also take into account the dynamic nature of health data, which may be modified through time, its sensitivity and high security requirements, particularly as transferred between services organizations and healthcare providers, and more.

In addition, the two ISO documents also take into consideration new initiatives in the field, such as the growing trend to reinforce patients’ self determination and participation in their own healthcare, and the data that must be available to them.

The two documents were developed by ISO technical committee ISO/TC 215, Health informatics and to find out more on this follow the link: http://www.iso.org/iso/pressrelease.htm?refid=Ref1304

Comments

Popular posts from this blog

Amendments for High Risk Device Type Regulatory Pathway

BayBiotech.NET Government Accounting Office (“GAO”) has issued a long-awaited report evaluating the use of the 510(k) process by the Food and Drug Administration (“FDA” or the “Agency”) in the January of 2009. Report mainly focused on Preamendment class III devices. Although most high-risk class III medical devices are subject to the demanding premarket approval (“PMA”) process, preamendment class III devices may be cleared through the 510(k) pathway until FDA issues regulations requiring a PMA. Under the Safe Medical Devices Act of 1990, FDA was required either to reclassify preamendment class III devices into class I or II, or (2) issue regulations requiring PMA approval for the devices, GAO noted that 20 preamendment class III device types have not yet been addressed by the Agency. GAO has urged FDA to take required steps to address the remaining class III devices that continue to be eligible for 510(k) review. As a result of the report, FDA has committed to address al...

Harmonization by Doing (HBD): Japan & U.S. Collaboration

BayBiotech.NET HBD is an international cooperative effort by Japan and US for regulatory convergence for Medical Devices. The efforts are focused on to develop global clinical trials and address regulatory barriers for timely device approvals. To address the needs for additional evaluation, the HBD initiative is a pilot project launched jointly by FDA and MHLW-PMDA for the premarket review of device cardiovascular technology. Instead of taking a theoretical approach to harmonization, HBD is focused on Proof of concept by utilizing parallel development, application submissions and review of actual medical device projects. HBD Study intends to collect and analyze regulatory submission data from multiple applications in the U.S. and Japan. The purpose of the study is to further understand differences that may exist with format and content, to define best practices and to improve globally harmonized processes. To read more about the HBD program, follow the link: http://www.fda.gov/M...

What to include in Traditional 510(k) Filing for Medical Devices

BayBiotech.NET A 510k is a premarket submission made to FDA to demonstrate that a medical device to be marketed is at least as safe and effective, that is, substantially equivalent, to a legally marketed device. A Traditional 510(k) submission must include the required elements as per 21 CFR 807.87 (Information required in a premarket notification submission):  the name of device, (the trade or proprietary name), if any, and the common or usual name or classification name of the device.  description of the device, include device specifications and reference applicable guidance documents, special controls, or standards; photographs or engineering drawings should be supplied, if applicable.  comparison with a predicate device(s), indicating similarities and/or differences accompanied by data, as appropriate; this information may include an identification of materials, design considerations, energy expected to be used or delivered by the device, and a description of the operatio...