Data Protection, Inalterability and long-term Archiving of Electronic Patient Data

To allow all parties involved in the public health sector – patients and service providers alike – to trust in the security of their electronic data when processing, transmitting and archiving them, IT Security must be adequately and continuously ensured throughout all layers and entities of the workflow. In addition to this, legal requirements for data protection, inalterability and long-term preservation must be considered.

• Data protection must be continuously implemented and verifiable for all highly sensitive data of the parties involved.
• The electronic processes must be unalterable, that is: all transactions must be provable through manipulation-secure verification in order to exclude risks of liability.  
• Electronic certificates according to the German Signature Act (SigG) are indispensable for legally compliant long-term archiving. With these certificates, qualified electronic signatures which inform about the identity of the signer and the integrity of the signed document can be issued.

An adequate level of IT Security can only be achieved if technical security aspects are systematically integrated into the design-phase of new applications via IT Security management. The IT Security-experts at secunet ensure that the best security solution available is integrated, all legal requirements are met and relevant standards are complied with. This way, you will gain sustainable and simultaneously user-friendly IT applications.

Benefit from secunet’s expertise in your eHealth-project:

• Security concepts: gematik-compliant, according to IT security standards
• Integrated security management systems
• Data protection
• Inalterability
• Long-term archiving