EU Privacy Directive

Directive on the Protection of Individuals with Regard to the Processing of Personal Data and on the Free Movement of Such Data, also known in short form as the EU Privacy Directive, The European Union... 

The traditional security model can neither ensure confidentiality of sensitive healthcare information and protection of personal privacy nor conform to the governing legislation (e.g., HIPAA in United States, PIPEDA and FIPPA in Canada, EU Privacy Directive in the European countries) when healthcare services are offered through a public infrastructure such as the Internet. Obviously the security policy for an IT system will remain as only part of the traditional big picture, which includes physical security (e.g., locks for buildings, badge access to secure rooms), logical security (e.g., passwords for computers or networks, smartcards), and operational policies and procedures... 

The EU Data Privacy Directive also has great breadth and intimately entwines matters of privacy and consent and stipulates that Member States shall provide that personal data may be processed only if. 

---