Ethics, Privacy, and Security

Question 1

Issues in the use of appropriate informatics tools in clinical settings, determination of users, system evaluation, system
development and maintenance, and the use of computers in tracking clinical outcomes.

Answer 1

Privacy and Confidentiality of the Patient

Question 2

Ethical Principles for Appropriate Use of Decision-Support Systems (Shortlife and Cimino, 2013):

Answer 2

o A program should undergo appropriate evaluation before use in clinical practice.
▪ Should perform efficiently at an acceptable financial and timeframe cost.

o Adequate training and instruction should be completed before proceeding to the implementation.

o A qualified health professional should be assigned to handle concerns about uses, licenses, and other concerns.
▪ The software systems’ applications should not replace functions such as decision-making.

Question 3

the application of the principles of ethics in the domain of health informatics (healthcare and software informatics).

Answer 3

Health Information Ethics

Question 4

Guide the reasoning and decision-making of all people and organizations involved in healthcare.

Answer 4

GENERAL ETHICS

Question 5

Ethical Principles:

Answer 5

Autonomy & Beneficence and Non-Maleficence

Question 6

the idea of either allowing individuals to make their own decisions in response to a particular societal context or being free from external influence or control.

Answer 6

Autonomy

Question 7

do good and do no harm.

Answer 7

Beneficence and Non-Maleficence

Question 8

The ethical behavior expected from an individual assigned to handle information.

Answer 8

Information Ethics

International Medical Informatics Association (2016)
(IMIA)

Question 9

The ethical duties and responsibilities of software developers to the stakeholders.

Answer 9

Software Ethics

Question 10

Seven Principles of Informatic Ethics

Answer 10

1. Information-Privacy and Disposition
2. Openness
3. Security
4. Access
5. Legitimate Infringement
6. Least Intrusive Alternative
7. Accountability

Question 11

Applies to individual and their aversion to eavesdropping

Answer 11

Privacy

Question 12

More closely related to unintended disclosure of information

Answer 12

Confidentiality

Question 13

solutions and tools that may be utilized to implement security policies at different levels of health
organization.

Answer 13

Safeguards

Question 14

– implemented by the management as organization-wide policies and procedures.

Answer 14

Administrative Level

Question 15

– mechanisms to protect equipment, systems, and locations with data.

Answer 15

Physical Level

Question 16

automated processes to protect the software and database access and control.

Answer 16

Technical Level

Question 17

• Regular risk assessment of the health information technology environment.
• Continuous assessment of the effectiveness of safeguards for electronic health.
• Detailed processes and procedures for viewing and administering electronic
  health information.
• Reporting of security breaches and continued health information technology
  operations.

Answer 17

Administrative Safeguards

Question 18

• Placing office alarm systems.
• Locking offices and areas that contain computing equipment that stores electronic
  health information.
• Having security guards that make regular inspections in the vicinity.

Answer 18

Physical Safeguards

Question 19

• Configuration of computing equipment to ensure security.
• Using certified applications and technologies that store or exchange electronic
  health information.
• Setting up access controls to health information technology and electronic health
  information.
• Encryption of electronic health information.
• Regular audit of the health information technology operations.
• Having backup capabilities.

Answer 19

Tecnhnical Safeguard

Question 20

emphasizes that technological security tools are essential components of modern distributed healthcare information systems.

Answer 20

National Research Council (1997)

Question 21

– accurate and up-to-date information is available when needed.

Answer 21

Availability

Question 22

– healthcare providers are responsible for their access to and use of information.

Answer 22

Accountability

Question 23

– know and control the boundaries of trusted access to the information system.

Answer 23

Perimeter Identification

Question 24

enable access to essential information and limit beyond legitimate need.

Answer 24

Controlling Access

Question 25

– record owners, data stewards, and patients understand and have effective control of information privacy and access.

Answer 25

Comprehensibility and Control