Data Privacy Flashcards
→ official health document of an individual shared among multiple facilities and agencies
→ demographic info, diagnosis, prescriptions, lab tests, contact info, visitation info, allergies, insurance info, family history, etc.
Electronic Medical Records (EMRs) or Electronic Health Records (EHRs)
→ hospital discharge data reported to a government agency
→ data that organizations collect about their operations such as status reports on their routine operations
Administrative Data
→ billed interactions between insured patients and healthcare systems (inpatient, outpatient, pharmacy, and enrollment)
→ collects information across a wide range of medical professionals
→ comes directly from the notes of physicians as info is recorded at the time of the appointment
→ allows researchers to analyze patients with rare conditions
Claims Data
→ tracks a narrow range of key data for chronic conditions
→ uses observational study methods to collect uniform data to evaluate specified outcomes for a population
→ observes the course of the disease and the variations of treatment
Patient/Disease Registries
→ conducted to provide prevalence rates of certain diseases
→ includes the measures of risk factors, health behaviors, and non-health determinants or correlations (e.g. socioeconomic status)
Health Surveys
→ registry and results database hosted by government agencies or the WHO
→ clinical research data made available only through national or discipline-specific organizations
→ studies new tests and treatments that evaluate their effects on human health outcomes
→ data collected are variables relevant to the research hypotheses
Clinical Trials Data
Documents used for study implementation (acronym is CRF)
Case Report Forms
→ (acc. to the dictionary)—facts and statistics collected for reference
→ (acc. to philosophy)—things known or assumed as facts which shapes the basis of reasoning
→ (acc. to computing)—quantities, characters, or symbols where operations are performed by a computer that transmits electrical signals to record on various media platforms
Data
→ ensures that data are not accessed by unauthorized entities
Data Security
HIPAA stands for?
Health Insurance Portability and Accountability Act
RA 10173
Data Privacy Act of 2012
RA 10713 Chapter 1
General Provisions
RA 10173 Section 1
Short Title
RA 10173 Section 2
Declaration of Policy
- the state shall protect the human fundamental right of privacy and communication while ensuring a free flow of information
- the state recognizes the vital role of information and communications technology in nation-building and ensures that personal info is secured and protected
RA 10173 Section 3
Definition of Terms
Freely given permission evidenced by written, electronic, or recorded means
Consent
Race, ethnic origin, marital status, age, color, religion, sex, etc.
Personal Information
RA 10173 Section 4
Scope; applies to to any natural or juridical person involved in information processing
RA 10173 Section 5
Journalist Protection
RA 10173 Section 6
Extraterritorial Application; countries are obliged to deport foreign criminals running away from their country of origin if found guilty
RA 10173 Chapter 2
National Privacy Commission
RA 10173 Section 7
Function of the NPC; administer, implement, monitor, and ensure compliance of the country to international standards of data protection
RA 10173 Section 8
Confidentiality
RA 10173 Section 9
Organizational Structure of the Commission
T or F: The NPC is attached to the DICT
True
DICT stands for?
Department of Information and Communications Technology
T or F: The DICT Chairman acts as the Privacy Commissioner of the NPC
True
The current DICT Secretary
Sec. Gringo Honasan
The three agencies attached to the DICT
- NTC
- NPC
- CICC
NTC stands for?
National Telecommunications Commission
CICC stands for?
Cybercrime Investigation and Coordinating Center
RA 10173 Section 10
The Secretariat
RA 10173 Chapter 3
Processing of Personal Information
RA 10173 Section 11
General Data Privacy Principles
RA 10173 Section 12
Criteria for Lawful Processing of Personal Information; consent must be given and the information is necessary as supported by the law
RA 10173 Section 13
Sensitive and Privileged Information; prohibited by law but with the following exceptions:
- consent is given
- supported by law (legal purposes)
- to protect life and health
- there is lawful and non-commercial objective of public organizations
- medical treatment
RA 10173 Section 14
Subcontract of Personal Information (third-party processing)
RA 10173 Section 15
Extension of Privileged Communication (between doctor and patient)
RA 10173 Chapter 4
Rights of the Data Subject
RA 10173 Section 16
Data Subject Rights
RA 10173 Section 17
Transmissibility of Rights of the Data Subjects
RA 10173 Section 18
Right to Data Portability
RA 10173 Section 19
Non-Applicability
RA 10173 Chapter 5
Security of Personal Information
RA 10173 Section 20
Personal Information Security
- accidental or unlawful destruction, alteration, and disclosure
- accidental loss, human dangers, unlawful access, fraudulent misuse, and contamination
- level of protection is dependent on the kind of information present
- monitoring of 3rd party processors
RA 10173 Chapter 6
Accountability for Transfer of Personal Information
RA 10173 Section 21
Principle of Accountability; the information controller is responsible and accountable for any personal information under their control or custody—including those transferred to a 3rd party whether domestic or international
RA 10173 Chapter 7
Security of Sensitive Personal Information in Government
RA 10173 Section 22
Responsibility of the Heads of Agencies
RA 10173 Section 23
Requirements relating to Access by Agency Personnel to Sensitive Personal Information
Type of access wherein security clearance is required
Onsite and Online Access
Type of access approved by the head of the agency but with a limit of 1000 records only with encryptions required
Offsite Access
RA 10173 Section 24
Applicability to Government Contractors
International Data Laws:
→ Europe (2016)
→ gives control to the individual over their personal data and to simplify the regulatory environment
General Data Protection Regulation (GDPR)
International Data Laws:
→ USA (1996)
→ stipulates how healthcare information should be protected from fraud and theft
→ addresses limitations on healthcare insurance coverage
Health Insurance Portability and Accountability Act (HIPAA)
