Document

Encryption by Default and Circles of Trust: Strategies to Secure Personal Information in High-Availability Environments

Summary  As portable storage devices become increasingly prevalent in the health care sector, concerns also arise regarding the privacy and security of personal health information (PHI). Medical professionals in high-availability data environments, from family doctors to large hospitals, need to ensure data security and protect information through encryption as the default, as the potential for privacy breaches that can be costly and cause lasting damage to their reputation. Taking these steps provides a positive-sum, Privacy by Design approach which benefits both patients and caregivers. The paper introduces the “Circle of Trust” concept, modeled after PHIPA’s “Circle of Care,” which refers to the mobile encryption deployment scenarios and role-based access that enables the free flow of PHI among authorized health-care providers as needed, while at the same time, ensuring PHI remains encrypted and inaccessible to everyone else.

News Release: Privacy and Security as the Default Standard for the Health Sector
Keywords  Health care, encryption, embed by default, personal health information, Privacy by Design, PbD, building privacy into design, privacy protection, circles of trust
Author(s)  Office of the Information & Privacy Commissioner of Ontario

Sunnybrook Health Sciences Centre

CryptoMill Technologies Ltd.
Published Date  Dec 14, 2012

<< Back
Back to Top
25 Years of Access and Privacy
To search for a specific word or phrase, use quotation marks around each search term. (Example: "smart meter")