Mecanismos de proteção da privacidade das informações de prontuário eletrônico de pacientes de instituições de saúde

• Autor(a) principal: Magnagnagno, Odirlei Antonio
• Data de Publicação: 2015
• Tipo de documento: Dissertação
• Idioma: por
• Título da fonte: Biblioteca Digital de Teses e Dissertações da PUC_RS
• Texto Completo: http://tede2.pucrs.br/tede2/handle/tede/6417
• topic: ADMINISTRAÇÃO DE EMPRESAS; DIREITO À PRIVACIDADE; SEGURANÇA DA INFORMAÇÃO; REGISTROS MÉDICOS; SISTEMA DE INFORMAÇÃO EM SAÚDE; GESTÃO DA INFORMAÇÃO; CIENCIAS SOCIAIS APLICADAS::ADMINISTRACAO

Information privacy in the healthcare industry gains a higher relevance, with a large number of individuals with access to the patient medical records, leaks of such information to the public may impact and cause irreversible damages to patients, their relatives and also healthcare institutions. The research focus on information privacy protection in medical records from health institutions, related with information secrecy and human behaviors from professionals which access such information in a daily basis. Is taken in to account how those professionals are trained or have access to the best practices for information protection during recording, storage and access. The main objective is to identify practices and processes that may aid to preserve information privacy in the patient’s medical records, verifying vulnerabilities and data processing practices along with applicable legislation. As medium and small medical institutions, may or may not know how to proceed to protect such information as a whole, taking into account aspects such structure, behaviors and processes in the information flux. Theoretical references where worked with privacy concepts in a general context and privacy in healthcare organizations, linking national legislation and international best practices. The research is exploratory and descriptive, making use of two methodological approaches, those being document analysis and case study. The result obtained was the finding of regulations and norms relevant to Information Security, the identification of mechanisms adopted by studied institutions for information security and classify 50 mechanisms found in a manner that hospitals may adopt. These mechanisms where identified by analyzing documents containing norms and regulations, also by interviews, internal documents and observations in the two case studies. Grouped and classified by type, requisite and line of action. Is concluded that the most frequently cited are processes related to safeguards and Relational Mechanisms linked to employees’ awareness, proven with case studies, as both hospitals have all mechanisms in the norm and regulations documentation, which still isn’t enough as incidents are occurring in both institutions.