The process of combating unauthorized access to digital data, such as digital health records
Data security in the healthcare industry
Defends establishments against cybersecurity threats, data breaches, and other security challenges
Data Privacy Principles
Transparency
Legitimate Purpose
Proportionality
Transparency
The practice of being open, honest, and clear about how personal data is collected, used, shared and protected
Lack of transparency in the healthcare system exposes patients to problems such as surprise medical bills
Informed Consent
Nurses should ensure the patients are well-informed about the collection, use, and sharing of their health information
Patient records and Electronic Health Records (EHRs)
Nurses must maintain transparency by ensuring that patients' records are accurate, up-to-date, and accessible only to authorized personnel
EHRs can cause medication errors, technical issues, and mix up patient information
Data sharing and Disclosure
Nurses should be transparent about when and with whom they share patient data
Data Breach Notification
In case of a data breach, nurses and healthcare organizations should promptly notify affected patients and take appropriate measures to mitigate the impact of the breach
Legitimate Purpose
The processing of the information shall be compatible with the declared specified purpose and must not be contrary to your morals or public
Data Minimization
Collecting only the necessary and relevant patient data for the intended purpose
Data Security
Implementing appropriate security measures to protect patient data from unauthorized access, theft, or loss
Proportionality
Processing of information should be adequate, relevant, suitable, necessary, and not excessive in relation to the declared and specified purpose
Patient records
Nurses should only collect and document patient information that is relevant and necessary for providing care, treatment, and support
Access to patient information
Nurses should ensure that access to patient records is limited to those healthcare professionals directly involved in the patient's care
Data Retention
Nurses should adhere to policies and procedures regarding the retention and disposal of patient records
Rights of Data Subject
The right to be informed
The right to access
The right to object
The right to erasure or blocking
The right to damages
The right to file a complaint
The right to be informed
Individuals have the right to be informed about the collection, processing, and use of their personal data
The right to access
Individuals have the right to access their personal data and information held by healthcare providers
The right to object
Individuals have the right to object to the processing of their personal data for certain purposes
The right to erasure or blocking
Also known as the "right to be forgotten", individuals have the right to request the deletion or blocking of their personal data
The right to damages
Individuals have the right to seek compensation for any damages caused by the unlawful processing of their personal data
The right to file a complaint
Individuals have the right to file a complaint with the relevant data protection authorities if they believe their rights have been violated
Individuals have the right to seek compensation for the harm caused by the nurse's actions through a claim against the hospital or the nurse personally
Right to damages
Reinforces accountability and encourages organizations to handle personal data responsibly. Ensures individuals have recourse when their privacy rights are violated.
Right to file a complaint
Grants individuals the authority to raise concerns about the handling of their personal information. Allows recourse if data rights have been violated.
Reasons to file a complaint
Unauthorized access, inadequate security measures, or improper use of personal data
Right to rectify
Empowers individuals to request the correction or updating of inaccurate or incomplete personal data held by organizations.
Right to data portability
Allows individuals to receive a copy of their personal data in a commonly used and machine-readable format, and transmit that data to another healthcare provider.
The Data Privacy Act of 2012 (R.A. 10173) was signed by President Benigno Aquino Jr. on August 15, 2012
The Data Privacy Act aims to protect the fundamental human right to privacy, while ensuring the free flow of information to promote innovation, economic growth, and national development
Personal information
Any information from which the identity of an individual is apparent or can be reasonably and directly ascertained
Sensitive personal information
Personal information that includes information or an opinion about an individual's racial or ethnic origin, political opinions or associations, religious or philosophical beliefs
Privileged information
Any and all forms of data which under the Rules of Court and other pertinent laws constitute privileged communication
Violators of the Data Privacy Act can be penalized by imprisonment up to 6 years and a fine of not less than 500,000 pesos but not more than 500,000 pesos
Technology ethics
The application of ethical thinking to the practical concerns of technology
New technologies give us more power to act, which means we have to make choices we didn't have to make before
Current technologies being utilized in healthcare settings
Artificial Intelligence (AI)
Remote 5G Technology
Wearables and Connected Health Devices
Smart Technologies and Sophisticated Instruments
Digital Transformation
AI
Can help in diagnosing diseases, predicting patient outcomes, and personalizing treatment plans
Remote 5G Technology
Revolutionizing patient care by allowing for remote monitoring and telemedicine