LOPD Compliance and ISO 27001 legal requirements in the Health Sector

Author

Sánchez, L.E. ; Olmo, A.S. ; Álvarez, E. ; Medina, E.F. ; Piattini, M.

Author_Institution

Dept. I+D+i, Sicaman Nuevas Tecnol., Tomelloso, Spain

Volume

10

Issue

3

fYear

2012

fDate

4/1/2012 12:00:00 AM

Firstpage

1824

Lastpage

1837

Abstract

In a society based on information, the Safety Management Systems (ISMS) are increasingly critical for businesses. Within the Management of Information Security issues are very critical in certain sectors, such as the processing of personal data for the Health Sector, where a bad use of them can mean irreparable damage to their owners and organizations are obligation to protect them. This paper presents a real case of success that allowed to solve issues related to privacy of patient information at the time of making the quotation of these consultations, as well as compliance with the Organic Law for the protection of Personal Data (OLPD) in environments health and other benefits of the implemented solution.

Keywords

ISO standards; data privacy; law; medical information systems; organisational aspects; security of data; ISMS; ISO 27001 legal requirement; LOPD compliance; OLPD; health sector; information protection; information safety management system; management of information security; organic law for the protection of personal data; organization; patient information privacy; Art; Australia; Europe; Hospitals; ISO standards; Law; Health; ISMS; ISO27001; OLPD; Personal Data; Privacy;

fLanguage

English

Journal_Title

Latin America Transactions, IEEE (Revista IEEE America Latina)

Publisher

ieee

ISSN

1548-0992

Type

jour

DOI

10.1109/TLA.2012.6222590

Filename

6222590