Privacy legislation

The following provisions apply to research whether it is carried out directly by the company or by a contractor acting under its direction. Companies must ensure that the requirements of Australia s privacy legislation are complied with during any research activity, and that any research activities are undertaken by suitably qualified and experienced individuals or organisations ... 

Identifier, Employer ID and Payer ID) and Secretary Shalala s privacy recommendations—to be enforced if Congress fails to pass privacy legislation by August 1999—jeopardize medical privacy for all. Her recommendations include the public[ s] responsibility to allow government access to medical records without consent, for four national priorities healthcare system oversight, public health, medical research, law enforcement—and state health databases. ... 

PROPER INTERPRETATION OF PRIVACY LEGISLATION REDUCES RISKS... 

Since the data contained in equipment such as body scanners may be subject to trans-border storage, there is a compelling need to consider the introduction of uniform privacy laws in order that the interests of the data subject and the data seeker are protected. Although complete uniformity in privacy legislation may be a difficult objective to attain (as has been the attempt to make other aspects of legislation uniform), it will be well worth the while of the international community to at least formulate international Standards and Recommend Practices (in the lines of the various ICAO Annexes) to serve as guidelines of State conduct. After all, as Collin MeUors pointed out ... 

Privacy, confidentiality, and discrimination have received more attention from commentators and legislators than any other genome-related social... 

Smith, M.S. Congressional Research Services, Internet Privacy Overview and Pending Legislation (19 December 2003). 

Privacy The website must conform to legislation and applicable codes of conduct governing the privacy, security and confidentiality of personal information. 

The traditional security model can neither ensure confidentiality of sensitive healthcare information and protection of personal privacy nor conform to the governing legislation (e.g., HIPAA in United States, PIPEDA and FIPPA in Canada, EU Privacy Directive in the European countries) when healthcare services are offered through a public infrastructure such as the Internet. Obviously the security policy for an IT system will remain as only part of the traditional big picture, which includes physical security (e.g., locks for buildings, badge access to secure rooms), logical security (e.g., passwords for computers or networks, smartcards), and operational policies and procedures... 

We may also recall that there is a further problem in that the data are, in general, highly sensitive and thus fully protected. To address the security requirements and to comply with the legislation for protection of personal privacy, certain personal information must be kept at the initial collection point in the original medium and is prohibited from being copied to or stored in another medium at another location. This was the reason why many workers in medical IT believed that the personal lifetime health record needs to be dynamically assembled out of the information retrieved on demand from various sources. 

Women s privacy is a need and a value that has irtfluenced and continues to influence Arab societies, as well as other Islamic societies. The rules that govern this need are socially defined and mutable (based on Hakim 1986 Arkoun 1990 Roald 2001). Therefore, they are practiced differently according to the cultural context, the period, the situation, and the women s social status their age, education, and income level. For example, in Saudi Arabia, the rales which govern women s privacy in public spaces are set out in legislation. In Palestine, on the other hand, these rales are defined socially. Also, younger, higher income, and better educated women are less concerned about privacy rales. This does not mean that these women do not need privacy, but the required privacy for them is less than that for other women. 

When experimental research is being conducted (i.e. there is some intervention which would not occur in ordinary practice -e.g. randomisation), informed consent is considered essential. For non-experimental research (i.e. mere observation of ordinary practice), consent of individuals is generally not required and may not be feasible. The patient s right to privacy is a key issue and individual patient data need to be anonymised and held securely. Confidentiality legislation varies considerably between countries and potential future increases in stringency may threaten the viability of epidemiological research. 

R.D. Mann UK Databases, privacy, and confldentiaUty—the effect of proposed legislation on pharmacoepidemiology and drug safety monitoring... 

---